Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/6d0f9af8abd194feb5cad5f54456cad9aa30d502.roa
File: 6d0f9af8abd194feb5cad5f54456cad9aa30d502.roa (raw, json)
Hash identifier: HvuLq/nuWniE0hkGKDCilWGR0OehrzTW/kl0z5MRK8k=
Subject key identifier: A2:A8:65:1B:BE:23:C2:05:0C:E3:B0:B4:CE:98:59:99:76:DB:B6:AC
Certificate issuer: /CN=2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43
Certificate serial: 034F2B
Authority key identifier: 0C:0D:26:81:4E:78:5C:F0:41:C2:C4:45:DC:E7:13:52:33:C6:2B:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/6d0f9af8abd194feb5cad5f54456cad9aa30d502.roa
Signing time: Thu 17 Aug 2023 02:17:31 +0000
ROA not before: Wed 16 Aug 2023 02:17:30 +0000
ROA not after: Sun 17 Aug 2025 02:17:30 +0000
asID: 264690
IP address blocks: 200.10.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216875 (0x34f2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43
Validity
Not Before: Aug 16 02:17:30 2023 GMT
Not After : Aug 17 02:17:30 2025 GMT
Subject: CN=6d0f9af8abd194feb5cad5f54456cad9aa30d502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:05:da:ce:73:6a:41:84:7b:5a:cd:e2:32:
8e:68:6c:a1:3b:73:49:d4:c5:17:b3:3c:e5:6d:d4:
d6:18:8d:c2:40:ea:f9:55:cc:29:5e:30:b5:86:6d:
7b:2c:0d:aa:52:e7:4c:d1:1c:59:9b:87:53:69:0a:
b5:89:2f:2f:66:e4:86:4a:ad:4f:2e:33:54:c9:8c:
53:b8:fa:9b:ab:9a:f7:b8:7a:20:f1:ab:db:32:9f:
0b:4d:8f:96:48:8a:be:4f:51:47:3b:97:8f:58:db:
15:e9:07:7e:31:73:9c:00:c0:28:66:95:44:47:47:
22:0c:0a:53:6c:f7:d2:e2:82:67:5e:a0:ee:3d:c2:
71:87:7d:1e:9a:2a:e7:03:47:a6:5b:1f:76:c2:b6:
ca:b6:69:33:d9:80:06:26:98:ac:45:dc:c9:0b:86:
12:ab:54:2b:90:e2:39:d4:25:c0:24:6b:1e:86:f8:
67:3a:f3:01:4b:18:98:87:62:a2:0d:dc:0a:9f:6c:
a8:09:2d:5d:54:d2:69:16:6d:d8:f2:fe:a2:07:0c:
96:cb:34:11:81:67:dd:14:09:86:a6:6f:47:99:52:
d8:5b:34:8b:ac:b9:f0:8c:4f:d1:a2:92:e5:a5:3d:
ee:3b:06:0c:5a:fb:4d:82:a9:cb:06:12:2d:dd:47:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A8:65:1B:BE:23:C2:05:0C:E3:B0:B4:CE:98:59:99:76:DB:B6:AC
X509v3 Authority Key Identifier:
keyid:0C:0D:26:81:4E:78:5C:F0:41:C2:C4:45:DC:E7:13:52:33:C6:2B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/6d0f9af8abd194feb5cad5f54456cad9aa30d502.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.156.0/23
Signature Algorithm: sha256WithRSAEncryption
73:93:a6:4d:b7:2c:43:eb:ab:e1:7f:cd:c9:b6:59:24:58:84:
8e:b7:5f:92:82:c8:46:d9:84:0f:f7:7f:f6:c9:40:6f:f5:cb:
ab:13:92:15:dd:cb:e1:05:2b:e9:7e:f3:4f:22:b5:cb:ed:66:
0b:18:59:87:02:cd:a7:ea:d1:55:24:f8:fd:6a:86:f4:d8:95:
4a:63:a8:aa:1b:2d:80:69:89:1d:60:c2:73:db:d7:bf:ac:6d:
ff:a2:22:5d:6e:79:10:da:22:d8:6f:b8:ae:fa:99:4b:8d:f0:
7a:d4:a8:bd:c2:f3:9a:df:a2:ca:a9:3e:c2:e3:5d:42:30:b1:
2d:98:9b:2f:97:3b:ef:34:7a:1e:87:2b:c5:82:d1:ad:80:51:
c8:a1:43:91:1d:c9:05:98:d8:be:0f:af:bb:fc:21:8a:c2:85:
dd:de:d1:09:95:f3:4c:2f:5b:df:14:6e:6a:96:db:bb:70:4b:
98:44:ea:c0:fe:db:81:0b:7f:51:66:10:e9:c4:6c:c8:87:32:
fa:47:92:25:70:ce:d1:94:8e:b6:53:cf:26:b0:f4:ec:01:ca:
7f:ce:cb:1d:61:a3:4f:ac:90:e2:a0:cc:51:f9:e1:6a:e0:55:
f7:87:01:17:79:7c:7d:5d:22:3f:c5:e7:ee:06:23:20:40:30:
2e:89:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org