Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/0e3af7db983747efdd1a386b79b9a738c7cabedb.roa
File: 0e3af7db983747efdd1a386b79b9a738c7cabedb.roa (raw, json)
Hash identifier: C95dpGkffJJBVB6l6SUWkOtoajlXiM7xAU8gyW8r+pw=
Subject key identifier: D8:A0:28:CD:C5:3E:99:FE:B6:05:5E:3F:11:3F:A3:8F:5E:7F:17:E0
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 2733AC
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/0e3af7db983747efdd1a386b79b9a738c7cabedb.roa
Signing time: Mon 17 Apr 2023 13:00:38 +0000
ROA not before: Sun 16 Apr 2023 13:00:28 +0000
ROA not after: Thu 17 Apr 2025 13:00:28 +0000
asID: 265877
IP address blocks: 200.43.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2569132 (0x2733ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Apr 16 13:00:28 2023 GMT
Not After : Apr 17 13:00:28 2025 GMT
Subject: CN=0e3af7db983747efdd1a386b79b9a738c7cabedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:44:84:52:3b:a9:8c:3a:71:f9:3a:b3:70:1b:
d5:09:4b:4b:4f:bf:2b:db:29:0a:3e:9f:1d:65:7b:
e8:3b:07:05:24:b5:a9:46:1b:be:74:a2:ef:27:5f:
28:ba:5c:05:83:4f:ce:95:17:2f:0d:e9:a4:da:53:
e9:da:59:54:f9:fc:18:3e:b3:9a:2e:cf:e7:36:5a:
e8:57:37:c5:23:0b:a3:10:3c:87:0f:bb:40:e6:d6:
1d:bc:77:6b:d3:e3:7f:f9:b8:e3:62:8c:a0:05:fe:
3a:c4:15:35:ca:ca:da:61:c1:e8:b3:02:5a:57:b7:
82:b6:63:5f:a6:48:50:89:17:f0:a1:7b:bc:96:dd:
45:f0:87:f7:46:8e:ad:a0:7b:20:6e:23:6f:92:42:
12:60:41:c3:05:88:2c:1c:f0:6e:5c:5a:53:b6:f2:
d8:9f:d5:ed:cd:13:cd:62:86:6c:5f:65:ea:72:2d:
49:d4:ee:ad:c4:96:78:8d:7a:08:6b:21:fc:77:40:
cf:54:73:1d:10:0e:f9:c4:67:bf:04:3e:af:16:de:
0c:3a:df:9f:a0:61:90:71:78:3a:66:5d:23:44:9e:
53:52:7a:08:e1:1f:1b:d2:03:ab:9c:ac:87:82:83:
c1:75:00:1c:85:cf:5c:26:a4:85:c0:12:e3:5c:55:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A0:28:CD:C5:3E:99:FE:B6:05:5E:3F:11:3F:A3:8F:5E:7F:17:E0
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/0e3af7db983747efdd1a386b79b9a738c7cabedb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.43.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b5:e7:31:85:2d:19:10:d8:04:cb:ac:da:0e:cd:aa:f5:6a:
01:1e:1f:17:7a:21:fd:f9:e6:83:7b:1c:db:b0:40:c3:94:bf:
f8:04:6c:7e:49:9e:c5:f3:9d:41:2c:40:b0:db:f2:e7:82:b0:
82:b6:2b:ac:3e:ae:ff:67:b5:57:6b:96:5e:6c:35:e4:dd:b2:
b3:d5:d6:59:8a:ca:e0:0c:65:98:b3:16:12:ab:cd:0b:13:c9:
7b:b8:73:e7:ea:9d:a2:64:ee:f8:4e:43:26:c5:3f:e3:ff:36:
5c:29:63:66:c3:e9:c9:3c:6a:cc:87:98:b6:94:d7:5e:f4:e8:
7d:92:b5:ac:9b:1e:45:84:b8:27:e5:61:98:83:6d:d5:02:71:
1b:b0:3d:f6:31:66:2b:d6:b5:90:8c:35:f8:13:85:66:17:45:
56:78:51:cf:6b:ad:8d:f6:e9:d9:19:64:a9:76:72:47:b1:74:
a5:9c:d3:4e:df:b6:e1:6e:27:9f:2c:cf:61:13:9d:10:a3:cc:
96:7b:8a:67:68:58:07:37:f6:76:32:1c:1d:73:91:75:4a:7c:
1c:fe:23:67:85:75:ff:ed:90:26:16:77:40:64:aa:c2:4e:af:
9b:3b:06:3b:0f:10:85:aa:e3:3c:99:21:b0:86:9d:b8:f9:c3:
d5:8d:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org