Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/311f11a6ed053b558b662e3e777e98a313d5a873.roa
File: 311f11a6ed053b558b662e3e777e98a313d5a873.roa (raw, json)
Hash identifier: tMcwPdrpbw559xqI0pVPKAEF9OTWbt3pIt1nbA4MlU8=
Subject key identifier: 28:D1:51:BF:EE:48:72:CB:72:56:84:21:EB:31:D5:C7:B3:D8:D3:CB
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DCFB2
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/311f11a6ed053b558b662e3e777e98a313d5a873.roa
Signing time: Thu 07 Dec 2023 12:42:37 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 27823
IP address blocks: 200.45.208.0/24 maxlen: 24
181.13.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3002290 (0x2dcfb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=311f11a6ed053b558b662e3e777e98a313d5a873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:40:30:90:37:83:b9:a5:36:78:54:2c:78:
12:23:7d:06:bd:1e:fe:0b:d7:bf:a6:e5:b2:50:c5:
2d:07:f4:97:6c:04:4a:9c:a5:2a:b1:5d:ea:8d:fa:
ad:94:9e:97:8b:2f:32:bc:0a:fa:57:ce:2d:d2:dd:
72:c6:67:ad:5a:73:54:f1:bc:0e:11:da:c1:ff:a1:
b5:80:af:4b:68:90:e7:54:72:9e:6e:56:e5:f9:e3:
5b:7e:55:1b:15:6b:73:e0:a3:6e:b4:b9:57:82:f0:
bf:ba:4b:62:2c:a9:64:d2:39:f9:78:c2:6e:76:5c:
5f:ee:16:ac:a1:0e:34:41:67:cd:d3:d1:ed:58:73:
12:58:5b:db:53:5e:87:d1:e8:e2:bf:34:f1:bd:d4:
ff:12:85:a6:5d:2d:83:84:68:86:b1:25:68:70:b0:
bc:7c:2a:39:5d:94:b3:c5:de:82:ea:2d:b9:bd:11:
df:f8:8c:d1:b5:15:a4:15:ba:c4:e2:7e:bc:fd:8a:
8a:d7:f4:a6:e1:65:8a:db:18:84:2f:68:86:7b:64:
eb:2e:2e:d9:e6:75:9a:57:c2:be:7f:3c:64:e0:c5:
91:04:20:1e:4a:c5:94:30:ad:f7:03:d3:38:3f:d7:
d7:1d:11:4d:20:66:eb:53:d5:e8:d4:a3:37:c3:95:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D1:51:BF:EE:48:72:CB:72:56:84:21:EB:31:D5:C7:B3:D8:D3:CB
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/311f11a6ed053b558b662e3e777e98a313d5a873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.13.244.0/24
200.45.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e0:e4:39:28:d9:9e:48:69:22:41:33:3f:59:26:03:05:2c:
e3:db:68:2f:0c:e3:96:ed:19:65:75:44:e8:f7:9e:63:90:e7:
0c:22:d2:6f:05:b4:d0:4f:2f:46:f2:fa:80:a1:f7:90:3a:a6:
be:d1:34:17:d4:0e:44:27:c6:26:e8:ea:18:f8:be:cd:f6:60:
a8:2a:6a:db:e8:10:2c:0a:e2:07:ae:d0:db:5a:0a:b5:bb:47:
da:1c:84:91:50:db:47:0e:25:6c:3c:60:64:87:63:b7:ae:2d:
a7:c5:85:c8:16:7f:dd:9f:78:79:7a:59:48:da:1f:20:c6:b1:
fc:a0:8a:c6:2f:0c:78:d7:84:90:39:98:8c:09:b3:82:b5:53:
ec:c5:2a:19:91:26:d1:0b:1d:e5:c8:b1:32:6e:04:a4:f2:05:
54:65:d1:cc:76:45:c2:73:ef:20:e8:b5:59:32:5a:73:25:37:
0a:40:79:fa:c1:8c:c7:66:57:ae:05:43:42:71:2c:1a:d8:f5:
89:07:29:ba:b0:09:17:90:5c:45:0d:40:c9:ae:b6:43:bb:08:
40:b2:b3:d3:a9:5f:3b:5c:0d:06:20:c8:67:47:3a:eb:ae:9b:
66:15:7c:45:87:05:bc:00:07:5d:f4:6f:13:c6:9d:41:9e:28:
09:bd:a8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:53:58 2025 by rpki-client