Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a88f6fae0fc87799090523d9c99912b31dbd5f0b.roa
File: a88f6fae0fc87799090523d9c99912b31dbd5f0b.roa (raw, json)
Hash identifier: sPTfgjVTFBmDgQ+rj9mwb/pVR6GOHnEXrnJaWyEF0wM=
Subject key identifier: 71:9A:AC:BA:CE:1C:6D:0E:2A:7D:EA:58:48:18:FC:D0:FA:7A:EF:92
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2D8D4A
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a88f6fae0fc87799090523d9c99912b31dbd5f0b.roa
Signing time: Thu 07 Dec 2023 12:42:07 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 28052
IP address blocks: 200.42.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985290 (0x2d8d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=a88f6fae0fc87799090523d9c99912b31dbd5f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:2e:a7:cf:b8:37:6e:60:3d:8c:f6:c5:b7:
d0:9e:b0:72:12:ab:66:3b:84:0e:b5:1f:2d:fb:83:
d4:c9:9f:63:6d:1c:fa:dc:87:d1:22:f9:ad:37:33:
d6:9e:0e:e5:68:3c:7a:fb:07:95:44:5b:65:20:1a:
2c:c7:bc:13:c3:03:0f:35:98:ad:27:c0:cc:46:45:
f0:16:28:98:0d:18:4e:ee:b1:c0:07:85:bb:de:cd:
0b:91:a2:ef:4b:d9:77:18:e7:59:cd:bf:64:47:ae:
5d:ce:1b:0e:cf:51:4a:53:98:a7:05:b3:53:c1:a5:
0d:8c:3d:8a:3e:6a:88:03:e0:94:b6:39:f0:68:d5:
c2:88:d6:a8:80:62:0d:84:74:c4:c6:1d:79:4f:f0:
23:5c:91:4d:6f:a9:c1:96:0e:c4:95:dc:4c:ca:63:
7f:55:0c:92:97:2f:59:34:6a:e3:81:5d:ce:6a:11:
9c:30:dd:f3:25:48:55:c1:d3:69:7d:ce:8b:b9:ad:
3b:10:12:36:5b:03:61:52:de:bc:ff:e1:c3:58:d3:
84:60:02:9c:82:aa:8f:54:33:5d:d2:72:b6:c0:53:
04:78:1d:d3:66:a5:0a:ae:9c:5f:68:8d:63:09:f0:
5b:3b:3d:30:37:f5:a3:1e:22:36:99:3c:02:fd:28:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:AC:BA:CE:1C:6D:0E:2A:7D:EA:58:48:18:FC:D0:FA:7A:EF:92
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a88f6fae0fc87799090523d9c99912b31dbd5f0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.42.13.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b1:57:47:62:82:ee:c4:fe:17:20:43:40:35:70:9b:e2:07:
fc:3d:ad:06:db:51:a9:2d:74:16:b8:ea:2b:c8:f2:5b:80:96:
51:db:9a:47:19:00:c8:3d:fe:bb:cc:05:12:37:db:86:ac:ff:
3b:f1:95:2c:c7:7f:81:8b:b9:bb:65:6a:0c:96:77:f7:8d:97:
8a:72:7e:9a:e7:b1:07:4d:fb:ec:5c:61:4a:5c:e2:8a:c8:76:
53:1c:01:2d:08:2e:26:d0:91:79:c0:69:9d:23:7c:1a:1f:23:
47:62:e5:24:dd:75:1b:f1:eb:5d:3b:c9:6e:e9:ae:18:f0:09:
a0:1a:15:a6:d5:e3:e1:a0:aa:c3:f2:ca:92:91:fb:3b:06:de:
76:b9:ca:65:bf:2f:1c:33:04:7c:7f:37:94:4d:50:95:66:52:
fe:1b:f4:a7:5f:da:58:1f:d8:5d:7e:50:d0:5d:13:77:76:76:
92:bc:3f:72:f0:76:f1:6c:63:63:2a:ad:b9:8d:d9:7e:e9:d5:
87:19:9d:15:dc:8e:19:28:e9:e8:8e:4e:b7:4f:c7:65:8c:f9:
18:90:f2:4a:57:f6:79:b9:9f:56:c7:0e:ae:d5:3f:19:9c:92:
a2:e7:e9:aa:18:6c:b6:b9:c8:79:4b:cd:83:c8:12:f6:a7:b6:
3f:4d:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:49:43 2025 by rpki-client