Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a8dba54ce836fd4f77c2a3e17cac116fdc739829.roa
File: a8dba54ce836fd4f77c2a3e17cac116fdc739829.roa (raw, json)
Hash identifier: qVRSNvB1trHtLJNHqiX+ahCWy7q54VoAc8UUNUUMMDU=
Subject key identifier: E3:A7:98:FF:76:9D:86:C6:F0:47:AB:0B:5F:A7:42:4D:44:8E:A0:B6
Certificate issuer: /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial: 2E4C0F
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a8dba54ce836fd4f77c2a3e17cac116fdc739829.roa
Signing time: Thu 07 Dec 2023 13:01:06 +0000
ROA not before: Thu 07 Dec 2023 13:00:46 +0000
ROA not after: Thu 07 Dec 2028 13:00:46 +0000
asID: 262231
IP address blocks: 186.124.116.0/24 maxlen: 24
200.43.81.0/24 maxlen: 24
200.45.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034127 (0x2e4c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Validity
Not Before: Dec 7 13:00:46 2023 GMT
Not After : Dec 7 13:00:46 2028 GMT
Subject: CN=a8dba54ce836fd4f77c2a3e17cac116fdc739829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5e:d1:0c:39:70:69:da:ca:7f:1d:ff:e5:2e:
0d:dc:bc:db:a4:74:19:6b:e8:4a:b5:e6:05:9e:8e:
8e:ed:56:3f:c3:11:07:2f:d6:e3:c5:e0:0d:ed:ea:
b0:4e:44:c0:c3:67:fb:c2:96:66:b5:88:ce:bc:bf:
ba:aa:ba:74:58:fa:63:a9:08:52:d9:55:97:27:30:
df:78:06:df:93:8f:5c:34:b9:ba:98:f9:e2:32:dd:
5b:76:16:14:78:dc:7a:a8:3c:b7:cc:ee:f8:8d:07:
4e:1b:a6:03:e1:67:a1:4b:59:1d:b1:ce:43:f6:98:
e6:97:44:40:f0:82:a4:29:cd:a9:2c:02:d9:91:84:
57:bb:a7:ca:e9:7d:47:9d:07:5b:85:46:bb:d1:fc:
27:fb:f5:34:26:c0:60:fc:2b:77:df:aa:18:d2:82:
ac:ef:ef:f3:b9:c9:47:70:23:54:66:c3:a1:87:ca:
d5:2b:4a:48:d1:5c:e9:09:de:b1:cf:82:43:87:5e:
27:30:9b:f7:f9:44:83:ff:d3:55:7a:cc:f2:40:7a:
c2:ea:cc:02:9e:db:26:d0:7d:af:7e:96:53:af:0d:
15:9a:db:5d:0e:04:67:6a:95:dd:5c:69:a0:2b:0a:
91:21:2a:e6:b7:ca:09:09:60:0b:52:dd:66:da:79:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A7:98:FF:76:9D:86:C6:F0:47:AB:0B:5F:A7:42:4D:44:8E:A0:B6
X509v3 Authority Key Identifier:
keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a8dba54ce836fd4f77c2a3e17cac116fdc739829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.124.116.0/24
200.43.81.0/24
200.45.8.0/24
Signature Algorithm: sha256WithRSAEncryption
63:76:1b:60:b7:50:14:03:ff:60:fa:8d:9a:d3:40:c0:91:bf:
e5:ba:c4:5d:01:ff:49:da:80:a9:11:d7:fd:3a:88:d0:e0:24:
44:48:15:be:a6:2a:54:3f:7a:25:2c:c5:f4:6a:8e:87:39:00:
7d:c7:37:46:3a:11:bb:ef:fe:94:ae:b1:fa:5e:10:f0:86:55:
43:67:50:e3:28:36:09:11:6e:56:82:0a:2f:56:c6:d5:d9:83:
49:66:2d:12:bf:90:8c:74:b9:85:06:2e:c0:d2:45:1d:6d:ca:
b2:9a:f4:12:29:23:d7:17:c8:ec:bc:58:5f:e5:e6:fe:cc:c0:
d3:b5:fb:27:8d:59:d2:a6:ff:c2:22:ee:20:72:39:89:54:3c:
e7:40:cd:f9:3c:1c:24:64:74:19:88:1b:98:99:62:6a:b3:8b:
94:85:b0:38:3e:0d:20:72:61:78:2a:5d:85:1e:0e:37:66:6e:
81:4d:c9:5d:e9:a3:c8:68:5a:50:84:2e:30:c2:ba:3e:ca:77:
f7:80:da:6d:d8:e8:da:1b:2a:fe:22:bf:50:10:e4:c1:af:4b:
b5:3c:57:d2:85:4b:af:8f:05:a5:fc:2b:15:ec:aa:36:68:90:
34:c3:83:c3:fa:d4:df:22:52:d3:2b:54:87:37:a7:8b:9e:31:
ca:0a:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org