Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0bc1983967ee0212a46e4a1649f954477a2811af.roa
File: 0bc1983967ee0212a46e4a1649f954477a2811af.roa (raw, json)
Hash identifier: gLRVmAftzBrq3sr77CKuGQCQHlKbzeTXPq5KnLwfrHM=
Subject key identifier: CE:59:17:A5:5D:78:51:CA:B0:70:5A:ED:4D:1E:F0:75:9B:7C:D2:11
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 142E97
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0bc1983967ee0212a46e4a1649f954477a2811af.roa
Signing time: Tue 30 Jan 2024 19:35:30 +0000
ROA not before: Tue 30 Jan 2024 19:35:30 +0000
ROA not after: Fri 30 Jan 2026 19:35:30 +0000
asID: 10834
IP address blocks: 200.63.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322647 (0x142e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Jan 30 19:35:30 2024 GMT
Not After : Jan 30 19:35:30 2026 GMT
Subject: CN=0bc1983967ee0212a46e4a1649f954477a2811af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:32:ce:c9:04:98:49:6c:17:b4:76:c3:e3:
aa:b6:1c:6b:90:16:28:02:e8:66:64:f6:86:54:2b:
7b:7d:82:86:df:55:76:b6:8d:b9:00:24:ea:84:64:
ba:87:da:b0:56:76:a2:22:23:65:70:fe:43:82:9c:
ec:49:85:09:17:43:74:37:86:13:7d:85:81:d4:8f:
c8:86:0f:2c:1f:ae:e5:58:94:a8:e0:ec:69:0f:ee:
1c:6f:97:98:61:f1:ee:1c:82:3d:4a:f8:45:09:b2:
d9:11:cd:6d:59:8f:24:7f:d2:15:f7:2a:99:a0:dd:
d8:10:cc:40:41:f0:af:27:e1:98:49:42:85:88:7c:
b8:88:2b:79:bd:35:46:6c:72:80:66:e9:d7:82:bb:
1d:1a:d4:52:b0:b6:ce:20:75:9e:c5:e6:db:c3:7e:
d4:5d:03:02:65:9b:b5:bf:b8:74:2c:74:e1:41:2a:
45:21:78:b5:61:7a:43:be:81:e5:52:14:92:9a:f1:
bf:ee:86:25:76:19:2f:a8:09:ae:85:54:e1:1e:86:
c4:08:ca:12:c5:b8:0b:9b:8b:6e:ba:90:e8:af:05:
25:0e:8d:90:15:05:c4:07:21:84:a8:02:f9:c8:50:
d5:aa:af:77:7c:55:52:e3:30:82:23:74:2c:de:21:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:17:A5:5D:78:51:CA:B0:70:5A:ED:4D:1E:F0:75:9B:7C:D2:11
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0bc1983967ee0212a46e4a1649f954477a2811af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.63.128.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:af:66:91:ab:24:8e:97:b0:7a:91:fe:d1:e2:b5:24:62:e0:
23:56:b3:20:45:44:7b:fd:23:23:1a:aa:b0:d4:cb:72:30:e2:
81:37:8f:e4:1f:a0:9a:8b:33:d2:45:84:83:c4:9d:84:c7:88:
db:58:8d:fa:ba:b7:35:b0:d8:1b:05:5c:9a:26:13:3d:fa:62:
6f:95:7c:6f:78:a0:9f:5c:a9:a5:a8:ff:fa:81:63:80:db:da:
25:5d:1b:0d:71:0b:da:ac:67:08:dd:eb:27:0f:0d:07:ef:99:
a8:0c:a1:43:a4:ce:01:e2:16:ed:c9:49:d7:ee:53:0d:f1:06:
f5:c3:34:f9:82:06:0e:0a:24:35:82:fe:07:5f:e4:96:08:15:
c4:4f:97:4f:f5:78:ec:c6:8c:a3:10:d1:75:35:7c:27:28:48:
fe:41:bf:4a:30:ef:67:c0:8a:73:8c:3d:cc:3b:b6:a5:03:cf:
28:59:05:31:d0:2b:42:63:37:c4:f8:91:a8:ac:93:4f:45:b8:
1f:aa:25:32:d2:de:bd:58:ab:fb:7e:d4:2c:9e:30:5f:d2:7f:
23:6d:7e:66:7d:e8:c5:68:fd:c2:be:8f:08:e9:60:89:b9:d2:
88:08:3d:7a:25:7c:cc:eb:7a:7e:54:f4:0f:b7:32:17:43:3f:
d0:e6:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org