Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4cbe71047315d097cfeb34708fcd2b24c9d85d49.roa
File: 4cbe71047315d097cfeb34708fcd2b24c9d85d49.roa (raw, json)
Hash identifier: dSl6DjICNzBXCUlWszxA4OZkN7zeA9ZoeAMP2uOnino=
Subject key identifier: 8D:8E:1C:D9:DB:C9:A1:DC:4E:96:D4:5B:89:7D:36:DA:AD:06:29:FB
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 140F32
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4cbe71047315d097cfeb34708fcd2b24c9d85d49.roa
Signing time: Tue 30 Jan 2024 17:40:35 +0000
ROA not before: Tue 30 Jan 2024 17:40:35 +0000
ROA not after: Fri 30 Jan 2026 17:40:35 +0000
asID: 20305
IP address blocks: 200.0.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314610 (0x140f32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Jan 30 17:40:35 2024 GMT
Not After : Jan 30 17:40:35 2026 GMT
Subject: CN=4cbe71047315d097cfeb34708fcd2b24c9d85d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:c4:e6:76:70:e7:ed:e6:a0:3a:b7:6b:6e:
42:1a:c5:30:c1:ff:01:7c:38:a5:28:09:57:fc:da:
d8:47:cc:ba:11:bb:be:50:48:e7:60:d1:aa:d6:56:
ed:02:e5:38:1c:e7:35:da:27:24:b7:2d:bd:e1:7b:
2f:ac:81:e2:06:35:07:ff:ae:c4:b3:4a:01:93:b8:
f2:ff:90:4c:07:20:a6:89:69:d1:9e:fb:4a:a9:5a:
44:ca:a5:67:c3:07:93:7c:ab:1b:aa:a5:8f:a1:ef:
d6:7c:cc:fb:3a:f1:63:6d:0d:4d:32:c3:3e:21:be:
eb:e6:66:3d:db:09:ff:7d:5b:73:d4:72:c3:57:ba:
8b:16:4b:e9:2c:a6:73:a4:45:c0:90:e0:b7:41:82:
3f:85:a6:84:5f:82:1b:3b:2f:86:e3:0f:42:79:5f:
77:07:b3:b1:5a:7f:1f:6d:ee:e5:f7:c2:eb:ac:1a:
99:27:c8:ea:af:27:15:2e:1f:e5:ef:7b:aa:68:e8:
bf:83:10:df:5e:ff:c7:2b:fd:6b:d6:0f:6f:e2:05:
3b:a6:0d:3a:53:79:1b:7f:02:69:9d:e6:18:bc:77:
c1:65:19:68:45:bf:be:d4:f9:56:38:90:ab:a9:98:
17:35:03:01:83:57:67:91:de:68:23:fc:e1:60:52:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8E:1C:D9:DB:C9:A1:DC:4E:96:D4:5B:89:7D:36:DA:AD:06:29:FB
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4cbe71047315d097cfeb34708fcd2b24c9d85d49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.252.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6e:52:5b:64:ce:c9:7b:49:bf:62:af:4d:5c:75:5f:d6:6c:
b6:7b:4d:ff:6b:1a:8e:83:3a:95:ff:30:78:02:e0:5c:31:d4:
9d:50:a0:76:e2:8f:4c:f2:1a:11:11:9b:f4:32:11:b7:fd:36:
ae:59:38:a2:07:1d:1e:75:b9:d6:f6:7b:7f:39:75:dd:4d:af:
cb:44:83:85:ef:58:f9:91:a8:9e:fc:4a:ed:2e:77:6b:6a:b2:
e4:6b:00:a0:a4:f0:f6:3e:84:8d:4d:34:25:ed:a8:52:89:4b:
78:1c:55:34:74:4a:4b:99:39:d8:cc:bf:28:50:d8:b1:f5:bb:
fe:dc:a4:23:07:a4:e5:b5:a1:10:90:21:a4:4e:3f:bd:de:d6:
9c:0d:f8:76:c1:4c:5c:a9:75:2b:de:1d:ad:d3:79:87:ea:08:
72:ca:5d:24:12:68:a4:9c:e4:ec:65:23:c2:f9:b4:4f:dd:10:
90:a8:bc:10:2b:1a:87:9e:8d:43:0c:49:a3:f1:87:7f:53:c1:
f9:70:16:36:04:22:37:9e:d3:93:22:3d:84:b2:3c:e4:68:29:
53:e8:f4:2f:da:a3:90:be:a5:56:4a:84:e1:00:81:e9:51:25:
80:24:42:ff:30:f0:8a:fa:98:c4:b6:0d:2b:a2:73:1e:78:d8:
12:f4:23:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org