Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8011cdd6462a8a29e09cdafd917c1bab2284d3e8.roa
File: 8011cdd6462a8a29e09cdafd917c1bab2284d3e8.roa (raw, json)
Hash identifier: p/duBTQp6pvcBUdr8BiD95fDt7eGCcNTiPCUVEdTw9s=
Subject key identifier: 93:5B:A7:26:D9:C3:94:A0:9E:59:7D:88:0C:ED:0D:22:9E:0D:58:AE
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 14248B
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8011cdd6462a8a29e09cdafd917c1bab2284d3e8.roa
Signing time: Tue 30 Jan 2024 18:14:55 +0000
ROA not before: Tue 30 Jan 2024 18:14:55 +0000
ROA not after: Fri 30 Jan 2026 18:14:55 +0000
asID: 10834
IP address blocks: 200.16.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1320075 (0x14248b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Jan 30 18:14:55 2024 GMT
Not After : Jan 30 18:14:55 2026 GMT
Subject: CN=8011cdd6462a8a29e09cdafd917c1bab2284d3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:fc:82:06:74:cb:ff:06:62:8a:fd:fd:64:
c8:df:bb:97:de:d6:c3:39:3f:ba:4f:15:e6:c9:6f:
a0:ac:38:0e:80:a2:f0:a5:1e:68:e0:55:00:5c:89:
e6:d6:01:e7:10:75:58:90:7b:f3:2d:ef:9f:ae:25:
02:83:5c:59:c4:89:db:61:4c:54:27:eb:96:3b:62:
62:c7:21:97:3c:8a:a2:aa:68:29:46:f1:ba:e7:41:
c2:4f:81:47:6a:f8:e8:6b:79:41:ec:8b:c7:9b:dd:
d2:49:79:f6:83:75:b5:4e:3b:6f:0a:36:d3:eb:96:
37:2b:00:ad:e0:45:6a:9d:28:eb:e1:b1:4f:e9:08:
d2:be:eb:46:15:80:57:e2:46:ed:53:2c:c9:61:56:
24:20:d8:53:61:4e:6c:2e:d7:e1:96:cc:93:7b:c6:
66:9b:79:07:68:5b:a1:6e:4a:b2:0a:cc:82:31:52:
3b:22:2d:e9:70:f2:81:c3:94:ed:4c:dc:62:c1:10:
dd:00:d1:cd:2d:89:3c:9e:e1:54:d7:07:b8:56:a5:
32:7c:98:8c:8d:69:de:ca:6b:64:01:23:89:0c:c3:
f0:d6:57:f2:40:f5:14:47:94:ab:98:62:cf:39:e7:
ad:8e:9e:cc:fb:5b:21:02:95:55:00:42:ae:15:ce:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5B:A7:26:D9:C3:94:A0:9E:59:7D:88:0C:ED:0D:22:9E:0D:58:AE
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8011cdd6462a8a29e09cdafd917c1bab2284d3e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.16.128.0/17
Signature Algorithm: sha256WithRSAEncryption
72:74:5d:b7:35:30:17:24:a2:7e:32:64:4b:33:24:dd:36:92:
0b:bf:3c:b4:06:13:45:13:80:a9:79:7e:be:5e:53:e0:85:0b:
d3:9f:70:25:d5:e0:4f:fc:ea:18:53:27:94:2c:27:8f:31:c6:
a9:d2:1d:ae:d4:16:b5:70:39:6f:d9:f8:5b:1f:29:01:5c:6c:
3f:36:b4:ae:fe:f2:a9:f6:8b:1a:46:9b:84:0c:68:e4:51:47:
f3:ca:39:d9:5e:a4:66:2b:8e:0e:c5:a7:ac:3f:a2:1d:ce:a0:
fb:51:16:a1:b6:23:3e:82:d8:6b:86:c4:53:ad:6c:41:9c:9b:
7c:7b:14:00:7e:ab:5e:34:ff:da:18:9f:cc:8c:54:fa:f3:b5:
2e:31:b1:19:2e:ad:b1:67:fd:3d:42:7b:ae:80:7d:ba:70:c5:
23:f9:6c:5c:06:26:0d:f2:e3:f8:ce:1d:c1:0d:58:e3:ef:b5:
76:d7:56:60:f6:0c:66:80:fa:19:29:9f:f4:d5:e3:15:3b:77:
95:d8:d2:44:d7:01:c0:2d:02:70:3e:7d:76:99:92:ea:3e:b9:
c2:a0:09:67:af:e0:2a:42:0a:b1:c4:ad:e4:4b:2c:74:18:88:
2f:a9:1e:ff:2e:9d:c6:69:7e:5c:2b:fc:7a:be:84:43:49:a4:
5c:26:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org