Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/a55512a4e42ee8cccae98a6fcbfa1eebcdd3478b.roa
File: a55512a4e42ee8cccae98a6fcbfa1eebcdd3478b.roa (raw, json)
Hash identifier: eCG6ftKZU/WjeoN1AQnNIv8R/0mOSLLaexJBIIcBUcQ=
Subject key identifier: E3:C9:7A:71:D9:50:AF:B9:72:5B:BE:85:F7:9D:EA:DA:60:AF:25:A2
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 143240
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/a55512a4e42ee8cccae98a6fcbfa1eebcdd3478b.roa
Signing time: Tue 30 Jan 2024 19:39:36 +0000
ROA not before: Tue 30 Jan 2024 19:39:36 +0000
ROA not after: Fri 30 Jan 2026 19:39:36 +0000
asID: 10834
IP address blocks: 200.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1323584 (0x143240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Jan 30 19:39:36 2024 GMT
Not After : Jan 30 19:39:36 2026 GMT
Subject: CN=a55512a4e42ee8cccae98a6fcbfa1eebcdd3478b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:53:77:68:f8:25:9d:55:cc:d4:ae:d9:4d:62:
28:d1:af:70:1f:01:b4:4b:30:35:d0:7b:81:69:0f:
13:a2:59:cb:9c:9d:1d:30:d5:36:da:83:aa:8b:db:
24:80:d5:a2:c0:a6:79:82:00:0c:da:09:12:47:78:
19:4b:4a:51:ca:86:3e:e6:f9:e5:c6:54:64:f8:16:
6d:34:90:47:96:1d:13:fe:a1:ca:6d:f8:c2:2d:7b:
25:08:21:2f:c9:b9:f9:74:d1:22:4a:57:9f:2f:14:
2a:19:80:ae:85:46:29:a8:7e:f5:bf:76:48:f1:f4:
50:04:76:5d:9b:35:4c:20:cc:f4:d8:18:6b:7d:9a:
0b:0f:3a:83:d2:01:39:f7:ee:f5:0b:88:12:d5:0a:
ee:51:05:7c:77:5c:68:75:68:da:7c:62:a1:ef:bd:
ba:44:b0:cb:54:b4:31:83:6f:cc:e7:bc:42:dc:7f:
24:a1:4c:96:a4:16:43:28:6c:db:93:9a:d8:5a:b6:
17:9f:d0:e7:16:d4:43:94:07:d3:6e:94:0d:c1:15:
9b:64:e1:40:98:8d:30:1a:2f:8a:42:24:3f:74:6a:
f5:87:0e:80:c7:70:3c:cc:21:78:fa:b0:30:7d:e4:
27:50:91:fd:29:a9:94:79:25:37:35:db:78:50:7e:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:7A:71:D9:50:AF:B9:72:5B:BE:85:F7:9D:EA:DA:60:AF:25:A2
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/a55512a4e42ee8cccae98a6fcbfa1eebcdd3478b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:c2:a9:fa:6d:50:40:c1:5e:2a:5d:04:ac:0e:03:64:83:8d:
d5:5e:a0:32:6a:eb:a3:a6:c2:28:23:97:3a:90:3a:ea:65:f7:
46:05:97:86:08:a8:94:8c:4a:7a:bc:cb:36:9a:e9:db:24:3e:
d7:2a:04:96:9b:8b:87:3b:65:69:db:89:57:38:61:a9:20:37:
14:46:61:83:80:a9:bc:ec:30:79:13:9d:6f:8b:c8:e5:57:19:
a1:77:80:5f:bf:50:58:7e:ed:cd:cc:c1:e1:38:be:88:39:09:
cb:35:c2:52:ec:00:44:c7:99:2a:0e:33:e1:7b:19:58:d7:25:
3d:a0:de:86:07:a5:33:cd:93:15:0c:a1:97:2e:05:ff:c3:8b:
0d:ff:d0:df:3f:ad:c5:e5:05:ab:8e:65:fe:42:ce:6a:80:91:
86:0d:b9:f1:f0:d9:fb:5d:ed:9e:0d:53:f7:66:29:f4:af:bb:
21:c1:5b:a3:76:c2:68:68:8b:ef:6f:3b:81:8a:5c:ba:5a:5d:
f4:3e:de:47:22:e9:43:ce:7a:e2:87:83:0d:64:39:53:4c:ad:
62:ca:b3:5a:b9:ff:2a:cf:1c:1a:bc:d8:fa:25:89:ec:cd:77:
e2:91:b5:ae:8b:45:7a:82:23:4e:e9:67:7e:11:8b:da:5c:2a:
be:91:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org