Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/d4a7a02a28c48c99c8c3171f8f201c4f3f07db72.roa
File: d4a7a02a28c48c99c8c3171f8f201c4f3f07db72.roa (raw, json)
Hash identifier: Y4wRlYSAQnWj1ixu3EIrbRIYqSyz0j93WnnjTFOJf6E=
Subject key identifier: A3:2D:B6:AA:E3:84:BC:03:DD:21:86:C9:30:9F:7A:4C:FC:08:9B:71
Certificate issuer: /CN=cc3aa122dfd9e78c282ee13cf25302c07b4c605f
Certificate serial: 2197FA
Authority key identifier: D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/d4a7a02a28c48c99c8c3171f8f201c4f3f07db72.roa
Signing time: Mon 03 Jul 2023 12:00:47 +0000
ROA not before: Sun 02 Jul 2023 12:00:47 +0000
ROA not after: Thu 03 Jul 2025 12:00:47 +0000
asID: 27754
IP address blocks: 200.61.46.0/24 maxlen: 24
200.80.224.0/24 maxlen: 24
200.80.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2201594 (0x2197fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3aa122dfd9e78c282ee13cf25302c07b4c605f
Validity
Not Before: Jul 2 12:00:47 2023 GMT
Not After : Jul 3 12:00:47 2025 GMT
Subject: CN=d4a7a02a28c48c99c8c3171f8f201c4f3f07db72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:c3:9c:f9:c5:a0:3a:47:ed:4c:6f:44:d5:
d1:48:61:fc:a3:57:d0:05:db:1a:eb:2f:0d:66:cd:
68:0a:0e:13:c1:2d:f2:5f:8d:69:30:22:e6:56:2b:
79:1a:73:bf:45:e0:ad:f7:a1:5e:28:1b:88:7f:4c:
1c:81:b7:b3:36:a5:33:bd:ce:8f:0d:20:27:eb:0c:
3b:d4:0e:43:f2:82:f5:9c:3a:dd:d4:c9:7e:35:16:
54:4e:fd:42:0d:86:e8:36:77:34:83:f7:a2:49:2f:
72:19:1c:8f:5d:80:41:73:1f:8e:0c:9d:fc:57:81:
82:78:06:6b:2e:8c:95:85:fe:89:13:5a:2c:09:3c:
61:e4:56:68:ed:02:72:d9:35:04:b2:af:8e:38:42:
a4:21:51:84:06:fc:8d:5f:28:8f:cd:21:32:eb:ec:
81:71:5b:1a:6d:35:a6:44:c0:17:02:c9:b7:e6:80:
bd:fb:c0:9e:cc:57:54:81:bf:d8:b6:46:67:96:71:
a0:1f:92:55:b6:bd:fb:b5:f3:88:94:0f:8e:70:61:
05:d0:ee:27:ae:04:df:aa:ae:23:b1:fd:fd:71:3d:
38:3b:e1:3d:76:d4:ab:b4:86:25:e5:cb:1a:a9:d7:
8d:b5:8d:e9:6b:e8:cb:e3:99:fe:09:e3:de:82:a7:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2D:B6:AA:E3:84:BC:03:DD:21:86:C9:30:9F:7A:4C:FC:08:9B:71
X509v3 Authority Key Identifier:
keyid:D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/d4a7a02a28c48c99c8c3171f8f201c4f3f07db72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.61.46.0/24
200.80.224.0/24
200.80.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c8:33:c8:83:1b:6a:6c:76:21:d7:50:18:d9:94:5c:d6:4d:
ec:4e:6f:6f:75:75:05:f8:b2:ae:e4:98:62:5d:c5:58:d2:89:
38:20:72:81:f2:6d:f3:08:8a:a0:7d:d7:5c:55:3b:9c:63:01:
54:a0:cf:2e:34:4b:f5:50:66:24:b0:56:91:4b:8b:bc:bb:ba:
08:21:a5:7c:66:1f:ce:4c:11:cc:8a:d8:61:bb:d6:0b:7e:a4:
67:5e:6b:b7:d8:5e:ec:8e:1a:95:e2:0f:82:dc:35:ce:19:53:
b6:ee:3c:82:e1:3d:58:f9:32:cf:4c:81:c7:f0:fd:57:2f:24:
1e:70:54:ba:76:01:5d:2d:f9:03:85:38:6d:fe:13:42:ae:ae:
ff:99:3b:2e:ec:3f:50:b0:c0:bd:ce:7a:47:57:d8:02:0a:ce:
fa:e9:25:46:e6:07:a2:7e:b4:3b:b2:46:bb:01:df:ac:0c:82:
da:8f:ab:e7:ce:28:e6:cc:a9:79:cc:a3:5f:93:57:e6:9a:27:
c0:b5:a3:8d:bd:cb:e0:39:3b:9a:e0:99:45:d4:71:1b:69:8b:
44:cf:68:fd:17:b6:26:3b:1d:bf:57:a1:d7:44:86:05:15:b9:
33:5e:fc:6c:7f:34:43:2d:aa:34:da:89:36:77:55:3d:78:8b:
3e:8a:53:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org