Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/945e8fe88dc12fdfc788302a2e6559515e4166d3.roa
File: 945e8fe88dc12fdfc788302a2e6559515e4166d3.roa (raw, json)
Hash identifier: s3vQQamEddQq8XC3oG+25lL9j2/6I6j2SCki+Y0ZLDI=
Subject key identifier: 8D:28:1A:71:4E:27:FD:31:72:D1:29:9D:AE:6F:4B:7F:77:CF:04:7E
Certificate issuer: /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial: 1BAA37
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/945e8fe88dc12fdfc788302a2e6559515e4166d3.roa
Signing time: Tue 27 Sep 2022 20:34:05 +0000
ROA not before: Tue 27 Sep 2022 20:22:39 +0000
ROA not after: Fri 27 Sep 2024 20:22:39 +0000
asID: 19114
IP address blocks: 200.24.192.0/20 maxlen: 20
200.24.192.0/19 maxlen: 19
200.24.208.0/20 maxlen: 20
200.24.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813047 (0x1baa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Validity
Not Before: Sep 27 20:22:39 2022 GMT
Not After : Sep 27 20:22:39 2024 GMT
Subject: CN=945e8fe88dc12fdfc788302a2e6559515e4166d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:e9:51:6d:c2:f0:89:c2:f8:90:b4:05:68:
ce:1c:4b:e2:d5:05:6c:f7:73:74:6e:74:8e:fc:ad:
44:9e:0a:59:32:76:5b:0f:04:59:98:63:39:23:70:
e7:30:23:57:5d:56:a3:3e:36:ab:88:6a:de:6c:3b:
88:96:cb:d7:59:ed:cb:fe:c2:af:ed:f4:b0:27:4d:
fc:09:1c:82:cd:39:31:b2:1a:7c:44:58:21:30:e2:
9a:78:6e:3b:4b:07:da:a1:c0:a1:bf:49:e0:88:95:
98:6e:81:a7:ba:a1:15:32:fe:bf:22:d4:ce:16:ba:
7a:52:09:69:ad:f7:2a:e6:7f:d0:e3:7c:30:ee:8c:
31:7b:02:4b:97:f3:e7:1d:d8:50:a9:ef:90:d7:46:
5c:66:2f:b4:60:12:80:a2:af:04:a0:a4:e2:b6:bf:
f0:af:bf:ef:50:b8:82:95:7e:a8:02:e6:c2:08:40:
38:ea:57:53:15:f5:90:e0:b1:ae:fb:12:80:63:64:
00:35:8f:4b:f2:db:9b:ac:a0:8b:3d:e8:a3:88:2e:
f5:7c:ea:44:09:d1:c1:60:22:95:f1:45:e8:67:db:
49:2a:04:d1:b5:38:1e:a1:94:8a:35:14:cc:47:91:
eb:f6:0e:36:87:8c:17:8b:50:f9:99:ce:06:53:ed:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:28:1A:71:4E:27:FD:31:72:D1:29:9D:AE:6F:4B:7F:77:CF:04:7E
X509v3 Authority Key Identifier:
keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/945e8fe88dc12fdfc788302a2e6559515e4166d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.192.0/19
Signature Algorithm: sha256WithRSAEncryption
37:65:63:7a:4f:fa:b8:cf:af:8e:da:87:e3:f8:5d:26:b9:8d:
d2:32:19:81:c2:19:af:82:f2:c3:12:20:2b:c2:5d:4e:0b:34:
d7:a1:41:86:96:8b:59:0b:63:b7:9c:7d:d7:fc:fb:40:68:70:
6d:09:4c:66:d0:ee:2c:15:ce:9c:05:52:d6:38:bb:7e:c0:20:
56:27:9c:ab:57:f9:73:08:03:37:2c:44:04:91:fb:68:37:40:
60:85:bf:76:c0:be:66:12:e6:54:1e:3e:58:8f:21:0d:49:41:
df:03:0a:d7:e8:8d:57:f8:8f:96:c9:43:4d:05:fb:87:2a:c6:
fa:13:17:e1:78:40:2d:71:e4:cd:a2:a0:6f:40:fb:b1:1f:15:
c7:64:e3:d5:c4:a6:10:8c:4c:79:59:b3:18:36:c1:b5:a6:88:
ed:7a:7b:3b:ba:78:11:00:af:14:dd:ab:44:7d:b3:00:4a:4f:
20:4d:f3:a4:0d:fa:e3:ac:8f:41:46:c6:16:1a:d8:21:88:ad:
36:4e:31:c9:8d:b3:55:4f:9e:09:84:0a:ba:7c:38:16:2b:71:
e1:2b:c2:14:5f:cb:80:86:46:e6:c5:a8:44:54:2b:4f:d5:20:
e0:a0:ef:e0:1e:2a:61:44:2d:b5:4d:85:24:c2:05:1a:63:1b:
a5:c1:41:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org