Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa
File: a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa (raw, json)
Hash identifier: GRoDB96REdIVmarf8Gduubxbn3O73T3GKiSg3xgagGE=
Subject key identifier: 2E:8A:9D:88:98:39:D4:C5:88:3C:B6:8C:FF:A3:2C:27:20:F8:AD:55
Certificate issuer: /CN=a736ecb08742dd36c47f8758266a50eba82e7909
Certificate serial: 15EDD4
Authority key identifier: F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa
Signing time: Tue 05 Apr 2022 15:06:16 +0000
ROA not before: Tue 05 Apr 2022 03:00:00 +0000
ROA not after: Fri 05 Apr 2024 03:00:00 +0000
asID: 264633
IP address blocks: 200.10.141.0/24 maxlen: 24
2801:11:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1437140 (0x15edd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a736ecb08742dd36c47f8758266a50eba82e7909
Validity
Not Before: Apr 5 03:00:00 2022 GMT
Not After : Apr 5 03:00:00 2024 GMT
Subject: CN=a08c435f9cfbaadca51bad5d5c2f67b64038048e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:6d:57:d7:4b:22:03:34:1c:91:cb:45:da:
f3:54:8d:9e:db:c1:61:21:4a:77:e8:40:9d:ed:1c:
c1:30:82:df:34:f0:08:2a:2b:c1:de:95:53:ee:01:
ee:73:30:e8:7a:5f:e8:12:2c:d8:33:95:81:90:f9:
95:ae:de:30:c4:8a:22:40:ec:c7:00:c5:13:7c:78:
9b:e6:ac:13:83:30:21:9d:d9:6e:9f:97:7e:42:dd:
3e:90:6e:36:ab:63:bd:d3:8a:65:41:35:81:bc:0f:
fc:2c:00:65:cc:b3:13:7c:b2:c1:0c:5f:c5:9d:ee:
43:53:68:2a:23:15:20:36:1f:cf:eb:7c:18:ac:51:
08:21:45:16:38:97:44:33:38:c1:40:b7:4f:d4:83:
f9:fc:23:c9:a7:21:17:1c:48:3b:f0:1c:6c:a4:e3:
51:6e:aa:5b:9b:22:04:0c:07:20:01:6e:d9:5b:49:
ea:9c:1a:43:c9:b5:04:16:a9:80:3a:d9:40:be:77:
90:14:7f:ce:ac:78:33:53:63:9e:fd:b2:4d:53:e0:
cd:ed:b5:b3:36:fd:8c:1f:47:0a:4c:cd:18:7e:8c:
a9:d0:a4:03:fa:29:89:55:93:a2:d1:f0:0f:2c:7f:
26:68:d7:da:84:71:b4:65:93:1b:c8:1b:21:30:a3:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8A:9D:88:98:39:D4:C5:88:3C:B6:8C:FF:A3:2C:27:20:F8:AD:55
X509v3 Authority Key Identifier:
keyid:F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.141.0/24
IPv6:
2801:11:1000::/48
Signature Algorithm: sha256WithRSAEncryption
45:c5:b3:e6:4e:95:a7:6a:88:fc:d3:99:c5:62:7d:25:c3:b0:
d4:96:07:83:3e:15:96:a0:a3:94:f3:af:76:5c:0e:aa:e6:af:
b6:50:6d:41:f8:59:b3:b1:3a:65:f2:c8:da:80:71:19:e3:af:
67:cf:ac:0d:a7:f7:a2:18:af:9a:53:4c:94:70:f6:93:51:61:
9a:09:75:f2:ad:8b:85:b3:a7:60:5a:a3:89:f1:08:f6:3a:e6:
98:83:89:0d:f6:47:00:d2:da:a9:71:42:2f:05:fe:30:59:7b:
d0:24:51:fa:ae:c1:f9:62:6b:97:42:13:32:d9:61:ca:c3:4e:
cf:19:35:56:8d:fd:e0:a0:1e:29:0a:55:a0:5f:e9:aa:3e:f2:
99:73:82:8f:a6:ea:db:ab:7b:3f:f9:0a:4e:1f:35:a9:44:b8:
7b:0a:1c:9b:a7:50:86:2e:39:f9:78:06:d4:05:66:48:62:33:
22:4e:9e:44:ae:e6:e4:c1:ad:11:7d:81:7d:f8:cd:4b:d2:1f:
11:62:aa:56:1a:44:31:f7:55:f3:63:06:a9:27:b7:4b:b4:0a:
9b:62:5e:03:e3:78:9f:a7:59:d3:21:5b:71:a6:a6:bc:bc:2f:
8a:a4:dd:a6:60:99:9a:9a:9f:4b:90:cd:e1:99:c9:13:fe:65:
4a:db:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org