Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/126aae893f026d8ac22c64d7bdfcf3391024a970.roa
File: 126aae893f026d8ac22c64d7bdfcf3391024a970.roa (raw, json)
Hash identifier: IOFwnO/V+SKHjccvqQShO0W7Xq9s+DXGu/VcOGR6eKQ=
Subject key identifier: 89:6A:68:82:B8:2B:8D:29:C1:83:3B:A3:D2:5C:4C:87:AA:D7:2A:D7
Certificate issuer: /CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
Certificate serial: 20BD14
Authority key identifier: 48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/126aae893f026d8ac22c64d7bdfcf3391024a970.roa
Signing time: Mon 08 May 2023 17:06:31 +0000
ROA not before: Sun 07 May 2023 17:06:31 +0000
ROA not after: Thu 08 May 2025 17:06:31 +0000
asID: 6762
IP address blocks: 200.123.192.0/20 maxlen: 20
190.14.16.0/20 maxlen: 20
2800:870::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145556 (0x20bd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
Validity
Not Before: May 7 17:06:31 2023 GMT
Not After : May 8 17:06:31 2025 GMT
Subject: CN=126aae893f026d8ac22c64d7bdfcf3391024a970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:88:4a:97:ec:a1:2d:17:d4:11:01:6e:82:
e0:9a:10:41:55:b8:1e:f8:2f:ed:8c:07:3a:ef:8c:
25:4a:76:97:6e:ba:86:c8:bd:a7:6b:0a:49:8e:66:
c9:35:64:30:4e:bf:5c:33:99:96:db:5d:da:0b:72:
12:23:61:99:db:0e:93:c2:55:4d:cb:1d:d8:c0:43:
65:d2:84:58:7f:25:c6:be:1b:7d:b0:81:38:c1:d7:
1a:65:64:f7:00:14:6f:5b:c0:19:d6:03:ae:c1:f5:
05:59:50:02:63:28:27:cf:e3:5e:9e:d4:9e:79:08:
78:9f:67:61:2d:03:f8:fa:d7:e0:77:34:7f:fb:64:
0a:52:b4:e4:10:39:be:db:a5:e3:f7:3a:c5:14:32:
82:43:23:0c:62:db:1e:6a:2c:0a:52:66:c0:7f:74:
27:36:dd:17:fb:cc:aa:81:21:53:d3:c4:71:4a:9a:
8f:4b:9b:c1:a8:3a:c2:94:5b:bb:36:6f:b0:16:f2:
bb:79:bb:56:5f:56:c1:85:3e:16:62:d4:47:4f:69:
68:ad:e7:b9:55:39:e4:32:8e:d9:fe:22:a7:b1:ad:
f4:be:ad:0a:85:0c:c3:e1:1b:cd:84:77:74:a8:71:
60:e7:a6:98:df:ac:6b:1c:d9:9d:d5:2a:55:d8:a6:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6A:68:82:B8:2B:8D:29:C1:83:3B:A3:D2:5C:4C:87:AA:D7:2A:D7
X509v3 Authority Key Identifier:
keyid:48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/126aae893f026d8ac22c64d7bdfcf3391024a970.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/29194fbdbd11c97181ad21546cc92fc2d0e3857a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.16.0/20
200.123.192.0/20
IPv6:
2800:870::/32
Signature Algorithm: sha256WithRSAEncryption
18:c8:a4:0d:d6:c8:1b:aa:26:4b:9d:d3:77:e0:7b:47:5e:44:
be:ee:b7:9b:dd:64:45:59:b3:17:43:59:a4:00:c7:a7:84:e8:
f6:91:ab:71:05:51:1b:e6:16:35:b4:84:22:65:33:29:06:5a:
2c:7d:f9:4d:40:d6:a1:bb:58:13:27:46:1c:93:2b:3b:4d:21:
62:83:a1:9c:98:6a:fa:8a:b6:e3:fd:4c:80:f0:33:cb:13:0c:
b4:d0:1b:65:7c:1c:cf:f9:b4:14:87:e5:c6:7c:ca:7e:4e:28:
e4:23:ec:82:83:56:13:cc:7d:be:06:eb:f8:1c:1a:17:b7:e5:
68:62:81:52:d0:39:d7:38:98:0d:b4:88:b3:4f:d3:e4:ee:45:
40:ef:46:7c:f5:99:18:db:b4:45:2c:18:9b:a9:e9:35:ee:67:
57:b7:d9:26:8c:bb:79:c2:99:81:e5:28:b0:a1:c2:2e:2e:05:
df:b6:68:df:ae:83:e4:c7:e5:11:1a:b3:d1:88:e1:71:bc:20:
da:e7:45:f1:ad:22:8e:f2:84:b5:8a:5e:be:8a:5a:d5:61:97:
91:57:8b:5b:9e:33:ac:38:45:a0:68:b9:73:36:4a:64:0a:cb:
c2:5a:41:50:a1:3c:46:3e:21:ee:87:51:6b:91:49:5a:c9:d4:
c3:6f:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org