Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/072bff63f1f40696e6c5a1055e87f2ec928b3717.roa
File: 072bff63f1f40696e6c5a1055e87f2ec928b3717.roa (raw, json)
Hash identifier: e94+nLiryrRs/9sEI4dl9PXd/ESe+/6zHZQ1gHLIfQw=
Subject key identifier: 18:FB:FA:66:F5:D5:22:DA:48:29:7A:B6:71:70:49:04:DD:03:DE:BA
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 229AFA
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/072bff63f1f40696e6c5a1055e87f2ec928b3717.roa
Signing time: Thu 22 Jun 2023 18:16:25 +0000
ROA not before: Wed 21 Jun 2023 18:16:00 +0000
ROA not after: Sun 22 Jun 2025 18:16:00 +0000
asID: 15274
IP address blocks: 200.61.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267898 (0x229afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Jun 21 18:16:00 2023 GMT
Not After : Jun 22 18:16:00 2025 GMT
Subject: CN=072bff63f1f40696e6c5a1055e87f2ec928b3717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:b1:f7:af:b3:bd:ae:4c:12:54:be:90:51:
4b:1b:fe:b1:8d:70:11:4d:95:89:34:b2:41:49:d6:
0f:d9:eb:9c:61:53:dc:b7:d0:90:71:6c:b3:26:d2:
a1:12:44:f0:22:da:f0:89:95:4c:52:dd:c4:57:2a:
be:7d:f5:4a:f6:73:a1:1b:6d:1e:60:56:26:5c:a3:
1e:9c:c8:7b:c3:c2:de:f1:04:68:19:48:13:3f:d0:
e1:4e:18:b6:cb:10:68:8b:86:ac:f2:f7:a2:eb:62:
35:ed:34:a0:e7:22:dc:f8:cd:8f:20:d2:57:ba:e6:
91:ab:19:c2:2b:53:bc:97:2a:82:fb:c2:1a:d1:d9:
2e:8f:8b:28:3a:f6:49:a8:ec:fe:85:ab:63:b3:f1:
20:59:52:f6:0f:74:68:11:ef:57:b4:80:3b:ac:ae:
b7:69:30:6b:a1:ba:db:ab:a9:25:25:45:33:57:fb:
a2:66:fb:5c:90:f0:ea:0a:cc:27:57:5f:6b:6d:2b:
f1:5c:a9:1d:ec:13:29:7f:20:c4:16:94:2c:c4:84:
b4:5f:23:3d:cb:66:c0:79:f4:16:67:75:5a:62:7d:
af:9f:a9:f6:7d:c3:5f:bb:76:4f:20:38:5b:1e:74:
33:07:62:44:04:fe:88:7b:ca:c0:1e:76:4c:d6:63:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FB:FA:66:F5:D5:22:DA:48:29:7A:B6:71:70:49:04:DD:03:DE:BA
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/072bff63f1f40696e6c5a1055e87f2ec928b3717.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.61.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:37:c6:cf:f2:4a:21:64:1b:16:c0:2f:a2:8b:8d:4f:f3:ca:
12:25:5c:82:0f:8d:4f:07:7e:e1:dc:3e:ce:66:ab:26:b9:7c:
c9:c9:7a:bc:25:fc:9d:4c:a8:dd:d0:70:98:2c:b8:7d:e5:7d:
50:68:d6:9b:d9:3b:8f:51:e9:85:a4:d7:b5:02:07:e9:fc:bc:
02:2d:08:eb:74:6c:6f:72:d0:7f:ea:eb:06:5d:c0:36:5c:99:
45:95:8b:01:73:ec:b1:89:3c:70:f7:11:b3:f8:91:75:61:c4:
52:61:0c:f0:91:df:cb:05:3c:36:75:2d:02:43:34:26:d8:21:
8c:a9:4b:bb:42:dc:06:d2:ba:2d:7c:da:7f:01:3a:44:a5:5f:
a2:27:d4:e1:c3:51:d3:7c:c9:6d:20:ae:53:9f:95:13:b7:7d:
81:cb:67:f6:92:ed:a1:7c:f1:2a:4a:2e:e7:05:20:e3:e2:07:
80:45:d4:92:92:ad:92:c4:a1:fd:19:02:23:2a:a2:34:40:ad:
43:bf:41:19:2b:56:cc:e8:ef:91:8e:74:05:1a:24:62:c4:2c:
29:09:a1:cb:f1:a0:d8:bf:6c:a3:47:6a:b7:94:a1:47:83:a2:
8b:81:e3:d6:e5:08:bf:bc:df:89:bd:82:bc:44:c7:ee:e1:4d:
32:18:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org