Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf9e0f73f4aef4147dd2c1e393cc1d166cf6f27.roa
File: 9bf9e0f73f4aef4147dd2c1e393cc1d166cf6f27.roa (raw, json)
Hash identifier: 3xfrpa+6GZucNTQ2fSZzZvF6ztF/qJXKHTE9a1ejbqc=
Subject key identifier: CF:C9:E3:B9:A2:28:5C:04:40:34:A7:E8:BB:8A:C1:E9:11:E9:73:8B
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 2482E6
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf9e0f73f4aef4147dd2c1e393cc1d166cf6f27.roa
Signing time: Mon 30 Oct 2023 12:06:38 +0000
ROA not before: Mon 30 Oct 2023 12:06:35 +0000
ROA not after: Thu 30 Oct 2025 12:06:35 +0000
asID: 52294
IP address blocks: 200.115.93.0/24 maxlen: 24
200.0.19.0/24 maxlen: 24
2001:13c7:6007::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392806 (0x2482e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Oct 30 12:06:35 2023 GMT
Not After : Oct 30 12:06:35 2025 GMT
Subject: CN=9bf9e0f73f4aef4147dd2c1e393cc1d166cf6f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:f7:74:a8:e3:ea:9a:e7:e1:b9:d1:e0:57:
51:87:90:c2:6e:90:a6:d8:ea:78:b4:b2:63:d5:1b:
22:df:16:ec:d2:1e:22:70:12:a7:f0:4b:1d:59:f5:
04:2c:6e:58:ab:90:cf:e4:ec:e8:d3:5a:bf:05:f7:
f4:48:17:49:d4:78:52:ed:0f:fb:a9:58:e0:7d:ca:
11:1e:86:ff:bf:29:19:fb:21:53:c7:96:b9:fc:12:
da:91:55:f2:04:5f:ac:20:62:76:7c:67:b1:fe:c3:
ed:2c:dd:99:e5:fd:3a:f1:b6:f3:12:c0:0a:42:bc:
76:5f:45:88:c0:c0:07:2b:1d:12:a3:b0:ac:9e:37:
ad:81:49:dd:35:e9:1c:1e:43:98:ae:12:e9:f2:93:
03:cb:85:8a:7c:3c:1e:53:23:ec:f3:5b:eb:b8:2f:
3f:68:cc:14:6c:0e:b7:dd:b2:28:af:1a:99:97:0d:
42:9b:4c:b3:8d:0b:7c:37:ce:9f:b3:89:e2:5e:af:
8c:1b:00:20:69:3f:2b:9d:9d:bf:e5:19:16:79:0e:
6b:27:1b:65:19:63:f5:e8:b4:72:ff:b4:72:33:28:
16:db:92:d1:83:53:f5:fb:63:c0:c1:66:8b:2d:28:
49:a7:df:83:c0:b3:88:f4:25:40:96:2e:d9:90:4e:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C9:E3:B9:A2:28:5C:04:40:34:A7:E8:BB:8A:C1:E9:11:E9:73:8B
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf9e0f73f4aef4147dd2c1e393cc1d166cf6f27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.19.0/24
200.115.93.0/24
IPv6:
2001:13c7:6007::/48
Signature Algorithm: sha256WithRSAEncryption
48:7b:de:40:7b:b6:e3:d0:4c:66:64:32:a3:a5:8d:26:b4:79:
25:85:5b:cf:75:2f:31:cf:ad:3b:c1:69:43:08:6e:1e:af:85:
93:9d:34:ce:f2:ba:f9:98:a6:8a:51:1a:83:43:65:16:1a:34:
27:6b:c8:d2:a8:d2:45:63:9a:66:52:05:83:62:bb:38:92:f2:
2f:e6:0e:64:24:17:c6:1c:3c:54:4e:38:10:97:74:67:01:39:
2a:39:b7:bf:90:df:f8:58:39:97:c7:f7:e8:93:91:81:6f:9f:
f3:c7:dd:13:2c:6e:e2:ae:ae:c2:cf:56:af:a1:5a:e0:a0:6a:
36:3f:40:62:87:aa:7b:1f:d0:af:24:f2:c5:68:cf:7e:b6:84:
f1:d1:7f:90:8d:fa:ab:14:74:94:b6:13:55:ef:eb:57:68:af:
4f:a1:17:67:e0:92:38:a6:b9:a5:10:cb:12:f1:de:10:a6:1a:
6e:5c:49:12:65:a4:90:50:a5:36:1b:25:9f:ff:72:ee:0a:c8:
f2:13:3c:bf:99:a8:59:6e:34:05:92:7f:61:74:80:bc:5f:80:
02:44:94:ec:80:1b:a6:91:65:83:48:15:25:dd:d5:10:ce:f6:
2d:1b:74:b9:9c:37:96:70:01:79:1c:74:1b:57:12:4e:19:f7:
7b:21:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org