Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9fb86ffcc202c413364980cb6e33bd366e0da522.roa
File: 9fb86ffcc202c413364980cb6e33bd366e0da522.roa (raw, json)
Hash identifier: BQvhGP+odJjtSmonvwps0RWOXV+SgNKRlAFzSKTr63Y=
Subject key identifier: DB:AE:02:21:29:5F:3E:37:81:B6:4E:56:77:6F:34:9D:18:44:E8:7C
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 24A68F
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9fb86ffcc202c413364980cb6e33bd366e0da522.roa
Signing time: Mon 30 Oct 2023 12:06:47 +0000
ROA not before: Mon 30 Oct 2023 12:06:35 +0000
ROA not after: Thu 30 Oct 2025 12:06:35 +0000
asID: 52374
IP address blocks: 200.14.75.0/24 maxlen: 24
200.115.92.0/24 maxlen: 24
2001:13c7:600e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401935 (0x24a68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Oct 30 12:06:35 2023 GMT
Not After : Oct 30 12:06:35 2025 GMT
Subject: CN=9fb86ffcc202c413364980cb6e33bd366e0da522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:a4:d9:d0:84:46:69:d1:a3:72:c7:a0:2a:
67:1e:ab:16:40:08:9a:53:b2:71:f7:f3:10:fd:17:
00:10:68:fe:df:7b:31:1c:da:e9:44:ea:32:c8:4f:
b9:cc:7c:d1:b4:38:3f:a9:3e:f5:69:57:6c:41:91:
a7:9e:39:aa:30:6d:6e:2a:f9:1e:f0:4c:fb:31:25:
67:36:a5:36:ae:20:c4:63:8c:2d:f2:e7:7e:c2:f7:
4a:c0:61:20:33:96:c1:fa:a4:e9:b5:87:26:5b:6e:
92:fc:ed:86:4d:b9:35:8e:4e:75:22:a5:00:68:00:
64:af:64:4b:2f:db:25:4f:af:01:a8:7b:38:4c:d8:
b2:56:9b:3b:ea:bc:34:ef:88:a7:19:de:5f:7c:36:
28:de:10:15:bf:d2:1b:e2:dc:01:53:25:91:3b:b6:
d7:72:90:ea:67:09:b1:e1:e1:4c:e1:5f:6c:79:ae:
54:b8:d9:09:2c:65:8d:3a:2e:4a:b7:ca:82:a5:da:
3b:02:2b:7c:64:0d:a9:11:89:4a:47:4d:d3:e3:35:
7e:e8:dc:d4:7d:90:21:f3:87:03:f9:68:5b:3f:2a:
a3:6a:4d:0e:e2:0d:88:20:86:28:5a:05:b1:19:92:
fe:cc:92:2a:f9:96:3d:ad:96:7e:c3:f3:ee:77:39:
2a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AE:02:21:29:5F:3E:37:81:B6:4E:56:77:6F:34:9D:18:44:E8:7C
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9fb86ffcc202c413364980cb6e33bd366e0da522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.75.0/24
200.115.92.0/24
IPv6:
2001:13c7:600e::/48
Signature Algorithm: sha256WithRSAEncryption
1c:15:66:cb:72:fc:16:2d:d5:98:d2:95:c2:5e:e7:a4:29:17:
f1:c7:67:09:13:b1:10:37:0f:94:da:5b:6f:06:7c:fd:43:5b:
67:18:7d:31:45:1e:89:e5:20:10:ce:40:9a:f5:5d:06:8b:f0:
82:11:30:3d:92:84:3e:67:73:ee:36:90:2f:73:86:b3:ac:30:
8a:cf:ff:a7:6d:9a:70:02:aa:8d:d0:a0:8b:5f:bf:f4:c0:4a:
3f:f8:6a:67:0a:cf:b5:0d:0c:c0:91:f7:8b:dd:8a:9e:dc:8a:
7f:d6:cb:66:b5:67:5e:99:bb:89:8b:4a:2b:15:0f:0a:58:38:
7a:db:cc:fe:f0:66:4b:6c:58:93:68:08:fc:09:bc:fd:db:c2:
f0:c8:53:46:98:8b:63:6a:1c:0d:6c:e6:91:65:a5:c6:02:00:
2c:96:72:a5:40:02:6e:f4:b0:fa:f0:58:d3:f9:6c:1a:67:e1:
ea:dc:73:a0:e2:4b:62:27:8b:69:a5:a0:90:ab:9b:2d:fe:60:
fc:6b:de:54:e1:5c:10:75:58:73:3a:eb:3e:14:1a:d8:2a:d0:
aa:e5:e0:27:36:b1:d6:0a:21:9d:16:ed:28:1b:20:6c:17:63:
50:7b:15:0d:68:71:33:28:86:d6:2d:7e:00:49:8c:10:e7:91:
ca:8a:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-ams.rpki-client.org