Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/504a712be7f1ebace7bd5b1515509788b9f67c04.roa
File: 504a712be7f1ebace7bd5b1515509788b9f67c04.roa (raw, json)
Hash identifier: 5r4znUI9JfLbiREeQviFOny9CjGH5H1Me8xRplNBrTI=
Subject key identifier: 30:E9:48:2B:D9:02:D1:9C:63:6B:5E:9F:12:48:CD:F0:B7:FD:F3:CA
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03BCD4
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/504a712be7f1ebace7bd5b1515509788b9f67c04.roa
Signing time: Tue 11 Jul 2023 13:22:08 +0000
ROA not before: Mon 10 Jul 2023 13:22:08 +0000
ROA not after: Fri 11 Jul 2025 13:22:08 +0000
asID: 7418
IP address blocks: 200.28.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244948 (0x3bcd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:22:08 2023 GMT
Not After : Jul 11 13:22:08 2025 GMT
Subject: CN=504a712be7f1ebace7bd5b1515509788b9f67c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:81:c2:43:11:3f:51:e5:ee:b6:9d:95:17:f9:
7d:85:99:2e:ba:ed:b3:f7:b1:6a:5b:a4:80:b7:ae:
40:31:0c:18:8a:ec:14:b1:43:79:8e:dd:bc:32:6a:
e1:29:92:0f:ad:48:21:a9:b2:99:50:97:02:35:68:
a6:25:68:0c:bf:64:36:26:5c:d3:ad:47:4c:bd:b3:
d6:d3:bf:3a:2d:60:ed:be:42:53:b2:83:42:af:9c:
b0:68:f1:c9:7f:ed:87:60:35:7a:a3:aa:02:7b:0b:
4e:bf:78:36:3e:43:ca:d6:f7:0e:50:1e:11:92:4c:
0a:90:cd:98:05:40:c3:fa:21:1d:fc:96:a7:6e:ff:
a2:d1:ec:4a:68:35:01:bd:cc:76:4b:bb:45:b2:ad:
65:62:20:e2:cf:84:77:a4:03:c2:58:74:59:19:f5:
18:c1:7a:ef:df:76:1d:05:70:65:70:be:db:cb:60:
12:40:1b:08:17:b1:14:d4:eb:5f:cb:dd:72:e8:b2:
2f:ce:9b:37:50:cb:c2:76:cf:f8:0f:2b:ca:e3:52:
d0:2f:34:a0:3f:4f:d8:9a:19:1b:a1:b4:a5:69:bf:
94:ec:bc:a3:4c:e2:2b:4a:49:c4:9c:44:7e:27:a7:
3e:de:07:c5:ef:03:c2:0e:0a:d3:17:63:16:b2:3d:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E9:48:2B:D9:02:D1:9C:63:6B:5E:9F:12:48:CD:F0:B7:FD:F3:CA
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/504a712be7f1ebace7bd5b1515509788b9f67c04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.28.186.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2e:15:09:76:7a:c6:34:7c:6e:ff:f0:e1:b8:4a:85:b0:ed:
96:1f:98:2f:8d:43:5e:27:c8:52:97:0b:01:cb:02:42:b4:f6:
d9:cd:16:c8:01:f5:e2:4a:ac:0b:5b:f4:d6:c8:89:63:c0:b5:
2b:d2:8c:f0:30:05:67:7a:c4:26:5e:87:a0:ff:b4:b1:c3:38:
3d:0f:e1:38:9a:18:c2:b2:b9:5d:66:7e:bd:f6:c6:87:b0:31:
b9:e0:8e:16:ca:87:f2:30:df:21:e6:1d:89:9a:ab:e3:79:81:
54:35:c7:0e:1e:fd:7e:0b:5d:13:6c:65:a5:7a:d1:89:a9:01:
b0:6b:32:46:db:3e:4b:d4:74:ce:1d:1b:32:a9:a1:87:2b:a6:
55:34:69:de:e4:db:47:29:67:79:37:0e:b5:0f:83:85:55:f2:
69:6f:37:ef:3c:65:07:17:0b:b0:9a:25:84:d8:84:e7:78:e3:
0b:b6:22:a5:ab:22:83:f2:4f:79:98:21:eb:8b:06:f3:96:93:
1a:0b:f2:f2:d0:bb:66:22:f2:61:8d:f6:8c:e5:0e:c1:19:c6:
80:ce:cd:93:7f:12:0f:f0:1b:d0:b3:a3:ac:f4:ab:ac:49:c6:
32:db:d6:1f:3e:f9:ea:b3:b7:f8:93:1a:06:5b:13:6e:f0:95:
6e:e6:22:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org