Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5d6222d60b62cc1ad90447ddca536888c9a03b31.roa
File: 5d6222d60b62cc1ad90447ddca536888c9a03b31.roa (raw, json)
Hash identifier: 6KFKj1YzKH6GJVIcAIp4xHDQeIqk8Oa60qjqUvC41d0=
Subject key identifier: BF:AC:39:C4:EB:D3:92:11:73:A1:17:82:F3:DF:38:B1:7D:9B:0A:1E
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 051E8E
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5d6222d60b62cc1ad90447ddca536888c9a03b31.roa
Signing time: Thu 03 Aug 2023 16:56:38 +0000
ROA not before: Wed 02 Aug 2023 16:56:38 +0000
ROA not after: Sun 03 Aug 2025 16:56:38 +0000
asID: 16629
IP address blocks: 200.90.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335502 (0x51e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Aug 2 16:56:38 2023 GMT
Not After : Aug 3 16:56:38 2025 GMT
Subject: CN=5d6222d60b62cc1ad90447ddca536888c9a03b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d9:6a:1e:e9:dc:0d:50:6c:d9:eb:d1:cc:a3:
2e:bb:76:87:f1:ec:0c:c7:06:e0:13:d8:b4:35:f9:
a0:d8:07:a5:66:aa:0b:43:33:56:2b:06:05:fd:b4:
5a:e0:31:82:d7:cd:98:b8:bb:cc:d8:f7:3b:93:53:
09:17:8e:16:0f:ea:95:78:95:c4:46:12:bc:53:5c:
eb:d9:62:3b:83:0c:e4:b1:eb:89:25:df:74:be:5a:
59:05:67:b5:79:a6:08:98:db:d5:f6:72:52:4e:0c:
83:85:59:3b:e5:b3:0f:02:0b:d1:09:f0:25:6e:1c:
27:88:26:8d:25:ea:70:d1:5e:21:99:cf:da:3c:da:
68:e0:db:06:31:71:74:27:5f:81:a4:19:ee:90:c4:
7b:2a:11:6d:fd:80:0f:71:3d:08:eb:02:df:2c:46:
f6:a1:65:1e:9d:b4:9e:64:82:97:1a:7c:30:cd:b0:
e9:e5:68:11:c5:e1:15:76:75:18:84:25:c2:d6:08:
b7:68:a1:ca:3d:09:c3:eb:4a:13:78:42:97:78:e9:
ee:37:07:13:eb:c0:0f:40:6f:37:fc:86:93:4b:cd:
ee:c1:1f:ea:6d:d5:ed:d0:0e:3d:38:25:67:d8:04:
f2:ce:5f:a2:85:7b:ed:ba:b7:90:ee:8c:2a:c9:16:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AC:39:C4:EB:D3:92:11:73:A1:17:82:F3:DF:38:B1:7D:9B:0A:1E
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5d6222d60b62cc1ad90447ddca536888c9a03b31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.90.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:f6:25:4c:d2:6c:85:7a:22:5a:1c:4b:28:7f:cd:dd:4d:1d:
40:79:de:ee:d2:46:da:d3:64:ab:b4:7e:fb:dd:9b:90:33:bc:
bd:cd:86:f6:27:2c:c9:a7:c3:4f:be:7a:3e:40:75:67:5c:19:
88:a0:c3:cd:fd:f6:95:0e:32:5d:b6:33:16:c5:cd:d1:45:44:
a6:35:db:a8:a4:03:ff:67:53:bb:02:41:b4:b4:e9:90:f2:c4:
1e:48:7f:b1:30:bd:27:a2:19:2c:ba:77:99:40:aa:3a:d7:03:
22:2b:1f:ec:f0:65:f2:bc:80:50:66:74:ed:ca:23:97:e2:90:
f2:3c:0c:05:4e:9b:d4:e3:f2:96:05:b8:65:51:b2:f7:a1:8d:
94:57:f4:cc:77:ce:97:5c:4b:2c:88:bf:97:a5:00:8f:70:86:
28:ff:5c:3a:cc:41:cc:ff:a2:f3:4e:af:ac:e8:79:0a:12:e1:
b1:97:de:cd:47:62:ad:c7:ef:aa:58:f4:c7:3b:ad:fe:4c:52:
9e:fb:ff:c5:20:f1:2d:ea:ab:9b:f6:82:e3:9e:b3:bd:49:4f:
99:d0:86:cd:33:f1:16:d4:b6:28:7f:54:c2:41:5c:38:0d:0f:
08:d4:40:32:5e:a9:f2:4b:e1:5c:dc:c9:9e:fd:cd:16:5a:ba:
dc:e0:d3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org