Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5f93d5a2386ee7efbf495147d577f0f10250f1a2.roa
File: 5f93d5a2386ee7efbf495147d577f0f10250f1a2.roa (raw, json)
Hash identifier: cCQkDQQWiutEGPKscnKIZHzsnBnoQ6TjOKTBpjZIPA0=
Subject key identifier: 71:DD:CB:61:82:0A:CB:18:14:D9:8D:62:7D:50:12:99:21:06:77:8B
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03E3F7
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5f93d5a2386ee7efbf495147d577f0f10250f1a2.roa
Signing time: Tue 11 Jul 2023 13:31:43 +0000
ROA not before: Mon 10 Jul 2023 13:31:43 +0000
ROA not after: Fri 11 Jul 2025 13:31:43 +0000
asID: 7418
IP address blocks: 200.29.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254967 (0x3e3f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:31:43 2023 GMT
Not After : Jul 11 13:31:43 2025 GMT
Subject: CN=5f93d5a2386ee7efbf495147d577f0f10250f1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:0b:a1:b2:d9:a5:c2:d9:18:82:fe:10:7d:
54:f4:18:9f:dc:ad:d7:2c:6b:f9:67:ca:68:c0:f1:
fe:4c:9e:7f:29:bf:a5:58:da:68:53:5f:70:d3:47:
db:74:3c:57:26:a5:0d:24:75:a1:ee:b4:fa:e3:33:
83:cb:90:9e:ed:3f:04:a7:6c:3b:5b:3e:32:37:81:
a9:b6:39:6f:53:5c:d5:f2:1a:30:83:a3:8f:5a:fc:
03:0c:2c:05:b9:db:1f:2f:d5:88:f6:b6:0e:a9:52:
08:49:bf:72:a8:14:1e:04:0b:42:36:99:9b:c6:bd:
20:5c:80:24:fe:e8:2c:e7:c7:92:12:f1:b7:05:00:
61:ce:08:19:f7:bb:a4:18:b9:a1:eb:6a:e9:ed:4a:
51:cb:53:d9:2b:7e:d8:af:89:a5:4c:7f:36:bc:38:
b2:9e:7f:63:e1:2d:76:a0:d1:ba:98:25:36:10:4d:
f6:05:f2:c5:bc:87:fc:2a:62:8e:df:ca:d7:e5:b7:
ce:23:68:3d:89:52:39:cf:22:08:d0:db:b4:7d:b6:
e0:49:94:10:6b:08:22:5d:85:af:f8:58:fa:90:43:
26:10:4b:d8:bd:5c:9f:13:b6:d3:d5:67:eb:ad:9e:
91:5e:f5:c2:17:73:37:65:6f:66:5a:66:76:78:0a:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DD:CB:61:82:0A:CB:18:14:D9:8D:62:7D:50:12:99:21:06:77:8B
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5f93d5a2386ee7efbf495147d577f0f10250f1a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a3:4c:23:2a:34:84:cd:db:5b:c4:ad:69:fb:62:c4:82:9a:
7b:4b:f0:aa:8d:1c:97:3a:85:2d:49:08:3f:8e:44:35:03:d6:
84:d3:f3:22:bc:d1:6e:3c:44:f4:e0:6b:5c:14:2e:cc:46:df:
e5:f3:a4:cc:70:30:24:c5:7c:f4:76:ed:82:f3:e4:6b:c7:51:
68:60:ca:71:3c:b9:93:9c:12:30:0e:f3:42:d3:5d:62:3e:8d:
1e:f8:be:f3:9f:6a:4b:ca:61:c2:e3:c3:d0:14:1b:e5:b4:d5:
9d:8b:74:0a:1b:63:bf:ad:e8:77:16:d8:14:20:42:ad:b9:69:
30:c4:6e:42:98:03:14:79:08:76:7e:f4:72:1b:50:83:b9:69:
32:c4:9f:1a:ae:e6:8c:63:1f:f7:7a:c6:7f:b4:4b:8a:c0:90:
69:45:c7:f8:b2:7f:90:74:34:80:dc:d5:22:49:54:e1:f5:94:
a4:3b:36:f8:95:fc:5e:00:8c:13:cd:eb:ed:4e:eb:b9:65:1c:
61:db:cd:9d:6a:9b:11:e1:f8:df:a9:5b:97:97:d1:f8:45:cb:
93:81:e5:13:d6:80:3c:66:e1:39:66:c6:08:f2:19:6b:14:b8:
62:17:50:0d:0a:e7:6d:63:66:c5:b5:3a:45:28:ff:d8:22:37:
06:cc:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org