Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/63caec227565e4b768e8656b8e78877168eba026.roa
File: 63caec227565e4b768e8656b8e78877168eba026.roa (raw, json)
Hash identifier: q6YLiEy/1OiUqz+SPzKZmkWp4+rgyzpxTL3eDFz8cUE=
Subject key identifier: 7A:71:91:29:D1:38:19:A7:9F:57:C9:49:B6:FD:A3:6E:51:79:D2:E2
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03DB65
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/63caec227565e4b768e8656b8e78877168eba026.roa
Signing time: Tue 11 Jul 2023 13:29:33 +0000
ROA not before: Mon 10 Jul 2023 13:29:33 +0000
ROA not after: Fri 11 Jul 2025 13:29:33 +0000
asID: 7418
IP address blocks: 200.29.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252773 (0x3db65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:29:33 2023 GMT
Not After : Jul 11 13:29:33 2025 GMT
Subject: CN=63caec227565e4b768e8656b8e78877168eba026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:ac:fb:c7:22:c2:d7:54:4d:b2:a9:a9:34:
76:45:76:e5:e9:35:a7:09:ac:86:82:db:dd:87:64:
49:58:76:8b:c9:e5:7e:cf:85:11:91:13:e5:e0:0e:
f6:4b:2f:4d:1e:19:b9:69:e3:10:c4:75:ab:2a:bc:
d9:45:79:f6:5d:b7:b3:04:29:60:df:33:02:64:ac:
69:93:82:f0:6b:7d:4b:02:76:fd:18:88:f7:c3:f0:
45:8b:68:ad:1f:48:74:7e:72:2e:3a:ba:fd:d8:a5:
47:73:3e:b4:d7:39:34:b8:3f:4e:0b:06:d6:9e:af:
3f:99:df:cf:df:c1:71:fe:f3:55:6b:7e:46:79:47:
7d:30:fd:9d:af:33:e0:93:7f:d6:a0:34:1b:16:2d:
d5:d6:cd:0a:d3:b4:a1:78:9e:b0:9e:50:f5:29:dc:
db:7e:4b:81:83:21:a2:64:43:ca:76:d2:f7:38:ed:
93:1f:ad:4e:17:87:a8:b7:fe:85:31:a9:01:34:c2:
21:13:ad:a7:87:75:d7:20:5f:df:24:3d:f1:45:91:
3a:b7:e6:60:7e:b6:93:e6:d9:0d:95:32:37:1e:03:
04:cd:56:0f:02:85:3e:ba:a4:d6:f2:5d:28:c3:e1:
34:a4:6c:d2:21:6e:57:b2:bd:db:33:5b:98:c8:40:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:71:91:29:D1:38:19:A7:9F:57:C9:49:B6:FD:A3:6E:51:79:D2:E2
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/63caec227565e4b768e8656b8e78877168eba026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0b:11:e7:ae:09:a1:b5:b6:9d:8d:a7:a3:cd:3f:6b:6e:34:
c4:66:cc:ab:0e:77:9d:af:3c:e9:2e:d0:ca:de:68:2c:25:05:
9a:36:3a:fe:85:d9:a0:16:54:7c:c0:4c:63:42:08:65:85:ce:
1b:20:03:a2:ea:d5:66:62:31:bf:e2:f4:b5:54:ca:73:63:29:
7d:6d:00:1e:70:a6:3f:a9:c1:42:a6:4e:b0:06:33:23:a9:03:
f3:76:2c:8a:a0:63:d7:cf:8c:4f:9d:94:ca:c0:39:66:a2:cb:
f3:98:75:42:0d:d8:04:f4:08:02:7e:36:db:dd:88:b6:20:17:
3d:0f:37:ee:13:f5:cf:9b:d5:81:5d:9d:b9:77:60:93:82:27:
75:b4:fe:46:57:9e:1a:b4:02:44:fb:23:29:10:20:be:cd:d5:
0e:8f:dc:97:f2:64:0f:b1:2a:4a:98:9c:60:1e:83:28:f6:04:
c4:8b:0a:a6:d2:6a:83:97:57:9f:a8:90:1c:75:14:67:04:97:
1c:0a:da:f6:59:fe:29:04:04:ec:0a:bd:4b:04:c2:67:91:36:
48:8a:91:91:24:c9:7d:01:05:f6:4f:f9:6a:13:ef:7a:44:ad:
79:40:88:ff:8d:87:25:a4:d3:f7:8d:65:d7:2e:36:cd:36:92:
c6:2a:f1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org