Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/668577aa3e49403396fa846cfe4cafb72715b2ca.roa
File: 668577aa3e49403396fa846cfe4cafb72715b2ca.roa (raw, json)
Hash identifier: zayQrjTSSRlWpvZc5+3MIMPxR60IP8ijWoBeRj0DBco=
Subject key identifier: 80:DF:A0:FC:F3:08:0D:75:01:CE:C3:51:91:4F:EB:DA:6F:69:46:87
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03F396
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/668577aa3e49403396fa846cfe4cafb72715b2ca.roa
Signing time: Tue 11 Jul 2023 17:37:17 +0000
ROA not before: Mon 10 Jul 2023 17:37:17 +0000
ROA not after: Fri 11 Jul 2025 17:37:17 +0000
asID: 16629
IP address blocks: 200.50.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258966 (0x3f396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 17:37:17 2023 GMT
Not After : Jul 11 17:37:17 2025 GMT
Subject: CN=668577aa3e49403396fa846cfe4cafb72715b2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:15:d6:21:0a:1f:02:49:1e:d2:bc:5c:3a:
78:d5:61:1f:7d:ce:09:45:93:0e:13:73:89:89:81:
39:60:f2:ac:29:11:fc:3e:1f:e9:29:7c:ce:e2:e9:
62:65:a1:e3:0a:c7:66:4a:b6:07:25:e0:0b:1c:a0:
31:53:15:e6:7b:2f:76:76:d3:7d:e5:93:03:7d:06:
9c:c0:6e:6e:a0:ea:fc:4a:a7:f2:f0:66:8f:69:60:
10:c8:24:c8:04:78:9d:77:c4:a9:37:15:33:7e:9c:
21:8b:da:4f:0e:1d:86:51:de:36:65:94:d1:36:b7:
ee:bf:fe:11:54:ac:d1:df:da:a0:84:03:e2:1e:d8:
68:13:fc:6a:2e:7d:62:2b:53:d5:d3:41:aa:be:a2:
23:bd:c7:3c:a8:27:2c:e9:86:92:5e:5c:31:7e:66:
15:f0:d0:98:a0:90:94:fc:0b:77:9d:4e:9a:cb:5c:
78:eb:58:6b:a4:0f:e8:be:38:39:5e:4a:81:ea:fe:
d2:95:50:a9:7b:9c:3b:dd:56:2a:df:82:f4:ac:df:
c6:74:6b:e7:90:8f:1e:87:d2:2f:ef:27:70:ac:60:
82:63:67:1f:0b:6d:a7:41:86:71:22:5e:da:ce:bc:
c0:b4:5e:80:17:12:56:dd:e8:83:6e:48:12:54:b9:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DF:A0:FC:F3:08:0D:75:01:CE:C3:51:91:4F:EB:DA:6F:69:46:87
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/668577aa3e49403396fa846cfe4cafb72715b2ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
14:87:b1:f5:a0:83:ef:83:77:31:bc:23:51:62:a4:cc:2c:bb:
f4:1f:45:9b:85:37:05:b3:f9:d8:cd:ae:9c:10:2a:21:7f:7c:
3a:1d:f5:68:39:52:15:e4:62:e4:9e:2d:21:f5:93:bd:20:96:
a4:af:ee:13:3f:c5:fc:4d:83:d3:4e:42:86:59:7c:71:c2:76:
69:74:8a:51:b7:ec:cb:b2:8b:21:32:55:bd:cb:6b:38:66:cd:
5e:5e:05:27:17:75:7d:db:9d:06:94:6f:cc:49:9c:89:2b:47:
ab:dc:8f:9b:88:4e:84:87:37:84:44:59:9f:d2:36:23:99:fb:
4c:47:52:ea:4b:9a:26:59:06:d4:4a:7e:24:23:ea:1c:f9:17:
15:09:8a:27:68:20:0a:18:89:eb:1a:f1:14:2a:a1:81:95:a4:
46:0f:02:86:65:15:e2:6f:e7:12:81:8e:c7:26:7c:20:72:2e:
1c:49:f8:0b:07:d3:3f:43:94:4a:a4:d3:58:4b:c7:ca:7f:c4:
10:6c:a6:fc:f7:7c:40:c8:a0:57:5f:5c:24:42:ef:af:d8:2f:
05:84:36:2a:40:1d:63:bb:f8:e2:60:bf:10:b6:d9:53:3d:08:
ff:a9:13:12:e4:ab:79:18:f1:68:cb:c8:aa:97:bd:64:b7:42:
68:e7:71:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org