Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/87693e91a6ba782d6eba86cbb013b68061954465.roa
File: 87693e91a6ba782d6eba86cbb013b68061954465.roa (raw, json)
Hash identifier: yx+9NjSDlqwr1X6xWFu1BkvwvTAxpRw1/c7lQs1boLM=
Subject key identifier: B2:08:79:9C:2B:A3:C6:DF:CF:34:D6:61:29:48:73:79:57:AD:06:F0
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03C730
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/87693e91a6ba782d6eba86cbb013b68061954465.roa
Signing time: Tue 11 Jul 2023 13:26:12 +0000
ROA not before: Mon 10 Jul 2023 13:26:11 +0000
ROA not after: Fri 11 Jul 2025 13:26:11 +0000
asID: 7418
IP address blocks: 200.29.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247600 (0x3c730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:26:11 2023 GMT
Not After : Jul 11 13:26:11 2025 GMT
Subject: CN=87693e91a6ba782d6eba86cbb013b68061954465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:8c:db:41:61:03:51:15:be:08:75:0e:9d:
ba:da:c6:b7:14:14:f7:35:b8:7a:cb:42:47:9b:8f:
77:0a:0a:c6:2e:58:18:66:35:92:60:80:63:f5:1c:
0b:ec:92:6e:da:d6:b0:f2:3d:17:a7:4e:30:8d:6e:
14:7b:6c:d5:df:98:57:1b:54:10:34:e9:87:be:55:
8b:42:9e:c1:67:67:f3:39:c1:e7:6c:42:6b:ad:7a:
48:02:10:d6:1a:45:ba:37:bb:1c:61:54:68:32:1a:
ed:ec:bd:fd:d8:0c:5b:b9:1f:4c:58:64:42:14:b8:
49:d8:e2:b9:b9:f6:10:e9:b7:76:41:82:7d:9b:90:
0e:5c:1a:08:07:ed:19:62:bd:d8:a7:ea:ea:24:63:
52:fd:68:e8:5f:a0:f7:5f:71:07:40:a2:4f:a3:eb:
67:14:7a:41:17:5a:64:33:d0:e1:af:72:50:f9:64:
e4:f7:1f:62:4b:e7:ec:81:85:56:98:04:aa:d4:7e:
5c:e8:ea:6f:8e:b6:f3:30:ce:20:e4:94:14:13:4b:
e0:2d:d3:63:c7:ba:46:54:9e:49:33:f0:a5:93:5d:
15:06:de:bf:23:73:9c:db:fe:41:3c:f8:df:a5:f7:
51:a3:45:d8:b7:0d:f9:c2:c2:57:d5:0e:08:4c:9a:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:08:79:9C:2B:A3:C6:DF:CF:34:D6:61:29:48:73:79:57:AD:06:F0
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/87693e91a6ba782d6eba86cbb013b68061954465.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.36.0/24
Signature Algorithm: sha256WithRSAEncryption
80:46:39:4a:0e:a9:f9:e4:e4:af:af:8b:3b:a9:72:bd:1d:c9:
42:4a:b9:f6:51:7f:7b:d5:36:13:76:92:7d:ad:24:58:23:b7:
38:c5:ae:f5:6f:78:ca:66:0c:cf:76:3e:cc:8d:b9:f0:69:f9:
10:70:fd:ee:a3:70:ba:c4:8b:1a:13:59:01:0c:b7:2b:f5:67:
28:84:1f:e3:7f:3d:3b:57:7a:69:cf:4e:db:a4:bd:62:52:23:
52:58:28:a6:cd:6d:d7:45:3d:06:6a:b3:ab:7a:38:27:99:a1:
97:8e:19:a9:e4:4e:b5:2c:bb:1a:c2:ae:0f:f7:a4:33:f7:db:
6b:46:96:95:30:2c:5d:8b:bd:88:5d:98:55:24:c9:86:1a:1a:
cc:0d:98:df:27:15:28:99:42:4c:1a:2a:5e:34:b4:39:78:b5:
c2:a1:75:01:f7:2c:ed:63:b6:1a:64:cc:2e:72:2a:23:fc:98:
19:0c:c6:ab:8a:4e:7a:b2:94:12:a9:3a:ed:4d:4e:d8:e5:5c:
ec:62:60:4d:03:23:d1:92:af:9a:db:34:40:fd:42:18:85:24:
7f:78:3b:20:a6:b3:8f:6f:25:97:37:97:9a:e7:0a:84:95:d6:
28:b9:ce:80:41:bb:18:ad:0d:05:78:8f:66:24:a9:7a:e9:22:
16:de:a1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org