Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/922aa0ec2866c020540c7ae1707bcf283a6b8b7f.roa
File: 922aa0ec2866c020540c7ae1707bcf283a6b8b7f.roa (raw, json)
Hash identifier: DblWdDKtiaHxJWuY+GX2688tqFHrMHXOsWxZiceDmbs=
Subject key identifier: 16:95:08:C0:14:95:3C:0D:23:07:3A:61:95:34:23:6A:AB:16:7D:84
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03F570
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/922aa0ec2866c020540c7ae1707bcf283a6b8b7f.roa
Signing time: Tue 11 Jul 2023 19:45:20 +0000
ROA not before: Mon 10 Jul 2023 19:45:20 +0000
ROA not after: Fri 11 Jul 2025 19:45:20 +0000
asID: 7004
IP address blocks: 200.50.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259440 (0x3f570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 19:45:20 2023 GMT
Not After : Jul 11 19:45:20 2025 GMT
Subject: CN=922aa0ec2866c020540c7ae1707bcf283a6b8b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:20:b5:98:db:35:da:cc:dc:20:94:c5:e0:22:
30:c0:96:32:61:17:bb:a6:c5:21:9f:4e:cf:7f:16:
ab:b8:f9:51:1d:9c:7b:6c:e9:24:93:10:c4:63:2b:
a2:aa:42:27:1f:76:75:9a:45:aa:13:af:7a:e5:c6:
68:d7:41:34:3e:d0:40:6a:67:e9:02:29:4e:c9:86:
bb:3c:57:09:d7:a1:2e:aa:1f:64:d9:50:96:e2:b1:
40:43:1c:62:95:f3:7a:90:a6:00:2f:9a:6d:8d:b8:
53:5e:44:ce:06:00:4b:d3:4c:3e:7a:ad:1f:94:48:
98:e3:03:20:e2:0c:ff:08:50:73:b7:75:e2:41:ed:
30:06:58:36:5f:64:6a:d0:89:70:b1:3d:8f:d4:64:
45:bd:3f:0f:8d:7a:a0:e3:1e:7b:82:90:00:53:e9:
5c:2f:95:96:9b:7b:ed:df:85:92:1d:fd:61:d0:0d:
84:e2:0c:be:46:ab:43:3f:d3:da:38:07:07:99:d3:
b6:f4:d1:79:b6:ae:ca:df:ed:50:55:a6:34:5d:5e:
b3:9b:1d:4c:a2:0c:a1:92:da:bb:5d:d9:c6:f7:06:
b3:a8:ec:61:b4:ac:2f:88:9e:83:9f:71:ff:3a:b1:
3f:33:3a:1a:76:44:e5:c2:36:be:8b:b4:3a:d7:6c:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:95:08:C0:14:95:3C:0D:23:07:3A:61:95:34:23:6A:AB:16:7D:84
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/922aa0ec2866c020540c7ae1707bcf283a6b8b7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.42.0/24
Signature Algorithm: sha256WithRSAEncryption
48:42:fb:2b:29:a6:e8:8c:91:b8:30:b2:fb:34:cb:f7:f4:a9:
78:72:a0:c8:c8:87:b9:72:a8:ac:36:64:08:db:88:bc:68:e2:
41:53:60:96:58:76:c2:9a:ed:66:8e:c8:8e:57:cd:7a:14:0b:
42:06:ed:f2:b9:68:9d:9f:5a:72:1b:c0:30:f9:ce:27:5f:47:
dc:8f:56:ae:73:15:1b:85:fc:9c:d3:f9:9d:63:11:6a:1a:f5:
90:64:7d:97:35:51:2c:b6:e1:75:19:30:4f:0a:c5:52:bd:ae:
66:ef:5b:e0:ce:84:57:87:87:7f:f8:f0:90:ae:f8:0e:e3:4e:
8d:e6:97:df:df:b7:df:50:cd:19:00:4c:a2:b5:c1:84:52:76:
b7:14:cc:63:3e:4b:b3:f3:04:6d:02:f8:46:ad:85:53:6e:67:
a8:cc:61:78:42:17:c4:b0:db:a8:8f:c1:cc:a5:2c:d3:35:b7:
7e:67:e6:2e:6f:69:f3:b7:23:48:4f:39:92:a4:d7:96:96:3a:
f6:58:f9:e5:4e:4f:98:0d:9e:45:64:f5:21:05:67:37:ff:a0:
1e:e3:13:52:68:b7:b6:d9:90:49:8d:e6:05:19:e7:e5:c7:8f:
96:b3:6a:5e:99:f5:03:5c:df:c3:d6:aa:c1:ec:c2:94:aa:bb:
d0:21:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org