Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/0f892ac31454485dd6831e8116e54bcdb29a9726.roa
File: 0f892ac31454485dd6831e8116e54bcdb29a9726.roa (raw, json)
Hash identifier: D00jHe03hvaCcP0YMIERnpP9/rb5tTTXiXURS+uTTr4=
Subject key identifier: BD:99:F9:9C:99:92:D6:64:2E:F6:DE:A8:96:46:DC:0F:E5:E7:FC:C7
Certificate issuer: /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial: 0D5E48
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/0f892ac31454485dd6831e8116e54bcdb29a9726.roa
Signing time: Wed 24 Mar 2021 14:41:27 +0000
ROA not before: Wed 24 Mar 2021 14:41:26 +0000
ROA not after: Tue 24 Mar 2026 14:41:26 +0000
asID: 27947
IP address blocks: 200.0.30.0/23 maxlen: 23
200.0.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876104 (0xd5e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=138405134343f63286b605fe9165839fd04a4252
Validity
Not Before: Mar 24 14:41:26 2021 GMT
Not After : Mar 24 14:41:26 2026 GMT
Subject: CN=0f892ac31454485dd6831e8116e54bcdb29a9726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:89:cb:3b:35:68:ee:36:e0:44:be:d6:75:
11:03:44:3c:2d:15:b4:09:e9:7a:15:be:99:aa:72:
59:49:52:c6:19:9f:89:eb:a8:05:a0:4e:37:8f:ea:
84:12:31:4a:d7:10:31:60:8c:47:6c:56:ca:35:a7:
3a:f2:cf:a2:16:f5:3b:a1:d8:a2:e1:77:ea:4a:27:
7a:58:31:86:f9:27:21:c3:d0:54:0d:ec:01:0f:29:
6d:ef:9f:11:4d:36:23:c8:1b:e1:0f:85:a7:21:09:
1a:95:b6:1e:b1:37:22:35:07:e0:41:16:68:02:c9:
4a:51:ed:75:59:a2:32:e8:ff:ab:00:42:9b:cc:98:
0d:1d:65:c7:01:0e:12:ac:f6:ee:e4:ab:ee:ac:2e:
7f:5f:5d:9b:87:9e:4c:34:62:0b:f1:43:99:29:23:
bb:83:12:f8:26:fa:5b:7d:53:54:1c:44:5f:5e:b0:
95:55:6f:4b:7d:cc:c8:54:e3:06:24:89:b7:7c:90:
a6:54:62:13:60:d4:da:8a:2d:ae:e0:80:ff:27:07:
df:89:7d:d4:bb:b3:6c:98:9c:f6:46:a7:af:a5:ae:
83:02:0c:ef:e8:7a:cd:55:95:02:13:ed:5e:15:51:
50:52:0e:84:26:39:12:39:52:72:7b:1e:16:89:ab:
53:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:F9:9C:99:92:D6:64:2E:F6:DE:A8:96:46:DC:0F:E5:E7:FC:C7
X509v3 Authority Key Identifier:
keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/0f892ac31454485dd6831e8116e54bcdb29a9726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.28.0/22
Signature Algorithm: sha256WithRSAEncryption
40:40:f6:83:01:4d:fd:d9:09:9f:c6:48:80:18:2a:87:b7:32:
c5:8a:36:cb:64:09:df:ed:1a:f4:d2:87:12:82:69:d9:ab:ac:
98:ed:a3:17:61:53:2f:fd:b4:5e:ce:ef:9b:47:e6:ed:dc:96:
f2:0d:8b:25:c3:52:c1:7b:44:be:91:a4:50:d0:7e:a0:d0:22:
2d:cb:df:03:82:7f:27:2e:3b:c7:7a:68:86:0e:3b:69:41:57:
97:93:80:78:56:b1:05:fe:cd:da:82:7c:8a:84:0c:84:e1:93:
18:5a:1a:8b:21:a6:a4:f6:eb:b5:50:25:37:4b:34:7a:55:b1:
50:af:24:7f:3c:f9:0b:b9:d7:34:8b:47:ad:db:3f:58:98:d0:
c3:66:f1:bc:f7:e3:8d:17:67:b8:5e:bb:77:75:e6:b3:ca:cb:
b4:da:61:c2:77:3d:62:1a:d6:17:61:63:cf:ec:c1:0f:5c:71:
cb:96:7c:81:ff:de:9e:a5:b4:48:36:a8:da:2f:c3:23:7c:fd:
cd:9b:fb:66:39:4c:7b:de:4b:03:a3:01:19:a8:a4:91:74:a2:
4f:42:a8:92:56:f2:61:0f:a1:2e:84:a1:ff:2c:76:ee:80:fe:
34:a9:4c:61:e2:9b:ec:12:26:0e:dc:be:6d:63:e3:cb:02:43:
c8:3a:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org