Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/a0ed25dd07372cb6fc394260176022807af6ec9f.roa
File: a0ed25dd07372cb6fc394260176022807af6ec9f.roa (raw, json)
Hash identifier: LVsFLIDIx8DUOwInLTczQTKcGUkvU6/0MEjgzRyyYh4=
Subject key identifier: B5:3A:8C:D7:39:40:6B:F2:7D:C4:39:F1:15:7D:9E:F3:9E:84:39:A3
Certificate issuer: /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial: 2634D0
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/a0ed25dd07372cb6fc394260176022807af6ec9f.roa
Signing time: Thu 14 Dec 2023 17:46:43 +0000
ROA not before: Thu 14 Dec 2023 17:46:43 +0000
ROA not after: Sun 14 Dec 2025 17:46:43 +0000
asID: 27947
IP address blocks: 192.188.50.0/24 maxlen: 24
200.0.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2503888 (0x2634d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=138405134343f63286b605fe9165839fd04a4252
Validity
Not Before: Dec 14 17:46:43 2023 GMT
Not After : Dec 14 17:46:43 2025 GMT
Subject: CN=a0ed25dd07372cb6fc394260176022807af6ec9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:ab:f8:86:8b:f1:e2:ad:47:4e:84:e4:d7:
5b:24:70:13:d8:4f:7a:fa:9b:d3:6c:bb:f7:d3:09:
b0:45:83:31:95:d2:50:d2:39:1c:d2:79:56:27:98:
85:91:e0:7e:e0:8d:2e:e8:bb:5c:73:53:95:98:bd:
77:c0:fe:cf:e5:a2:d3:8c:a4:d6:1a:9e:ac:83:eb:
d1:07:a6:7d:9d:1d:52:2e:39:47:65:9e:3d:d4:2b:
83:24:ab:7d:de:1d:03:a4:65:88:1d:cb:6e:b1:04:
46:ee:77:4b:3a:8f:ab:23:6a:ee:1b:4e:57:fd:a4:
b6:7c:ed:1e:bd:7d:36:79:35:1a:d7:bb:e1:37:b5:
31:5a:1c:f0:ff:17:ac:2d:3b:dd:a6:a2:e3:e9:1b:
14:94:96:13:d3:fb:7c:dd:06:ab:c5:95:ba:2a:1e:
1b:00:81:0c:b1:38:3a:49:7f:b7:61:87:be:97:16:
90:a4:1c:a2:f2:e7:72:99:ad:ba:1d:49:69:ed:df:
59:40:fe:58:69:1d:8e:08:df:f9:68:9f:61:87:fc:
b4:b6:70:ec:14:e1:c6:dd:ea:9f:8c:3a:ef:de:8e:
cf:64:09:bb:8a:87:69:bf:0d:be:ce:3a:a2:b3:44:
4c:23:12:18:b2:fe:3e:09:80:f9:d5:91:7b:ce:da:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3A:8C:D7:39:40:6B:F2:7D:C4:39:F1:15:7D:9E:F3:9E:84:39:A3
X509v3 Authority Key Identifier:
keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/a0ed25dd07372cb6fc394260176022807af6ec9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.50.0/24
200.0.28.0/22
Signature Algorithm: sha256WithRSAEncryption
28:48:7d:9c:79:62:46:17:fb:11:23:2d:4d:c2:3d:67:2f:c5:
cf:0d:ac:18:d0:80:ef:cc:c2:d4:6b:80:b4:9b:38:5d:f4:d4:
41:00:ed:b6:85:66:8f:ae:7c:31:fc:4d:89:50:29:cc:e7:ec:
bb:58:84:02:36:bc:4c:c4:0d:71:87:cb:4d:3d:46:a1:2e:42:
61:45:74:50:4e:de:d6:22:48:e5:d1:49:ff:f2:f4:76:62:08:
f8:eb:98:58:b9:01:d0:74:e1:22:dd:89:99:17:62:69:0d:24:
2a:03:21:50:ed:49:9e:5e:5b:1e:a2:ab:fa:9e:2d:92:b6:f5:
47:dc:4a:ed:22:44:9b:5f:21:f1:6b:58:88:8b:43:e8:7b:1a:
4f:53:f3:c1:51:cc:69:cf:0c:6c:80:0b:d5:81:29:ac:30:1b:
18:46:b6:f6:2b:b9:75:dd:54:3e:e8:72:9d:a4:0c:fe:b9:f7:
ef:11:c0:06:6b:37:c1:66:71:75:68:44:87:7b:57:6a:7c:12:
40:f0:df:4c:9b:18:1a:e7:de:c0:01:dc:5d:27:ee:e1:b2:6e:
8d:82:4f:d9:2f:27:32:6d:6c:58:09:e4:08:b9:cb:09:3d:b9:
c1:fb:88:31:20:6d:66:b9:88:11:27:19:47:6d:82:15:66:59:
59:fb:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org