Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/8a50c52ef179ab200c5eeecd301e8b37f70f4072.roa
File: 8a50c52ef179ab200c5eeecd301e8b37f70f4072.roa (raw, json)
Hash identifier: e2P8I26ATeNk5VC4nnbbcCxauxonx+drvwC2YhjG9aI=
Subject key identifier: 58:46:41:0B:67:70:DD:F1:B4:FE:88:B8:B3:73:E9:CC:FD:3A:CB:F4
Certificate issuer: /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial: 1EDB53
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/8a50c52ef179ab200c5eeecd301e8b37f70f4072.roa
Signing time: Fri 24 Mar 2023 08:31:33 +0000
ROA not before: Thu 23 Mar 2023 08:31:33 +0000
ROA not after: Sat 22 Mar 2025 08:31:33 +0000
asID: 28509
IP address blocks: 201.174.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022227 (0x1edb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Validity
Not Before: Mar 23 08:31:33 2023 GMT
Not After : Mar 22 08:31:33 2025 GMT
Subject: CN=8a50c52ef179ab200c5eeecd301e8b37f70f4072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:c9:47:b3:6a:c3:00:4e:91:0a:5d:81:e6:
cb:33:4c:3d:ec:15:10:55:aa:57:3c:1f:16:8f:be:
30:f4:67:f7:8c:2b:eb:5e:5e:24:0d:c1:56:17:a2:
1a:8c:ca:f8:b0:7d:e0:bc:5b:6b:5b:12:4d:2d:7b:
5b:f6:c4:a7:ba:bb:d4:49:5d:30:f4:31:73:f4:29:
08:b4:ef:32:d3:17:bf:d1:8f:55:be:04:87:92:f0:
2f:02:23:c9:ae:2f:cb:21:f2:aa:bb:4a:f5:b7:62:
6b:7c:f6:70:2f:dd:7a:65:3c:c2:98:73:e9:f6:ce:
ce:dc:f8:6c:9d:1c:73:8e:97:f2:d7:b7:95:cd:e3:
28:34:6f:d9:62:7e:1e:fe:79:26:ee:35:30:dc:2f:
04:5a:3b:38:0b:cc:a1:d8:e7:0d:de:ff:54:7e:74:
99:35:39:6e:74:f6:de:9e:9a:35:ba:08:22:35:c8:
83:12:65:a7:f5:79:58:c0:0a:c3:53:65:97:1c:49:
f7:26:b6:9c:01:4e:be:11:72:71:b1:d7:82:68:94:
e3:19:88:97:00:61:13:6e:f7:c5:84:d3:73:aa:6f:
23:37:87:6d:5b:fd:1b:23:b8:e5:f3:db:91:c0:62:
3b:28:c5:b3:ac:5f:bb:d8:86:e4:ee:47:e0:f9:36:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:46:41:0B:67:70:DD:F1:B4:FE:88:B8:B3:73:E9:CC:FD:3A:CB:F4
X509v3 Authority Key Identifier:
keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/8a50c52ef179ab200c5eeecd301e8b37f70f4072.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.207.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8d:6e:0f:e2:fa:21:7b:db:f9:d6:a5:69:cc:57:7d:c5:b1:
53:35:8f:45:23:39:22:ff:ec:7f:30:9a:6b:b5:e6:c2:2b:fc:
3b:c5:dd:e9:f8:b0:4e:09:b7:fc:dc:15:b9:e6:7c:e5:04:89:
7f:15:9e:f3:f2:8f:2c:bd:03:af:bc:6c:c1:4d:0f:99:fe:91:
62:06:11:c2:42:39:c7:84:aa:9d:ac:30:15:80:53:28:3b:ed:
c9:06:c8:ed:89:5f:57:2b:e4:6c:fe:79:93:49:7e:6d:d8:b2:
b0:a0:1b:03:31:9c:3a:c9:dc:e3:76:70:45:27:79:99:54:cb:
e2:7a:3f:34:d3:0e:e2:95:15:80:da:18:dd:32:82:c3:fb:37:
12:8f:21:70:d7:48:92:c1:6f:2c:8d:b4:23:cf:0c:f9:da:cd:
98:c4:12:63:25:4c:7f:cb:d5:70:85:ee:a4:88:e8:68:bc:e9:
32:73:0c:a2:f2:0e:62:0d:8c:8d:c3:e7:96:d9:97:7d:a2:af:
2f:3d:04:e2:ab:6a:28:a2:ef:15:f4:26:d4:6a:7e:82:f5:57:
da:9c:a6:59:13:6a:09:dc:e9:a6:2e:37:d0:bb:c1:12:d8:0c:
f3:7a:52:de:9c:89:c0:91:c5:31:bd:b5:00:9b:35:59:7e:cf:
1d:c0:84:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-ams.rpki-client.org