Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/fd6cd16a5594a835a81335385d6a23e2497110f1.roa
File: fd6cd16a5594a835a81335385d6a23e2497110f1.roa (raw, json)
Hash identifier: iBxwBEiHBmTTb9lItKDTzuBIbb8s2Nc6iIqhR7YAtsU=
Subject key identifier: 4C:38:CA:96:C7:17:F0:31:AB:3D:C5:B4:DD:4E:70:1C:5E:2B:96:26
Certificate issuer: /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial: 1FDC9C
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/fd6cd16a5594a835a81335385d6a23e2497110f1.roa
Signing time: Tue 25 Apr 2023 22:04:24 +0000
ROA not before: Mon 24 Apr 2023 22:04:20 +0000
ROA not after: Fri 25 Apr 2025 22:04:20 +0000
asID: 28509
IP address blocks: 201.174.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088092 (0x1fdc9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Validity
Not Before: Apr 24 22:04:20 2023 GMT
Not After : Apr 25 22:04:20 2025 GMT
Subject: CN=fd6cd16a5594a835a81335385d6a23e2497110f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7c:ce:7d:b4:c2:04:cf:60:83:69:c9:64:b0:
f3:f7:d6:6d:66:87:78:95:c2:de:2d:fa:c6:09:57:
5e:62:4c:c8:a4:6b:47:c4:73:ba:9c:46:e3:df:23:
f0:a8:8d:6f:bd:a6:40:54:bd:ba:f0:b3:ca:92:c0:
25:70:10:79:fc:d0:56:4e:67:97:5f:0e:0a:62:3c:
f6:40:a4:20:0d:2a:5e:78:ac:23:8d:98:65:c5:88:
48:bf:60:65:4a:90:e2:1d:07:38:2e:68:08:c5:ea:
32:2e:66:6c:37:af:a5:74:a4:9a:a6:6d:11:dc:14:
ee:28:2e:cb:d3:d9:13:a9:2d:73:e4:76:91:15:dd:
ad:82:7b:7a:d3:10:bb:5a:25:bf:ba:36:b3:c4:20:
49:67:85:32:6e:e6:8e:cc:ad:13:7a:f2:6c:12:81:
e9:4e:43:dc:17:57:7b:1c:b9:20:5d:fe:ae:37:69:
4e:0e:51:47:c8:b6:52:85:fa:e2:e2:63:a3:04:8f:
1a:72:83:e2:0e:ea:28:f1:e2:84:60:20:63:37:0f:
dd:39:43:a0:b3:e4:1f:51:f4:48:b6:80:07:73:1e:
27:f6:fb:11:9b:46:07:88:ed:9f:92:a0:e2:98:40:
c6:10:96:d1:10:76:66:37:0a:47:c1:99:94:ae:92:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:38:CA:96:C7:17:F0:31:AB:3D:C5:B4:DD:4E:70:1C:5E:2B:96:26
X509v3 Authority Key Identifier:
keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/fd6cd16a5594a835a81335385d6a23e2497110f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:56:ec:be:be:4a:ea:9f:e3:f8:19:dc:66:d8:5c:5e:80:90:
ff:f5:4e:59:f6:8a:a9:13:7f:c6:4c:2f:74:75:09:35:e7:fc:
22:b4:66:93:d7:76:f3:df:59:18:0b:b3:ad:85:9c:11:a4:a3:
c2:08:89:32:b7:ac:3c:23:d4:85:31:cd:40:42:de:85:b6:3e:
68:0b:d8:bb:2e:d7:e7:09:dd:e3:28:00:7b:5b:61:de:c2:cd:
3b:23:c1:20:e7:a5:50:db:0b:c8:24:24:de:b2:ac:f3:04:2b:
52:d3:d8:2f:24:1f:cf:d2:a2:f7:8b:70:62:bc:e1:24:73:48:
61:60:f6:05:24:79:0a:e6:11:80:45:d7:78:32:98:a3:19:1b:
1f:de:7b:ef:12:b0:00:65:2e:1d:01:ee:ec:1b:ba:af:ac:dc:
8c:e3:0e:b2:c4:e0:53:2f:51:c7:ce:0a:d7:04:37:d0:c9:e7:
b1:b8:42:8f:74:a6:68:91:89:4a:39:95:8e:bd:f5:75:e9:7e:
90:bc:87:9c:fa:44:f7:7f:7d:b5:20:dd:26:d3:c8:47:9c:29:
97:8c:76:4f:6b:3c:ff:37:b5:6c:e6:4b:40:13:3e:f9:2e:2f:
c1:e7:93:71:21:f3:48:95:fe:8d:a5:ce:db:68:55:c4:d0:62:
61:e8:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org