Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/c070906a25d7e3f117f9c5dfa65db0e9b2539d0e.roa
File: c070906a25d7e3f117f9c5dfa65db0e9b2539d0e.roa (raw, json)
Hash identifier: 1uzIYc54zDZo/JQGKql/tbj9yBWlj/RmV/pdtKxNVsU=
Subject key identifier: A3:34:09:77:16:CB:85:3E:8D:35:B6:41:8F:11:7D:AD:CE:68:60:30
Certificate issuer: /CN=8a25370ef6240a33a5dee984da551ba55fa78abf
Certificate serial: 1E738F
Authority key identifier: B4:C8:40:EA:6B:59:67:49:EF:C7:65:01:D1:D4:09:F0:B3:82:C4:0E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a25370ef6240a33a5dee984da551ba55fa78abf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/c070906a25d7e3f117f9c5dfa65db0e9b2539d0e.roa
Signing time: Mon 27 Feb 2023 13:35:47 +0000
ROA not before: Sun 26 Feb 2023 13:35:19 +0000
ROA not after: Thu 27 Feb 2025 13:35:19 +0000
asID: 52286
IP address blocks: 200.124.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995663 (0x1e738f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a25370ef6240a33a5dee984da551ba55fa78abf
Validity
Not Before: Feb 26 13:35:19 2023 GMT
Not After : Feb 27 13:35:19 2025 GMT
Subject: CN=c070906a25d7e3f117f9c5dfa65db0e9b2539d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:65:1e:70:41:bf:88:f9:62:3e:81:b6:3e:
f9:42:34:6a:a9:c7:c8:df:16:00:65:eb:c0:ba:17:
49:d8:2c:70:d3:d0:48:ca:55:63:e1:12:8f:aa:4a:
35:d2:d5:bb:a6:93:5b:12:60:d2:07:40:0d:bd:4c:
a3:fe:54:24:2f:c2:96:06:9b:cf:56:2d:b2:c0:50:
91:cb:27:cc:8c:fc:d7:f3:84:dd:33:21:bb:e0:e6:
39:20:96:a3:05:de:d2:4f:ee:5a:3f:40:49:ba:d3:
e5:dd:fc:7e:75:d0:01:49:db:62:56:0a:26:31:e5:
67:09:e1:90:0b:b5:92:0a:e1:33:23:29:aa:d3:92:
da:a7:2f:b9:50:4c:20:bf:70:f3:37:41:46:ba:b1:
28:74:ac:1f:5b:64:1d:be:55:5c:82:8b:b2:e0:c0:
21:e4:05:f1:17:ea:63:4f:f6:9b:0b:a7:64:e0:a3:
3b:d8:5f:ba:84:4d:80:d4:59:ef:b4:c5:c1:25:5d:
91:df:d8:a6:a9:05:a9:cb:74:bc:d6:53:d9:7f:ac:
30:5a:bb:7c:7f:07:59:e0:ea:c6:ad:df:87:e3:3d:
aa:32:ac:79:b4:34:2d:1c:2a:37:ae:de:6d:93:43:
f4:07:ac:79:f8:12:1f:c1:1f:17:9d:85:ef:e1:40:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:34:09:77:16:CB:85:3E:8D:35:B6:41:8F:11:7D:AD:CE:68:60:30
X509v3 Authority Key Identifier:
keyid:B4:C8:40:EA:6B:59:67:49:EF:C7:65:01:D1:D4:09:F0:B3:82:C4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a25370ef6240a33a5dee984da551ba55fa78abf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/c070906a25d7e3f117f9c5dfa65db0e9b2539d0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/8a25370ef6240a33a5dee984da551ba55fa78abf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.124.127.0/24
Signature Algorithm: sha256WithRSAEncryption
35:45:4f:c6:29:82:10:c9:eb:f9:42:e5:1b:78:52:6a:ae:eb:
0c:0c:fe:4b:73:41:a5:f0:be:5a:29:69:09:d3:9b:5c:91:66:
a8:30:ff:89:48:94:92:33:bc:98:1f:22:15:3e:be:13:b2:90:
c7:ab:5d:6b:86:6c:63:9f:b6:14:7f:28:b2:b2:b3:e9:cf:37:
99:1b:6a:bb:e3:73:ec:1e:72:6f:e3:04:cd:e1:ee:96:8a:2d:
a0:dd:e6:3e:c6:6e:45:9e:e9:e0:92:f7:39:9b:2c:89:35:3e:
b3:2b:f3:b2:65:0f:ad:fb:f2:ed:62:d6:84:d7:7c:81:7b:ea:
12:b6:97:4b:7b:ed:68:9f:87:c7:dc:c3:e9:15:f3:5f:35:3f:
59:87:0a:aa:6e:91:7e:60:62:4b:cf:03:e0:11:3f:56:d3:bc:
6a:40:90:7f:40:fe:e9:3d:54:66:75:9c:4d:ae:80:cc:8c:d0:
9b:e1:34:cf:b4:8c:f0:41:f3:3d:8a:61:81:79:07:be:59:9f:
14:69:a1:a3:4e:e2:5b:3c:a6:4e:2b:75:f1:f6:bb:34:90:c5:
1b:c7:80:95:01:25:94:97:8a:37:3a:95:55:c5:46:b4:95:5b:
dd:10:ed:b1:32:48:5c:87:f6:07:21:5b:24:99:60:bb:e0:f3:
f4:c3:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org