Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/8574c948a8f9d0cc7e66e6c82297fd5cfa33dcc7.roa
File: 8574c948a8f9d0cc7e66e6c82297fd5cfa33dcc7.roa (raw, json)
Hash identifier: nZpiuqeHBcD/fzrzjQ6xg7D6AwqYEFOvKHxN1pSUAdA=
Subject key identifier: 76:53:55:58:81:37:DD:C5:FC:87:5F:75:20:59:E0:94:D9:6F:F9:30
Certificate issuer: /CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Certificate serial: 05888D
Authority key identifier: 5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/8574c948a8f9d0cc7e66e6c82297fd5cfa33dcc7.roa
Signing time: Fri 23 Feb 2024 06:11:46 +0000
ROA not before: Fri 23 Feb 2024 06:11:46 +0000
ROA not after: Mon 23 Feb 2026 06:11:46 +0000
asID: 13999
IP address blocks: 201.159.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362637 (0x5888d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Validity
Not Before: Feb 23 06:11:46 2024 GMT
Not After : Feb 23 06:11:46 2026 GMT
Subject: CN=8574c948a8f9d0cc7e66e6c82297fd5cfa33dcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:6c:7c:9b:55:4e:13:cb:19:63:fb:fd:8b:
5b:10:40:9c:3c:d5:da:88:36:80:57:53:e3:e5:44:
06:ca:fd:77:c7:b3:ba:b1:4b:bf:b3:d3:86:42:ff:
a3:38:c3:d9:7e:a3:c7:66:ca:86:f8:93:30:09:7d:
7d:d5:45:a9:50:5f:25:09:fd:87:74:28:46:28:14:
69:0c:84:c3:69:46:23:53:8a:8c:4b:6f:2a:c4:87:
fa:88:bf:3e:ba:45:db:93:fc:fe:32:28:34:1d:b9:
97:6b:ee:7f:9f:fa:2b:ab:7f:2f:85:83:78:dc:aa:
5f:36:bb:17:9a:d0:f5:4e:b0:6f:80:7d:83:ae:22:
9c:64:66:bd:55:a7:a3:c9:43:cf:f2:11:6a:0f:e6:
30:c6:26:82:a3:0a:a6:81:f2:1d:06:c3:2d:37:15:
b1:38:de:9d:af:14:85:a0:bf:a9:dd:51:de:e5:cb:
70:95:40:55:40:37:06:21:17:73:01:2b:e1:ea:44:
c0:78:f6:b3:fa:2c:47:56:cf:62:87:fa:03:1f:47:
87:78:ae:5c:9c:54:77:97:57:6f:20:01:9e:6c:1b:
f8:c8:70:03:63:26:bc:ac:fc:f3:58:88:b8:03:ee:
d0:98:28:be:ef:8a:40:32:8e:52:03:f5:0e:10:a1:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:53:55:58:81:37:DD:C5:FC:87:5F:75:20:59:E0:94:D9:6F:F9:30
X509v3 Authority Key Identifier:
keyid:5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/8574c948a8f9d0cc7e66e6c82297fd5cfa33dcc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.202.0/23
Signature Algorithm: sha256WithRSAEncryption
50:c8:a8:d6:09:6f:ca:41:90:11:70:af:b0:4e:1a:89:b7:46:
33:0a:bf:da:3f:dd:17:18:3a:72:76:4e:ee:00:ed:3e:70:ed:
0e:86:f9:28:29:fb:9f:01:46:39:9f:43:85:04:4a:73:b6:1b:
1a:13:c7:8f:2f:1d:d4:84:9a:24:dd:ff:28:65:e0:41:8c:63:
83:51:3c:0b:cd:0a:96:42:b3:71:6a:10:8f:a2:5c:74:33:a3:
2f:6e:ad:5b:46:21:a9:18:29:8e:49:bb:44:eb:3c:4e:3a:32:
66:7b:5c:3b:ca:a6:a5:2d:5d:b8:fa:bd:6c:3e:a9:8e:79:82:
62:5b:0e:6f:c7:97:24:b4:fa:33:65:63:e9:ca:62:9a:1b:42:
bb:7c:c3:3c:b3:6d:c6:b1:45:d4:b0:06:f1:01:99:46:e9:fa:
3d:6c:04:f2:ac:52:e8:2d:4a:6b:b7:2d:1c:96:fe:0c:7a:cb:
e0:72:42:1a:51:c1:e9:ef:02:24:b7:74:34:30:0c:a4:0e:95:
5c:b8:e6:43:ba:e0:53:07:d6:7c:6b:e5:20:26:a5:61:08:9f:
17:d1:84:45:07:2d:da:0b:fe:5f:d1:25:2e:f1:63:f3:ca:8b:
94:d6:0a:7e:94:fa:22:3a:40:a9:4e:d3:9e:a1:98:a8:ff:f2:
05:1b:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-ams.rpki-client.org