Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/bbe11006e302337f538c96de9ca3730fb478ca49.roa
File: bbe11006e302337f538c96de9ca3730fb478ca49.roa (raw, json)
Hash identifier: xcm1xFT0smUVgi08ht1fTcOUSllupxOV9jGCzHA/vbw=
Subject key identifier: 58:26:66:BB:65:D2:9C:57:39:8E:3A:0F:06:CD:6B:23:4D:0F:19:2D
Certificate issuer: /CN=acd0b51210b784be64102a9286473d3c176ced3a
Certificate serial: 011F12
Authority key identifier: 35:6B:6C:7E:E5:7E:0D:4E:91:CD:DD:0B:C5:DF:EB:83:EC:22:D9:B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acd0b51210b784be64102a9286473d3c176ced3a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/bbe11006e302337f538c96de9ca3730fb478ca49.roa
Signing time: Sun 21 May 2023 00:40:20 +0000
ROA not before: Sat 20 May 2023 00:40:20 +0000
ROA not after: Wed 21 May 2025 00:40:20 +0000
asID: 269931
IP address blocks: 200.125.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73490 (0x11f12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd0b51210b784be64102a9286473d3c176ced3a
Validity
Not Before: May 20 00:40:20 2023 GMT
Not After : May 21 00:40:20 2025 GMT
Subject: CN=bbe11006e302337f538c96de9ca3730fb478ca49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:14:5a:25:e1:94:3f:9f:ab:31:91:8a:69:
19:88:77:5c:e1:2c:d0:1d:ad:bd:61:65:d1:44:07:
9c:2b:2d:bd:61:13:df:87:d6:59:39:a1:5d:11:99:
9b:dd:86:e0:65:ac:ea:4b:a2:f2:3b:a5:d5:7e:1c:
76:42:9e:ce:40:79:a4:8b:95:ae:24:12:1a:d1:d8:
01:b1:7d:06:99:b6:8a:db:65:d6:1a:ee:37:18:c4:
22:0b:89:fb:ec:a3:dc:cb:64:9e:1b:40:81:86:b4:
82:df:a2:32:51:27:1d:0c:a3:5b:bb:ff:e3:41:fd:
88:84:17:69:68:d6:23:6d:7f:e0:9a:25:10:fc:ee:
bf:05:64:f5:7c:a8:1d:d9:c5:96:cd:48:1d:ae:0a:
f3:a1:76:55:68:ca:dd:f4:f6:13:a1:f7:52:f2:84:
07:43:20:f9:0a:b0:5f:ad:24:19:7b:eb:9d:2a:00:
4c:18:6a:13:96:88:33:95:15:3b:c3:c6:30:48:d6:
ae:65:d8:4b:c7:1c:2f:f5:d1:04:73:5a:89:15:10:
fd:88:80:3e:8e:42:51:cf:6a:74:9e:d1:1c:f6:fb:
43:af:e5:76:45:42:07:d8:a3:12:0c:c1:e1:b3:0e:
49:12:98:90:93:99:ac:84:e8:91:d1:47:dc:b2:32:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:26:66:BB:65:D2:9C:57:39:8E:3A:0F:06:CD:6B:23:4D:0F:19:2D
X509v3 Authority Key Identifier:
keyid:35:6B:6C:7E:E5:7E:0D:4E:91:CD:DD:0B:C5:DF:EB:83:EC:22:D9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acd0b51210b784be64102a9286473d3c176ced3a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/bbe11006e302337f538c96de9ca3730fb478ca49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/acd0b51210b784be64102a9286473d3c176ced3a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.168.0/22
Signature Algorithm: sha256WithRSAEncryption
37:5b:79:4d:3f:12:e7:5c:ca:ea:f4:8b:92:92:e6:62:13:60:
c0:24:4e:99:bc:48:14:57:4a:dc:64:87:d7:07:fb:25:07:d3:
3f:7c:bd:5e:90:58:2c:77:d8:53:c4:09:d8:cb:5a:2d:8a:3d:
3e:2d:36:38:19:43:bf:75:d1:ce:6f:2f:37:e6:38:4e:f4:8a:
60:6b:b7:b2:25:fc:a1:3b:3a:bc:0c:c3:50:a6:48:fc:45:5b:
39:4f:01:cb:e4:f7:81:52:65:fc:64:75:ac:0a:88:d6:7f:3b:
29:b1:61:18:a9:01:82:bd:d1:a2:3a:7f:26:d3:16:90:27:b1:
73:89:72:bd:12:28:ac:64:85:a6:dc:dd:f3:ab:45:db:15:3a:
94:cf:93:82:61:f6:19:16:9c:9e:c3:1b:8a:6d:1f:f3:46:b8:
c6:31:d9:91:6e:4b:2e:47:7e:4b:20:4b:88:8c:1f:5f:01:71:
0a:c3:50:dc:c3:35:33:ba:a2:01:86:a1:ce:53:7e:53:c9:04:
c4:4e:28:1b:99:27:83:d3:8e:da:f9:1b:84:56:bb:f5:a1:29:
c3:37:59:79:e0:bc:06:9b:6c:5b:e2:52:ba:ca:07:c6:db:0c:
1f:af:2e:4f:87:4e:77:9d:aa:c5:63:57:e3:ce:26:41:59:3c:
44:f9:55:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org