Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/c7f9596ef3de343c68d7236603c0bf09f3e46dc7.roa
File: c7f9596ef3de343c68d7236603c0bf09f3e46dc7.roa (raw, json)
Hash identifier: ZdMa3ef8Ty+wuBCT2EnVNzdNk2mDyHScY2XaZZX2kGw=
Subject key identifier: D4:14:EF:7E:8E:3D:EC:32:91:4F:97:25:29:08:F9:42:E4:01:DF:0C
Certificate issuer: /CN=acd0b51210b784be64102a9286473d3c176ced3a
Certificate serial: F568
Authority key identifier: 35:6B:6C:7E:E5:7E:0D:4E:91:CD:DD:0B:C5:DF:EB:83:EC:22:D9:B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acd0b51210b784be64102a9286473d3c176ced3a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/c7f9596ef3de343c68d7236603c0bf09f3e46dc7.roa
Signing time: Mon 15 May 2023 17:01:07 +0000
ROA not before: Sun 14 May 2023 17:01:07 +0000
ROA not after: Thu 15 May 2025 17:01:07 +0000
asID: 269931
IP address blocks: 200.125.168.0/24 maxlen: 24
200.125.169.0/24 maxlen: 24
200.125.170.0/24 maxlen: 24
200.125.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62824 (0xf568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd0b51210b784be64102a9286473d3c176ced3a
Validity
Not Before: May 14 17:01:07 2023 GMT
Not After : May 15 17:01:07 2025 GMT
Subject: CN=c7f9596ef3de343c68d7236603c0bf09f3e46dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:32:ce:74:a7:e1:1c:f5:8c:25:16:84:1b:
89:5e:9e:bc:20:8a:2e:0c:ed:58:88:7a:ed:1a:6d:
67:0c:ca:cc:3a:19:59:95:bf:30:41:5e:d8:fc:1e:
a4:8b:db:1b:11:8a:ff:2b:6f:95:8d:2d:a2:92:bb:
2d:2e:91:8b:cd:e5:ce:a9:65:b1:84:16:f8:80:62:
64:cb:d6:76:bc:b8:ea:99:2e:ea:29:f4:4e:0c:19:
1a:73:43:44:3e:6e:62:c0:39:f7:1e:ba:91:a2:77:
ba:5f:f6:77:fb:fc:b2:1e:76:96:0c:92:7a:4c:ef:
89:fb:a2:af:f0:02:0d:75:14:a5:77:85:c6:fe:8c:
ec:d9:fe:1f:c6:06:ff:49:87:ea:b7:5e:56:f2:23:
46:34:39:7e:4e:4d:ea:fa:e4:0d:3a:53:11:9d:ab:
79:8c:52:ad:0b:b4:7e:d6:7c:00:20:d3:50:a1:e0:
0e:93:2f:76:56:d3:55:5d:85:af:c8:38:93:66:a4:
16:36:af:78:25:0f:0b:d6:9b:ac:e4:ad:e4:f1:50:
a4:44:67:42:41:b9:4e:a7:eb:cb:a1:b5:cd:11:c7:
a6:09:72:a2:e9:d4:5f:31:23:79:52:5b:5a:ab:7e:
78:ab:b6:9a:49:9d:81:c8:44:5e:3f:29:28:40:20:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:EF:7E:8E:3D:EC:32:91:4F:97:25:29:08:F9:42:E4:01:DF:0C
X509v3 Authority Key Identifier:
keyid:35:6B:6C:7E:E5:7E:0D:4E:91:CD:DD:0B:C5:DF:EB:83:EC:22:D9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acd0b51210b784be64102a9286473d3c176ced3a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/c7f9596ef3de343c68d7236603c0bf09f3e46dc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/acd0b51210b784be64102a9286473d3c176ced3a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.168.0/22
Signature Algorithm: sha256WithRSAEncryption
07:54:f9:c6:6c:a1:2d:5b:9d:e9:08:06:be:d6:fa:87:be:15:
00:6f:01:cf:4d:e3:e7:f1:2e:39:4d:e8:45:f9:66:44:62:34:
25:cb:77:f1:1b:e7:bc:76:c3:61:b1:27:fe:e3:c6:39:86:f9:
96:10:7d:e4:47:52:9a:37:2f:76:15:12:62:73:c9:75:9f:23:
08:aa:39:ea:03:48:3c:15:8e:f4:37:e4:a3:5e:65:7c:26:d9:
a5:15:8a:50:88:df:45:5b:82:02:96:78:0a:88:4f:62:94:5b:
8a:dc:59:87:26:be:99:1a:8a:38:0e:df:3d:83:d8:27:36:a0:
6b:46:b0:2f:ea:ba:af:62:90:2f:de:97:3c:8b:0e:a3:97:3c:
09:ea:c9:61:fa:74:5e:6a:55:f5:77:7a:07:2b:aa:a5:ba:f7:
d3:0a:7c:30:b2:a0:13:51:b4:7c:aa:c5:d9:4e:e0:0f:82:09:
f8:72:e4:42:5d:3e:83:87:e1:eb:1e:2c:e9:e3:2c:9d:80:61:
73:ce:1a:c5:99:a0:62:f7:54:83:ae:25:6d:77:95:f9:31:a0:
02:c3:58:00:b3:50:64:7c:ac:af:d0:6c:9d:cd:c3:81:da:c2:
09:cd:9e:08:07:e1:bc:99:57:42:ce:85:35:34:61:95:2c:c3:
ca:c1:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org