Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/83cf2cb0d72ec59f2988e831b593dbcf9cef87a6.roa
File: 83cf2cb0d72ec59f2988e831b593dbcf9cef87a6.roa (raw, json)
Hash identifier: Gr79lI9Mghsn7NSpZ1p60kWsNTSum5I89HLvLaYCZ/k=
Subject key identifier: 8A:00:D4:09:07:FC:40:1B:29:C6:85:66:22:AD:94:71:91:A4:08:F7
Certificate issuer: /CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Certificate serial: 1F20D2
Authority key identifier: E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/83cf2cb0d72ec59f2988e831b593dbcf9cef87a6.roa
Signing time: Tue 06 Feb 2024 19:13:01 +0000
ROA not before: Tue 06 Feb 2024 19:13:01 +0000
ROA not after: Fri 06 Feb 2026 19:13:01 +0000
asID: 19863
IP address blocks: 200.7.148.0/22 maxlen: 24
168.121.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040018 (0x1f20d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Validity
Not Before: Feb 6 19:13:01 2024 GMT
Not After : Feb 6 19:13:01 2026 GMT
Subject: CN=83cf2cb0d72ec59f2988e831b593dbcf9cef87a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:25:d4:d7:53:93:d8:f5:f7:19:54:88:64:
f6:4c:ff:3c:c3:30:d3:29:be:f8:c0:28:4f:2f:e6:
8e:f0:d4:4b:0e:52:f8:5d:65:7f:2a:37:80:98:b2:
8e:61:2f:8f:82:d1:ed:24:21:b5:ec:81:29:c4:f4:
65:9a:94:b6:4e:4d:b1:a4:93:bb:af:ea:7d:2d:22:
c7:df:e4:26:4f:98:b2:b4:d1:18:92:cc:cf:e7:44:
71:ac:11:5a:ac:ea:f0:a9:3d:97:5e:dd:34:9e:c2:
4e:e7:ae:fd:94:79:43:56:5d:01:48:96:7f:62:2e:
79:17:d0:d4:b6:c5:89:22:93:d6:ec:c5:9c:5e:13:
2c:cc:89:e5:1f:ef:5d:44:a6:75:3c:6b:6c:38:b8:
14:73:9c:87:31:dd:ca:85:21:cd:49:c1:c1:3a:91:
9d:a2:60:eb:66:20:28:95:44:03:3e:9c:0e:4a:24:
3e:a9:2e:ae:d8:24:31:9d:0d:36:ff:00:19:bc:bd:
3d:a1:5b:ef:9a:a4:7e:bb:98:fe:02:21:85:2a:bd:
e4:fe:66:ef:3c:4a:56:2a:5a:0c:bd:28:86:e1:4c:
76:bf:bb:ad:0b:0f:20:dc:aa:33:2c:85:56:fc:67:
a9:70:cd:a1:d3:3e:ac:f2:48:d6:ce:e7:e5:16:0a:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:00:D4:09:07:FC:40:1B:29:C6:85:66:22:AD:94:71:91:A4:08:F7
X509v3 Authority Key Identifier:
keyid:E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/83cf2cb0d72ec59f2988e831b593dbcf9cef87a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.84.0/22
200.7.148.0/22
Signature Algorithm: sha256WithRSAEncryption
31:d5:e7:f5:f5:ca:93:38:07:0b:68:7a:80:5a:2f:20:2a:21:
6a:59:98:96:cc:4f:86:c2:53:25:5d:64:98:15:9e:c1:a1:a9:
73:59:da:57:12:8c:55:e5:93:36:e4:bf:17:5d:e1:d6:1f:cb:
57:db:cb:2b:58:b6:c1:b0:24:6c:55:b0:6a:22:05:af:18:4d:
d1:ae:e3:5d:bd:11:3e:41:13:ea:de:aa:fd:51:23:05:4c:2a:
12:4b:b7:bb:70:76:58:11:c6:fe:04:0f:ba:5d:e8:0d:23:bf:
10:57:45:9c:cd:8e:81:c9:bf:cd:53:10:67:6b:ae:0f:20:32:
9b:de:8e:e9:36:ae:01:87:47:a7:8b:89:f8:ff:3c:c5:7a:58:
25:a9:e8:c5:4d:1a:7c:e3:48:6e:2f:1e:95:0d:11:eb:fd:35:
11:6c:5a:0b:38:c9:58:f7:2b:87:4d:e4:ce:9e:6f:9c:89:85:
9e:0b:a9:66:0b:18:24:71:ba:17:a3:b7:79:5f:3a:b5:ed:53:
b1:62:59:d9:41:38:0b:f4:4b:b1:89:3d:58:79:67:ce:6e:35:
76:e5:7c:69:da:f6:2c:9a:42:c6:b3:ae:f8:3f:ff:79:1e:ef:
e1:d1:ed:a4:e3:42:75:e4:76:63:a4:4d:29:4a:f2:c2:fd:fa:
f9:31:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org