Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f5535ec-426a-4688-ab96-dae409c67235/7856be03cd3c3ad6ec17d29fa449e71ab2925633.roa
File: 7856be03cd3c3ad6ec17d29fa449e71ab2925633.roa (raw, json)
Hash identifier: qRU2w4+Bi8oRRETkUqcI+f4aq4q6HRqAWcSzUe6QvZQ=
Subject key identifier: 1B:45:C9:F0:EE:F0:48:E7:87:73:E9:D9:94:46:33:53:19:8E:59:C2
Certificate issuer: /CN=7e5c36c0de18005a9ea8a33ccf992e71040395e5
Certificate serial: 0495
Authority key identifier: 68:2A:14:84:AA:37:D7:08:63:94:EE:F3:8C:DA:74:61:22:71:9C:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5c36c0de18005a9ea8a33ccf992e71040395e5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8f5535ec-426a-4688-ab96-dae409c67235/7856be03cd3c3ad6ec17d29fa449e71ab2925633.roa
Signing time: Thu 12 Jan 2023 22:24:58 +0000
ROA not before: Tue 10 Jan 2023 22:17:27 +0000
ROA not after: Sun 12 Jan 2025 22:17:27 +0000
asID: 262148
IP address blocks: 200.14.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c36c0de18005a9ea8a33ccf992e71040395e5
Validity
Not Before: Jan 10 22:17:27 2023 GMT
Not After : Jan 12 22:17:27 2025 GMT
Subject: CN=7856be03cd3c3ad6ec17d29fa449e71ab2925633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:0a:72:bb:c9:82:60:d0:16:d7:10:df:d9:
5c:d1:51:ee:38:f7:90:db:1a:8c:49:cb:f9:68:74:
04:49:ed:a8:c2:3b:97:8a:4c:22:db:1b:fa:ef:71:
de:04:91:4e:7d:8a:2b:85:24:23:ac:5f:e8:44:4d:
f5:47:2f:f8:a9:f5:24:07:70:96:00:83:de:ad:fe:
7f:62:68:c9:c9:6e:71:74:0c:6d:cf:55:d5:84:7d:
64:4c:f4:0e:c1:a6:54:ab:cf:64:f7:63:02:06:87:
ef:81:fe:79:8d:55:30:6b:ca:3b:2c:27:1a:c8:eb:
58:d3:6b:74:9d:b3:5b:60:5b:57:98:92:c3:b5:a2:
89:81:7b:d9:18:c5:a5:3d:89:85:e8:6c:21:b2:78:
5f:22:4e:74:c5:74:c2:9e:9e:98:82:cf:0b:ad:c1:
5a:27:8c:bc:24:19:b9:db:6b:7b:b1:b7:79:81:1a:
50:7f:57:55:45:d8:9d:c5:20:8d:b5:7e:e8:a6:9e:
d3:53:6c:a9:50:8f:4d:89:fa:d0:9a:b9:d1:c6:c3:
e1:fe:85:f3:29:58:59:58:0b:00:18:e8:25:16:b4:
f9:5d:3a:02:d4:03:20:3c:d0:81:9f:03:82:af:ed:
e2:17:1c:9a:b0:28:56:4d:47:81:d2:12:5f:ec:7f:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:C9:F0:EE:F0:48:E7:87:73:E9:D9:94:46:33:53:19:8E:59:C2
X509v3 Authority Key Identifier:
keyid:68:2A:14:84:AA:37:D7:08:63:94:EE:F3:8C:DA:74:61:22:71:9C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5c36c0de18005a9ea8a33ccf992e71040395e5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f5535ec-426a-4688-ab96-dae409c67235/7856be03cd3c3ad6ec17d29fa449e71ab2925633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8f5535ec-426a-4688-ab96-dae409c67235/7e5c36c0de18005a9ea8a33ccf992e71040395e5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.79.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2b:cb:6c:2a:f7:cf:ce:38:91:88:51:10:04:24:c1:9e:72:
02:9a:9c:08:c3:19:ff:56:60:4f:9b:0d:fe:1c:47:d9:b6:e3:
c8:63:3f:88:48:6a:3d:2c:92:a4:91:fd:c8:57:bd:d2:0a:d5:
1f:6f:16:5f:83:37:e0:b5:d5:4b:f5:65:8d:52:05:ad:21:64:
4c:4d:fa:ac:0f:b7:e3:1f:17:2f:02:a9:13:ae:a4:fb:5b:a6:
b0:29:12:58:5d:69:33:9b:09:46:ec:8c:25:ce:41:94:e6:0e:
77:82:c1:0c:48:f6:b9:bb:ed:50:1b:5a:6e:dd:f5:23:48:67:
c7:ec:71:27:34:4c:43:bf:2d:b2:a4:3b:e4:2d:a7:ee:76:48:
3e:18:6e:8b:68:fd:a3:07:63:01:54:32:d0:c6:db:a9:66:7a:
08:30:25:f5:01:76:e4:c6:d0:eb:de:d0:2b:8e:16:58:ad:cc:
42:37:10:92:bf:4a:b6:a3:3e:3e:0d:bf:b2:85:25:08:80:83:
c1:2e:f2:35:15:88:23:37:bd:c9:16:9f:f4:ba:8c:f6:6b:6c:
8c:a5:ed:83:e8:14:49:88:71:ca:1a:f3:95:76:57:d0:ed:a0:
e3:5e:4d:23:50:22:5d:5c:d7:7d:43:b3:d6:ba:d7:68:f8:dd:
5e:e5:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org