Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/4449589dd6e5fa7edfb88d4abea8a2e1d4cc64b3.roa
File: 4449589dd6e5fa7edfb88d4abea8a2e1d4cc64b3.roa (raw, json)
Hash identifier: CcIoDY/ubkMn4AQGiMTV6yAYM3cJuXyN5b4BGqJUgiI=
Subject key identifier: 37:AE:BF:A2:6D:71:7A:F4:EE:D9:6A:58:37:D4:90:34:93:9D:A6:F0
Certificate issuer: /CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Certificate serial: 169198
Authority key identifier: 33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/4449589dd6e5fa7edfb88d4abea8a2e1d4cc64b3.roa
Signing time: Fri 28 Apr 2023 12:23:23 +0000
ROA not before: Thu 27 Apr 2023 12:23:23 +0000
ROA not after: Mon 28 Apr 2025 12:23:23 +0000
asID: 52431
IP address blocks: 200.63.64.0/20 maxlen: 24
200.63.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1479064 (0x169198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Validity
Not Before: Apr 27 12:23:23 2023 GMT
Not After : Apr 28 12:23:23 2025 GMT
Subject: CN=4449589dd6e5fa7edfb88d4abea8a2e1d4cc64b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:7e:1e:ba:c8:10:aa:fe:9d:8b:68:74:5a:
71:5f:43:05:0f:ae:f2:95:ac:66:ce:b7:d3:dc:11:
99:cd:d0:d8:28:95:c4:0b:71:91:82:12:ff:5f:4c:
5d:2f:14:92:7b:40:af:f9:35:b9:4e:ac:e9:c9:bf:
b2:69:f9:6b:17:f6:3e:96:fc:70:0b:93:37:10:3d:
1b:79:3e:43:fb:fe:d6:bb:f5:29:ac:02:b4:2c:17:
cf:7f:80:8d:9e:6e:09:87:4b:96:37:c2:09:40:e6:
20:dd:35:74:cf:80:e2:1c:83:60:21:fe:4e:b5:a3:
69:8b:f7:92:d6:3b:9b:ae:2b:15:24:ed:22:f5:61:
80:92:d6:a9:6f:b4:e6:a6:01:a4:f2:b5:6b:e1:91:
42:da:54:9f:87:56:71:f7:64:a4:b5:0e:91:97:f4:
1b:de:d8:cd:99:3b:68:6d:21:6f:9b:60:c0:3b:9b:
7b:de:e5:4e:b7:d0:3f:28:da:35:4f:43:27:59:f5:
83:d3:31:94:06:8d:b0:20:95:1d:0f:36:d0:f1:ea:
90:69:3c:69:b7:5b:50:9f:5d:c0:93:fc:d5:2a:b3:
91:fc:eb:1b:24:84:61:c1:e4:25:ac:03:21:46:bb:
7d:3b:13:4e:33:54:3b:36:59:b9:be:fc:16:a1:1b:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AE:BF:A2:6D:71:7A:F4:EE:D9:6A:58:37:D4:90:34:93:9D:A6:F0
X509v3 Authority Key Identifier:
keyid:33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/4449589dd6e5fa7edfb88d4abea8a2e1d4cc64b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.63.64.0-200.63.87.255
Signature Algorithm: sha256WithRSAEncryption
ac:67:6c:df:bb:b7:e0:c9:40:a8:94:87:52:74:65:15:9e:f8:
6e:30:78:55:fb:10:40:7b:f2:cd:3c:d0:bb:28:cf:25:1f:b7:
7a:85:e6:b8:75:8a:17:3b:aa:70:d1:0c:1e:a5:95:0d:55:32:
d5:a3:1f:5a:97:53:ed:f2:66:76:2f:a1:09:78:1a:8c:23:c5:
36:92:82:e8:62:65:76:d3:12:b8:fd:b4:66:0e:22:ff:77:c0:
7a:70:76:35:94:8a:1b:9e:97:47:bc:13:b4:7e:8f:7a:ab:ae:
c8:17:41:16:63:35:f6:36:a7:b4:6b:81:0f:24:09:cd:70:0c:
02:62:5b:bf:5c:b0:de:b6:93:1c:7c:bf:77:47:b5:c7:a3:fd:
35:10:24:af:d8:74:53:48:36:a8:71:b6:88:47:e2:32:dd:0c:
60:1a:89:ba:c8:b9:77:ab:9d:3f:e2:8a:3f:29:89:c2:69:b9:
23:5e:a9:85:a4:5b:1e:53:5c:42:6c:9d:65:fd:85:08:37:8b:
80:ae:f8:7d:ab:ca:ff:c4:f2:29:08:c1:1c:2f:24:c1:79:ce:
b3:5e:7c:05:01:55:60:6c:23:fc:53:f5:e0:c4:34:6f:76:67:
8f:3a:25:77:ac:17:11:d9:92:10:d8:f7:a5:2a:a4:c3:a3:66:
13:93:93:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org