Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/623e954b990598e5647b06aee46d590c97a3ea1e.roa
File: 623e954b990598e5647b06aee46d590c97a3ea1e.roa (raw, json)
Hash identifier: 2cQnkUn7l7QOZIzmoDUtAG8g7vbalpfBXVXcEosQJCE=
Subject key identifier: 7F:28:4C:E7:0D:49:A9:70:18:35:90:A9:EE:E2:7C:7D:57:D9:4D:CF
Certificate issuer: /CN=c00571304e4b047e4afd608874a3be833cca4a3e
Certificate serial: 05BA24
Authority key identifier: 85:97:7E:8A:B4:9B:75:20:94:75:08:C9:14:FB:20:6F:A9:9B:34:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00571304e4b047e4afd608874a3be833cca4a3e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/623e954b990598e5647b06aee46d590c97a3ea1e.roa
Signing time: Wed 24 Mar 2021 14:48:18 +0000
ROA not before: Wed 24 Mar 2021 14:48:18 +0000
ROA not after: Tue 24 Mar 2026 14:48:18 +0000
asID: 269958
IP address blocks: 200.33.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375332 (0x5ba24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00571304e4b047e4afd608874a3be833cca4a3e
Validity
Not Before: Mar 24 14:48:18 2021 GMT
Not After : Mar 24 14:48:18 2026 GMT
Subject: CN=623e954b990598e5647b06aee46d590c97a3ea1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:a3:4b:e3:96:3d:8c:ad:c7:9d:b5:00:90:
50:8e:dc:fc:d7:50:b8:de:55:a0:a9:8b:5a:66:a5:
c6:80:93:04:78:c5:56:3e:fd:47:e2:2e:1f:fa:37:
26:cc:e5:1a:c0:bd:b6:19:66:bb:94:64:da:71:7f:
43:38:91:89:6c:59:aa:54:a4:17:78:01:c4:d3:a9:
79:f3:76:83:6b:a0:5d:ae:01:b2:af:64:a3:a9:bc:
db:4e:a7:77:62:a7:75:8f:fb:ba:d9:bc:63:65:52:
91:ed:7c:bf:7b:f0:06:b2:19:0f:36:bd:b6:0e:87:
9d:a6:3a:7e:ea:c2:b2:f0:33:21:c4:cd:65:bf:28:
b8:2f:4a:86:6f:19:9f:cf:8f:a7:db:21:92:cc:3f:
e0:9e:ce:09:fe:e4:5d:09:e5:2d:f8:4a:74:24:db:
f0:9d:a0:96:96:56:ea:f8:a9:45:11:25:f7:7d:b3:
81:c7:ad:70:ed:c5:d4:d2:cf:78:95:d6:d9:e2:08:
b8:a7:fa:3d:3a:d9:dd:0b:97:f7:29:a9:f6:7c:70:
38:25:3e:84:00:ef:10:14:b9:3f:c6:3f:24:3c:24:
df:ca:03:0b:b0:45:2b:1a:c1:3e:c2:0e:18:13:47:
e6:4a:28:41:3d:2f:de:79:0e:42:f2:3c:1d:ed:ce:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:4C:E7:0D:49:A9:70:18:35:90:A9:EE:E2:7C:7D:57:D9:4D:CF
X509v3 Authority Key Identifier:
keyid:85:97:7E:8A:B4:9B:75:20:94:75:08:C9:14:FB:20:6F:A9:9B:34:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00571304e4b047e4afd608874a3be833cca4a3e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/623e954b990598e5647b06aee46d590c97a3ea1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/c00571304e4b047e4afd608874a3be833cca4a3e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.206.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6b:4c:8f:94:47:eb:30:a7:3f:a5:27:a9:f8:1f:c5:6e:c3:
47:47:f2:ce:8c:04:06:40:96:68:ba:d6:ad:ff:4f:3b:1c:65:
73:6d:84:e3:92:f7:a7:29:4e:d7:81:00:06:9a:2d:b2:67:43:
c1:e8:dd:e4:e5:e2:5c:cd:1c:b4:62:35:19:d4:bf:a6:61:23:
3f:39:6c:a3:43:f1:9b:1f:cd:cd:8b:44:fb:74:f8:da:ad:c1:
3c:21:c2:52:79:b1:39:03:b4:19:21:55:30:bb:b0:e6:ac:b6:
0a:2a:19:13:3c:51:b5:7e:20:a2:24:61:f2:a8:02:f0:dc:8c:
b0:7f:5f:57:ef:b7:58:40:20:ad:9a:aa:bb:a5:7f:c4:ad:ce:
ed:a5:3a:3c:74:c8:8b:56:6d:e5:7a:66:5b:a3:f4:2c:c7:85:
59:c6:66:13:27:ba:aa:aa:58:fd:f7:a1:f3:69:3a:d4:96:79:
5c:fc:08:92:a1:1c:3d:ed:f0:51:c6:47:91:53:10:a9:cf:38:
d4:50:b2:b4:e7:84:4c:5b:ec:e4:90:03:c9:1f:82:d3:e3:3b:
41:13:1e:f3:d5:9e:ea:95:a8:dc:4a:c8:f0:4e:66:61:00:f4:
c2:8e:23:58:e9:67:ee:d3:19:9b:44:ad:04:13:dd:a4:07:bd:
12:d9:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org