Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/b3d895a25f01d9667fb5f444b637c34fb75786f8.roa
File: b3d895a25f01d9667fb5f444b637c34fb75786f8.roa (raw, json)
Hash identifier: T8bi7D8/q7PW8H/4ffy7B5FgSDlhklZ3TzoBRczbshg=
Subject key identifier: 45:62:67:88:96:EF:D3:C2:A4:BC:55:AD:2C:D3:43:DC:AD:43:6D:84
Certificate issuer: /CN=c00571304e4b047e4afd608874a3be833cca4a3e
Certificate serial: 05BA5D
Authority key identifier: 85:97:7E:8A:B4:9B:75:20:94:75:08:C9:14:FB:20:6F:A9:9B:34:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00571304e4b047e4afd608874a3be833cca4a3e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/b3d895a25f01d9667fb5f444b637c34fb75786f8.roa
Signing time: Wed 24 Mar 2021 14:48:18 +0000
ROA not before: Wed 24 Mar 2021 14:48:18 +0000
ROA not after: Tue 24 Mar 2026 14:48:18 +0000
asID: 269958
IP address blocks: 200.33.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375389 (0x5ba5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00571304e4b047e4afd608874a3be833cca4a3e
Validity
Not Before: Mar 24 14:48:18 2021 GMT
Not After : Mar 24 14:48:18 2026 GMT
Subject: CN=b3d895a25f01d9667fb5f444b637c34fb75786f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:67:d2:bd:2f:b4:5b:fb:f7:01:93:6e:7c:
30:2d:08:63:18:73:e6:77:f5:82:2a:e5:1e:03:1c:
d3:04:2b:e0:b6:55:77:7f:a0:0e:0b:c1:0d:95:d0:
cd:35:54:67:3a:d7:b8:43:60:7b:eb:4d:40:38:b1:
18:4a:34:f3:8c:51:97:ba:a1:fa:cc:ee:f0:77:44:
10:c3:68:ce:9c:2e:a1:48:b6:1a:31:6b:e9:09:dc:
07:d6:74:c9:8f:3d:0c:49:63:59:97:f0:bb:62:ee:
87:53:33:68:9e:8f:b9:d9:5d:56:70:21:fc:3b:69:
d4:a8:59:dd:38:c6:42:2e:3e:7a:02:38:bc:a3:ef:
71:fe:e1:10:04:1f:26:95:c3:73:80:86:24:fc:4d:
f3:57:53:c6:d5:57:bd:a7:92:b0:02:a6:62:81:61:
2b:6a:bb:ab:c1:ff:ea:dc:d2:98:28:27:e0:0f:c2:
1b:91:a6:f0:5d:88:63:cd:b0:1a:64:e4:85:ab:00:
59:e0:50:9d:07:0f:bf:bb:67:34:d9:1f:11:4e:51:
e3:25:f9:8a:c4:74:86:89:23:b8:a8:50:25:40:0c:
e2:e3:c0:1a:5c:e5:45:20:55:c8:8c:64:1d:06:c7:
83:d5:f5:99:db:7b:ac:b3:9a:c5:8e:0a:17:b0:21:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:62:67:88:96:EF:D3:C2:A4:BC:55:AD:2C:D3:43:DC:AD:43:6D:84
X509v3 Authority Key Identifier:
keyid:85:97:7E:8A:B4:9B:75:20:94:75:08:C9:14:FB:20:6F:A9:9B:34:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00571304e4b047e4afd608874a3be833cca4a3e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/b3d895a25f01d9667fb5f444b637c34fb75786f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e9c17ca-f996-437f-8ff5-d9f34d7a3553/c00571304e4b047e4afd608874a3be833cca4a3e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:dd:f3:a5:a9:6d:49:d1:56:fc:8b:90:12:79:a7:02:95:86:
9f:5d:ff:dc:6f:51:c5:8f:a0:64:a5:14:9d:98:0b:c3:3d:a1:
72:2a:36:7a:92:27:1e:13:1b:51:77:2d:16:1e:e1:09:56:cf:
6e:4a:20:5c:96:84:84:ee:6f:2b:7a:fa:85:f3:88:7b:17:d2:
72:4c:33:33:cf:b3:dc:78:56:87:18:b4:f8:74:35:6c:6a:38:
f2:1a:e7:1f:4b:ba:fb:0e:b9:b7:b8:db:3d:27:bd:8c:67:41:
90:07:56:fb:a6:52:c8:04:6b:9e:10:80:13:8f:fd:64:bf:d1:
4a:72:a9:70:ed:6f:4f:c6:1d:74:42:d7:da:5c:0c:cb:15:89:
19:a3:bf:3f:20:22:b7:df:26:cd:72:72:be:57:3e:6a:da:99:
32:ba:f3:c5:ae:fb:8f:e4:e8:f2:3d:19:ab:7e:30:a9:6c:5b:
dd:78:e1:ba:2f:86:43:5f:58:cb:13:7d:a9:38:3b:42:af:f8:
11:7d:05:65:34:76:ed:e8:ce:59:f5:61:ae:93:9c:ba:19:70:
b0:15:5a:18:c3:5b:17:b5:68:07:99:2d:29:42:65:a8:16:00:
9a:27:8f:33:c0:3b:44:02:83:d7:09:8b:be:dd:4e:f3:1f:e2:
e5:64:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org