Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/f91e3875a9163acb42119a1e4e3261e99bfc81d1.roa
File: f91e3875a9163acb42119a1e4e3261e99bfc81d1.roa (raw, json)
Hash identifier: lb7/HFTn7WaUIR1uETUuKWfpXnnFg8bEcVaW7eq4nNs=
Subject key identifier: 54:E9:DC:46:92:B3:DE:BE:BE:09:6B:1C:6B:80:23:DD:AA:BE:C8:1D
Certificate issuer: /CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
Certificate serial: 2765A0
Authority key identifier: C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/f91e3875a9163acb42119a1e4e3261e99bfc81d1.roa
Signing time: Tue 13 Feb 2024 20:55:07 +0000
ROA not before: Tue 13 Feb 2024 20:55:06 +0000
ROA not after: Fri 13 Feb 2026 20:55:06 +0000
asID: 52263
IP address blocks: 177.93.0.0/19 maxlen: 24
200.229.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2581920 (0x2765a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
Validity
Not Before: Feb 13 20:55:06 2024 GMT
Not After : Feb 13 20:55:06 2026 GMT
Subject: CN=f91e3875a9163acb42119a1e4e3261e99bfc81d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:85:bf:5c:48:52:41:cf:b6:cf:22:3e:19:e0:
b0:1d:84:f1:77:6e:f1:84:ed:be:0d:66:36:f0:9f:
f4:fd:40:3f:2c:5c:bf:80:63:cc:fb:e8:4c:a0:c8:
32:32:d3:56:0b:c5:d6:d5:73:64:6e:ed:ac:0f:79:
42:17:40:ea:fd:32:10:09:07:72:f1:a5:72:f5:9c:
10:a1:f1:37:4a:91:2d:bd:6c:6a:c2:86:05:0e:bd:
f0:90:6b:ee:52:f4:dc:98:d4:6d:6d:15:86:b7:32:
10:bb:14:80:4a:6d:2e:70:a8:8e:34:3e:cb:16:f1:
95:1d:1a:d1:66:35:63:90:7d:b8:d8:83:43:fc:b0:
a5:67:a9:0c:66:ea:89:46:fd:5d:e3:a3:ad:66:84:
13:90:fc:2c:d6:e3:0d:2a:99:10:22:d2:e2:3f:f5:
9f:a7:b7:84:2a:62:f8:3c:a5:32:a8:da:ba:4c:de:
25:71:44:f6:2e:d7:c0:de:88:9f:db:09:02:46:64:
a4:a3:51:c4:1a:5b:88:a6:9e:0b:18:0c:45:10:a9:
73:b2:1f:b1:44:47:62:72:3d:ba:a5:5d:5d:d3:19:
47:a5:a6:bd:34:86:a1:c9:e6:b6:3b:8b:5b:1b:e4:
77:33:88:36:ef:9b:69:5e:0c:b3:5a:d9:ed:57:b5:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E9:DC:46:92:B3:DE:BE:BE:09:6B:1C:6B:80:23:DD:AA:BE:C8:1D
X509v3 Authority Key Identifier:
keyid:C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/f91e3875a9163acb42119a1e4e3261e99bfc81d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.93.0.0/19
200.229.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:99:5d:86:b9:49:be:ce:61:1d:7b:b9:4e:b6:2c:14:84:a5:
ec:10:c3:c3:04:ee:70:9d:b9:76:a6:36:61:3c:96:f5:96:65:
36:d1:59:62:4e:25:3d:d2:48:67:18:b7:a2:f4:dc:ce:cb:42:
0e:12:64:bc:92:9a:a4:cc:9f:d2:80:a9:c0:57:9f:6d:07:d5:
b4:65:19:85:f8:19:6e:ee:ca:44:31:66:2c:5c:2c:65:fb:c3:
aa:dc:ae:11:fa:65:61:24:24:e5:7d:97:aa:71:e3:55:ab:c4:
00:f4:93:12:ba:8d:dc:5c:de:11:08:9f:7b:06:c6:97:d8:4a:
ea:0c:be:a6:3f:99:71:71:50:9b:9c:2c:3e:cf:07:6d:11:05:
83:37:a0:b8:cc:24:25:8b:e2:cd:1b:b1:e9:14:12:50:cb:ef:
ca:fb:a5:9e:b0:0a:8d:c7:ca:f3:46:1e:83:b5:18:91:f6:35:
9e:0e:4b:eb:8b:24:48:41:7f:8d:88:e6:44:1b:00:1e:60:55:
5e:43:eb:3f:db:7e:23:68:01:86:5b:87:2a:bc:e4:32:58:a6:
b4:92:88:78:03:e8:b8:d9:ff:c4:8f:fa:7a:0e:ea:57:fe:4b:
99:e0:b6:6c:cc:7a:a0:ec:4c:c3:23:fb:e4:1c:75:13:bd:c2:
79:f8:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org