Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/dcd1c52c9fa0e988c35e6dd23a4d082d4a8ccdf7.roa
File: dcd1c52c9fa0e988c35e6dd23a4d082d4a8ccdf7.roa (raw, json)
Hash identifier: 48Hx4oJi8gmf3a+irzn1q8WDltyHYNl7w6fBaEd06hc=
Subject key identifier: 9E:D5:D7:3C:7D:F6:C3:E8:16:70:B9:4F:B1:35:A6:EA:2A:81:7A:76
Certificate issuer: /CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
Certificate serial: 26A923
Authority key identifier: 41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/dcd1c52c9fa0e988c35e6dd23a4d082d4a8ccdf7.roa
Signing time: Fri 29 Dec 2023 20:58:14 +0000
ROA not before: Fri 29 Dec 2023 20:58:13 +0000
ROA not after: Mon 29 Dec 2025 20:58:13 +0000
asID: 27669
IP address blocks: 200.108.128.0/21 maxlen: 24
200.108.136.0/22 maxlen: 24
200.108.141.0/24 maxlen: 24
200.108.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2533667 (0x26a923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
Validity
Not Before: Dec 29 20:58:13 2023 GMT
Not After : Dec 29 20:58:13 2025 GMT
Subject: CN=dcd1c52c9fa0e988c35e6dd23a4d082d4a8ccdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:13:d7:57:d4:c8:64:0d:96:36:4d:9a:c8:
fd:87:10:8c:15:bc:a2:36:f7:bb:de:01:9b:fb:f1:
57:33:8d:38:db:0a:d7:cc:2b:4c:9d:82:31:42:fe:
7e:58:40:55:99:ef:dd:26:c2:c2:71:dc:72:9e:e5:
7c:1a:ef:99:2d:cd:ce:17:35:19:94:e2:e5:f6:45:
aa:47:c0:2e:d2:74:3d:0a:d2:90:86:97:cc:97:22:
ff:06:8c:51:6c:01:b0:ae:f9:80:5c:ae:96:00:df:
7b:79:60:03:68:dd:b6:15:f7:7b:62:51:15:0c:f0:
39:3c:f9:98:cf:7b:53:2b:dc:23:e1:b8:89:f5:e8:
b8:b9:6c:07:71:54:4c:8e:59:f3:4b:ec:84:f7:80:
f5:0a:59:57:2f:82:fc:46:65:58:45:48:0e:2c:9e:
d3:79:3e:7f:ba:44:d9:6d:64:32:6e:2f:a9:7d:bb:
cf:0b:5e:41:ab:36:dd:71:74:69:ce:f9:6a:26:48:
b1:00:5f:7d:5b:55:00:f1:e7:ee:2f:19:54:90:23:
71:8e:8b:10:e6:fc:bc:4f:dd:da:0b:30:a2:03:f3:
17:d5:2e:68:e6:98:20:d3:e0:04:db:6d:82:98:2f:
08:bc:ee:22:e5:34:c8:12:7e:2c:33:52:33:81:a9:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D5:D7:3C:7D:F6:C3:E8:16:70:B9:4F:B1:35:A6:EA:2A:81:7A:76
X509v3 Authority Key Identifier:
keyid:41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/dcd1c52c9fa0e988c35e6dd23a4d082d4a8ccdf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.128.0-200.108.139.255
200.108.141.0-200.108.143.255
Signature Algorithm: sha256WithRSAEncryption
3e:0b:04:5e:a5:17:58:25:bf:56:1d:f3:75:6e:d5:42:ba:21:
ac:a7:47:53:a8:bf:73:ff:d9:86:cf:7d:1c:74:48:3f:8a:c1:
a9:d1:e4:6a:8f:25:d4:fa:56:3a:6b:a2:f8:45:b7:91:f4:d7:
f2:19:a1:77:00:f9:21:70:ef:81:c0:49:71:43:4b:f3:64:4b:
8e:6e:5c:ca:f1:02:5c:2b:d0:1e:29:a0:36:e6:df:e0:49:1a:
76:1e:67:3e:c9:cd:32:b6:a0:ad:87:e8:5a:62:64:93:88:84:
8c:33:43:1c:53:a8:28:d4:33:88:3e:de:d1:22:00:6f:7a:a9:
c7:f9:18:11:dc:39:26:1e:ea:f4:e5:89:fc:0e:53:66:6b:55:
88:3c:43:e7:0f:aa:4b:f6:43:26:fe:6e:13:cf:a7:54:0b:c3:
71:0d:f8:01:4e:7b:f3:f2:d7:2e:ba:58:aa:34:cf:d1:d7:57:
61:97:8f:7a:8b:61:7b:46:f4:ad:64:a3:9f:d3:69:71:f4:80:
9e:8b:7d:a0:4d:54:47:21:48:e1:bb:e0:69:28:aa:7c:07:b2:
4e:c8:26:f9:75:3c:fd:18:de:20:a2:40:fa:69:8e:2d:28:c2:
a4:9e:9e:a5:25:07:c9:13:8c:f9:f4:46:db:3e:49:9e:a4:9e:
d9:46:1f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org