Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/3aae36b8481d52911e5b65e77c866c3abf99b8f1.roa
File: 3aae36b8481d52911e5b65e77c866c3abf99b8f1.roa (raw, json)
Hash identifier: KbG+WnUsFa4XJxZP9TepGlynq/X0gDKNMX03ejJvxUI=
Subject key identifier: FD:DA:CD:6C:6E:69:B7:E7:D5:93:56:09:98:5B:D5:8B:B3:4F:37:93
Certificate issuer: /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial: 0D9004
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/3aae36b8481d52911e5b65e77c866c3abf99b8f1.roa
Signing time: Thu 25 Mar 2021 00:24:16 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 264668
IP address blocks: 200.24.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888836 (0xd9004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=3aae36b8481d52911e5b65e77c866c3abf99b8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:f3:bb:d2:8e:b0:70:09:3c:0e:fb:6d:d1:
99:43:52:1c:85:8f:a8:26:32:d8:92:3f:74:ac:59:
bf:f5:63:14:fa:f4:8f:9b:9d:ad:56:34:d7:a7:9c:
e4:d2:34:72:c1:93:36:6d:a6:df:93:fa:3e:d3:fa:
de:72:fe:59:cd:5d:49:4b:35:6c:b5:0e:b7:da:c5:
19:9b:c3:b7:69:37:31:76:ef:31:67:f6:8f:40:ae:
2d:96:d4:f3:4b:a1:2d:86:65:68:21:78:ef:b0:c1:
ae:90:09:e0:a6:db:a7:8e:c2:b2:7f:f5:ae:c3:cb:
54:47:34:3b:9d:64:f0:c3:a5:c9:75:8e:62:5a:99:
e5:e7:a1:04:29:0e:a6:e6:b6:dc:0b:fb:8d:2d:5a:
1b:70:4b:2c:54:f4:64:80:6c:ef:6d:5e:7b:50:f5:
78:ea:34:87:8a:91:49:01:c8:a2:99:e2:82:94:57:
6c:6c:df:7b:36:e0:83:96:cf:59:34:c5:8d:2c:80:
09:f7:85:37:57:c0:d0:f1:e8:9c:aa:c5:cd:31:74:
79:ce:0c:45:ec:35:5c:9a:2b:d6:07:97:14:98:72:
76:5f:45:06:e9:b1:0e:4c:c5:65:97:27:9d:2b:92:
e0:e4:7c:4f:ff:39:2d:3a:e3:5e:3d:43:97:49:52:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DA:CD:6C:6E:69:B7:E7:D5:93:56:09:98:5B:D5:8B:B3:4F:37:93
X509v3 Authority Key Identifier:
keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/3aae36b8481d52911e5b65e77c866c3abf99b8f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.128.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:c1:95:f4:e1:6b:a6:68:55:d6:b1:dc:2a:f1:09:04:a5:05:
eb:02:26:13:78:2a:44:2a:22:5b:64:65:71:8f:5b:b8:8c:9e:
9f:f5:11:45:c3:7b:d2:e3:39:74:47:10:44:b7:cf:ba:f3:9e:
3f:ac:b0:59:ed:5e:cd:2d:b7:06:4d:d2:55:11:74:09:7a:0c:
cd:aa:76:e0:e8:d2:3b:08:4c:52:44:bb:69:9d:59:23:25:34:
33:82:8d:be:4d:3d:06:7d:e1:54:4d:25:50:a5:db:2b:46:20:
2f:be:0a:7b:da:22:b3:8c:15:0d:85:bd:16:4a:d5:e5:68:ed:
40:37:e8:6d:0b:8a:ba:f6:bf:02:73:99:c4:17:5e:12:00:f6:
8b:35:ad:79:e0:c0:8b:a3:15:81:ba:e1:87:55:e3:31:2a:a8:
5c:11:05:52:34:b8:fc:38:91:eb:b0:b0:47:f6:55:ba:fc:ec:
63:4a:63:57:72:cc:5e:40:5f:06:c1:cc:00:4e:e9:86:56:d4:
19:e7:89:24:b2:c2:9e:3f:24:19:48:44:0e:4a:d0:9a:4a:9f:
c7:95:e5:12:51:99:c0:1d:65:07:e2:40:f4:06:7d:fc:7d:63:
f0:89:67:17:00:e0:ad:df:c9:01:7a:a1:38:4f:f1:79:b2:f4:
de:bc:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org