Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/cbd40256537d55d17d8c3d94cb2c82c52ead9623.roa
File: cbd40256537d55d17d8c3d94cb2c82c52ead9623.roa (raw, json)
Hash identifier: roAAdi/DCPSp+0xd05sN9kcV7TqybQw0ytTTcqG652I=
Subject key identifier: 83:D1:10:0A:6A:6A:4A:86:C1:AE:FC:F5:31:16:4C:B4:82:A2:75:58
Certificate issuer: /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial: 0D8507
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/cbd40256537d55d17d8c3d94cb2c82c52ead9623.roa
Signing time: Wed 24 Mar 2021 14:35:12 +0000
ROA not before: Wed 24 Mar 2021 14:35:11 +0000
ROA not after: Tue 24 Mar 2026 14:35:11 +0000
asID: 19429
IP address blocks: 200.69.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886023 (0xd8507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Validity
Not Before: Mar 24 14:35:11 2021 GMT
Not After : Mar 24 14:35:11 2026 GMT
Subject: CN=cbd40256537d55d17d8c3d94cb2c82c52ead9623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:d8:23:a4:34:21:0f:0e:d5:91:4f:8f:81:
60:f0:e3:9d:a8:82:ee:3f:af:e8:13:24:be:b4:66:
97:14:59:7b:94:dc:93:df:ec:16:e1:d4:da:23:4d:
36:87:a9:01:46:05:0b:ac:b2:cd:68:39:5d:a3:d2:
3f:51:14:d1:bc:b7:1b:3a:90:32:b1:09:a8:6f:64:
40:86:de:20:af:bf:14:84:78:10:9f:96:e8:f0:87:
6b:25:e8:d8:dc:7a:46:26:6b:a2:4c:1c:3d:91:aa:
b4:73:f0:5b:65:e0:67:25:77:ec:b3:4e:63:33:26:
0f:df:24:c2:e0:3a:8a:1f:5d:55:51:37:d8:4a:50:
86:5d:0f:57:59:13:96:04:84:39:c1:cd:15:98:b4:
be:94:15:0a:4b:9e:c1:5b:d4:5d:f9:ea:37:be:82:
3e:96:8d:d8:f9:03:0a:a9:38:9c:b2:04:8c:16:61:
c3:11:27:b5:c1:79:46:48:f0:9c:c2:f8:c9:93:1f:
11:bd:ba:84:b5:fa:32:57:12:dd:25:61:29:37:8e:
78:63:3b:37:67:1a:e6:4c:1d:4f:54:08:ce:b8:ce:
8b:26:52:97:5e:cf:50:0b:cf:2d:f8:f8:0a:7a:e2:
b0:57:a4:fd:51:50:e4:63:80:0e:9a:eb:9a:b4:b3:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D1:10:0A:6A:6A:4A:86:C1:AE:FC:F5:31:16:4C:B4:82:A2:75:58
X509v3 Authority Key Identifier:
keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/cbd40256537d55d17d8c3d94cb2c82c52ead9623.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.69.112.0/20
Signature Algorithm: sha256WithRSAEncryption
71:5f:96:14:0d:e1:90:fa:56:82:36:cc:77:f8:9b:21:09:d0:
31:9f:db:86:e6:79:a2:77:09:52:00:19:3b:f5:3e:05:83:42:
56:ae:fd:9e:b9:37:71:5b:d5:ac:8b:ba:40:df:eb:23:89:9f:
ed:32:f5:9e:38:05:4d:ec:29:0e:bd:38:d6:67:a0:fe:09:3c:
af:c5:4a:e8:3a:8e:e0:83:ed:db:93:97:f6:e6:7d:d1:ee:77:
ff:17:93:c6:0c:27:40:75:ab:17:05:2e:e3:c1:2d:c6:08:9f:
57:2e:d4:4e:52:6f:2f:c3:bf:35:ce:8f:f5:5b:b4:1a:d3:bb:
a0:12:2c:6c:34:08:18:df:71:8c:99:12:57:81:a3:61:61:5f:
a8:bf:a8:ff:b6:8b:7a:12:6e:59:bf:ed:ea:f9:41:66:58:4e:
c0:2b:e9:8f:00:5d:91:9d:e8:34:0f:0d:09:97:35:9d:bd:70:
b6:6b:e4:42:0b:39:95:cf:ee:74:1e:20:b5:f2:7d:80:0a:f0:
f9:a4:8b:0e:51:a1:ac:3d:d9:77:09:22:64:39:01:24:1d:02:
88:da:6e:82:8b:2e:3e:7d:82:66:97:10:27:1e:1a:00:07:75:
fd:cb:3a:f0:56:18:9f:f2:a1:b6:39:75:ce:3f:dc:c2:0c:cb:
33:68:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org