Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/1d20ea42becb451c1ed2bb80f52024e1800d6abc.roa
File: 1d20ea42becb451c1ed2bb80f52024e1800d6abc.roa (raw, json)
Hash identifier: u3D0fmXYC0KDhgduIepJwBmf0FCWJuqVD/cGQQnZvYE=
Subject key identifier: 9D:AF:11:3A:AF:E1:E7:51:09:1F:FE:94:C6:39:5F:E3:0E:FD:B1:CB
Certificate issuer: /CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Certificate serial: 1FBB36
Authority key identifier: 3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/1d20ea42becb451c1ed2bb80f52024e1800d6abc.roa
Signing time: Thu 27 Apr 2023 14:32:10 +0000
ROA not before: Wed 26 Apr 2023 14:32:09 +0000
ROA not after: Sun 27 Apr 2025 14:32:09 +0000
asID: 28089
IP address blocks: 200.35.128.0/23 maxlen: 24
200.35.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079542 (0x1fbb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Validity
Not Before: Apr 26 14:32:09 2023 GMT
Not After : Apr 27 14:32:09 2025 GMT
Subject: CN=1d20ea42becb451c1ed2bb80f52024e1800d6abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:4b:aa:2d:50:3c:cd:6b:9f:7e:9d:b5:e3:
f9:bf:2f:a2:02:22:30:23:6f:20:81:f4:64:92:31:
4d:a4:89:26:0a:8a:e3:80:f3:52:b3:a8:be:cb:d7:
79:dc:33:fd:f3:0c:38:e0:1d:b2:41:e3:6b:47:76:
a5:f3:60:f9:3c:75:e0:6a:2f:74:94:64:a7:7b:d1:
82:67:cc:d9:ff:0d:ca:cf:b8:37:df:79:ec:52:77:
c2:ee:21:3b:4c:cd:82:f9:b4:cf:57:a8:5c:46:04:
c8:25:7d:57:5b:d9:47:59:34:70:51:03:57:66:51:
b9:48:68:5d:13:19:f0:45:eb:35:20:be:87:ef:4d:
1b:db:39:87:ea:25:0c:36:bd:72:16:b1:7b:a2:89:
41:4a:a8:97:57:79:6b:b8:2b:68:39:aa:62:b0:9a:
9d:bd:89:cc:8f:23:27:38:9a:e1:7b:f9:7c:5e:47:
98:32:da:92:32:42:58:df:cf:77:67:3a:61:5f:d4:
77:3b:fd:65:67:25:23:8f:ca:81:1c:35:fc:ba:ea:
b8:5c:51:2d:5b:f1:78:4c:49:b7:a2:c9:a2:93:20:
57:4f:84:d2:a5:9e:13:83:4f:7c:ea:a3:89:0a:ac:
7b:2f:9f:a5:63:65:37:4a:98:71:6a:27:bc:4c:4f:
05:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:11:3A:AF:E1:E7:51:09:1F:FE:94:C6:39:5F:E3:0E:FD:B1:CB
X509v3 Authority Key Identifier:
keyid:3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/1d20ea42becb451c1ed2bb80f52024e1800d6abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.128.0/23
200.35.132.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:cc:8f:7f:19:54:d7:69:f6:72:6f:42:fc:1b:cf:95:a9:59:
62:5d:43:dc:1a:46:06:a3:6c:25:18:ba:0b:87:b5:8a:7f:fd:
09:ff:7c:c2:0b:7b:db:b3:6b:9d:82:18:08:3e:dd:17:5d:46:
2c:d0:24:0f:e7:49:a8:9d:06:bf:77:6c:db:30:96:dc:41:2b:
f2:66:19:64:8e:7c:ec:c6:d8:a6:fe:e6:96:0e:69:86:e9:c4:
75:56:f4:1b:75:c9:20:13:8f:3f:6c:08:4e:70:c3:e7:c9:25:
df:bf:6e:17:bf:0a:d1:e8:3f:89:12:64:47:c6:97:cc:92:c3:
91:56:83:38:ab:c6:2f:4c:0f:59:b9:4b:2d:80:6b:ad:cf:c8:
e6:59:b4:04:31:47:a2:24:7c:e4:b8:90:e8:06:32:1f:70:4e:
e5:5d:e4:f6:fe:90:58:47:9b:26:35:a2:97:df:bc:d4:46:8d:
fe:16:44:9e:eb:4c:ba:f5:91:24:4d:00:7c:6b:f6:b7:61:16:
56:54:a6:45:ec:2b:ff:ee:4c:2a:a7:00:0d:44:29:4c:93:0f:
e9:06:98:64:ae:b2:8a:7b:af:ac:15:be:f7:c4:d6:a3:e4:29:
5a:f0:b1:26:57:2a:97:e7:62:a2:d8:6b:ae:31:67:bf:39:e3:
cc:17:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org