Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/bfe4401e605f334fdfb77a2dcd8013598493a925.roa
File: bfe4401e605f334fdfb77a2dcd8013598493a925.roa (raw, json)
Hash identifier: SCKm0wUOxfYikRXB4SqaEhTf5GEx8176Ofu+jYn+3Qs=
Subject key identifier: 9C:26:25:B3:41:25:8B:29:87:FA:51:D0:08:A9:C0:17:9D:7A:84:F0
Certificate issuer: /CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Certificate serial: 1FBED6
Authority key identifier: 3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/bfe4401e605f334fdfb77a2dcd8013598493a925.roa
Signing time: Thu 27 Apr 2023 14:39:15 +0000
ROA not before: Wed 26 Apr 2023 14:39:15 +0000
ROA not after: Sun 27 Apr 2025 14:39:15 +0000
asID: 28089
IP address blocks: 200.35.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2080470 (0x1fbed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Validity
Not Before: Apr 26 14:39:15 2023 GMT
Not After : Apr 27 14:39:15 2025 GMT
Subject: CN=bfe4401e605f334fdfb77a2dcd8013598493a925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:17:1b:86:76:fb:5a:ce:ea:95:9b:4a:37:
0b:f6:26:7c:bc:58:57:03:75:be:67:f9:d0:46:c6:
99:e5:69:49:a0:b7:1f:13:51:31:9b:bf:ee:b9:8e:
a7:c7:ac:dd:42:8a:37:fc:5d:77:53:39:fa:b7:ad:
b7:28:20:c6:da:ac:f1:70:5a:01:81:15:f2:30:f9:
6e:7d:f6:90:38:99:4b:fa:8b:7a:12:34:ba:d0:ec:
d4:bd:5e:6b:e7:b7:f8:fc:81:47:bb:ac:53:fa:60:
ee:f6:16:45:b1:ac:84:4c:ae:50:d3:83:43:2b:52:
87:ee:eb:01:aa:94:fe:33:ab:ea:2e:9a:61:78:38:
23:4a:30:dd:e1:70:78:11:81:5c:33:9d:67:29:be:
7f:4e:5f:a2:92:6c:7e:b1:08:b3:cc:1e:07:f0:f7:
a3:e2:36:b5:9d:fe:c6:06:b9:97:e4:03:4f:71:9b:
bd:49:45:b6:d4:fb:67:f7:80:7d:e5:aa:54:95:7a:
c2:41:3f:8f:1d:f4:4e:d6:69:cc:f7:b0:87:c6:34:
7d:b7:58:96:85:91:33:be:17:55:af:4e:84:1f:8b:
8c:f1:1a:bb:64:59:e3:bc:a2:d3:4d:cf:5c:3b:cc:
af:1a:0d:01:35:18:41:1c:29:8e:17:66:7e:7e:b9:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:26:25:B3:41:25:8B:29:87:FA:51:D0:08:A9:C0:17:9D:7A:84:F0
X509v3 Authority Key Identifier:
keyid:3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/bfe4401e605f334fdfb77a2dcd8013598493a925.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.142.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:f1:b6:07:a7:45:a0:ba:63:ca:f8:01:b9:ff:16:b0:a5:4b:
70:8d:50:41:e7:42:d4:aa:81:35:b5:a7:9d:71:b7:ef:ba:9d:
0c:e0:a9:c9:84:b6:5f:51:e8:21:b9:00:55:24:86:09:b3:6d:
30:c0:8a:ce:d7:23:3c:f6:b3:10:bf:2a:88:c3:59:d0:d5:2a:
78:fa:24:78:94:d5:cf:97:ff:44:89:56:be:da:ce:80:a3:47:
e5:33:7c:58:fc:4a:65:00:82:5b:cd:67:1a:0a:1f:04:b0:1e:
b5:dd:10:bd:24:91:05:03:df:5e:34:45:ba:99:dd:42:b9:0e:
b3:2c:aa:1c:52:9d:6b:37:75:bd:a9:07:44:78:9b:96:88:1a:
b6:52:10:44:f2:de:b7:bc:f5:ce:70:ee:b1:37:c0:64:d0:b5:
fd:28:52:c5:13:3f:78:9d:14:1c:40:d4:37:25:ea:6e:10:48:
c8:dd:14:89:f0:b2:23:6f:a3:db:3b:c4:bc:a2:8b:db:15:c7:
7f:dd:4e:b9:f6:a7:22:da:61:94:9f:ed:04:dc:71:04:1b:73:
ff:07:63:2b:e0:76:f0:09:c1:31:0c:b7:f5:4a:e0:8b:02:2a:
72:ed:6b:8f:6e:b2:aa:62:38:66:fa:4d:53:48:22:fd:29:06:
e0:61:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org