Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/af4c22cd-92b3-485b-b2f6-42863f94a036/cb32dafd3a9ac7f57162342e3a0fcf1c62495e0f.roa
File: cb32dafd3a9ac7f57162342e3a0fcf1c62495e0f.roa (raw, json)
Hash identifier: sgZvYtPqGLCpKuAu/Epc3jjYP5nVc5b6tUsFAuqjob8=
Subject key identifier: 86:8B:9B:BE:4D:24:0F:25:7B:89:D7:08:1C:CF:00:AB:F9:2F:B9:56
Certificate issuer: /CN=22267ca11916d4b70d820d1978ab2e851fd12b4a
Certificate serial: 1AF683
Authority key identifier: DD:2B:84:18:1F:75:D5:11:A1:2B:11:79:2D:98:45:7D:66:ED:41:D2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22267ca11916d4b70d820d1978ab2e851fd12b4a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/af4c22cd-92b3-485b-b2f6-42863f94a036/cb32dafd3a9ac7f57162342e3a0fcf1c62495e0f.roa
Signing time: Wed 19 Jul 2023 03:23:10 +0000
ROA not before: Tue 18 Jul 2023 03:23:10 +0000
ROA not after: Sat 19 Jul 2025 03:23:10 +0000
asID: 52402
IP address blocks: 200.123.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767043 (0x1af683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22267ca11916d4b70d820d1978ab2e851fd12b4a
Validity
Not Before: Jul 18 03:23:10 2023 GMT
Not After : Jul 19 03:23:10 2025 GMT
Subject: CN=cb32dafd3a9ac7f57162342e3a0fcf1c62495e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:b8:b6:de:89:f5:ba:d3:b6:09:af:73:92:
4d:8a:f0:ac:bd:c6:0a:81:a8:71:b3:08:f0:54:d3:
3a:83:84:2d:49:5c:05:9e:cf:a2:a3:11:99:5f:56:
53:66:ad:65:9d:b6:27:87:e8:40:25:d3:f6:76:4f:
7b:99:63:88:36:ef:79:96:40:61:bd:b6:23:82:50:
90:04:30:a3:70:65:f1:07:78:94:7d:9e:8c:02:bb:
7f:6f:f3:9d:78:1f:b7:5e:91:c0:3e:46:42:a6:06:
f2:5e:2d:a8:c0:a0:1b:2e:2c:c2:ee:96:1b:a2:aa:
6c:25:63:93:32:95:c4:57:0b:49:08:90:c4:5a:cd:
e4:9e:9f:b5:0d:d5:7a:d3:e4:4b:5c:95:6b:3b:1e:
a9:30:97:22:55:c1:03:ef:19:df:2c:82:e3:7a:1d:
48:1a:c8:7f:8c:92:c9:9c:f8:a4:df:fc:8c:5b:92:
d1:b8:c5:94:56:37:e1:50:54:f9:45:16:66:8a:8b:
4e:1f:03:58:67:86:db:ea:e5:d1:7a:d7:97:7e:4f:
03:66:6c:c2:61:9e:5b:0e:8b:8d:37:9f:0e:9c:b2:
9e:4e:e4:de:e6:21:4f:5b:d1:98:dc:9f:48:53:4e:
f8:eb:90:30:c9:87:6d:b7:29:54:75:10:c1:38:7c:
51:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8B:9B:BE:4D:24:0F:25:7B:89:D7:08:1C:CF:00:AB:F9:2F:B9:56
X509v3 Authority Key Identifier:
keyid:DD:2B:84:18:1F:75:D5:11:A1:2B:11:79:2D:98:45:7D:66:ED:41:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22267ca11916d4b70d820d1978ab2e851fd12b4a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/af4c22cd-92b3-485b-b2f6-42863f94a036/cb32dafd3a9ac7f57162342e3a0fcf1c62495e0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/af4c22cd-92b3-485b-b2f6-42863f94a036/22267ca11916d4b70d820d1978ab2e851fd12b4a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:e1:48:5a:a7:34:93:08:55:d1:85:ee:c6:6f:0f:84:0b:81:
1a:ee:90:3b:12:bb:76:82:1c:4b:e7:cb:dc:93:97:29:e9:6a:
5f:2b:0f:59:22:96:ac:22:bd:f7:43:09:12:b3:3f:d0:3f:84:
94:56:57:0e:98:4e:5c:61:68:d8:e5:40:89:98:91:73:6d:33:
23:41:57:0a:a5:ed:0e:08:62:c9:d8:4c:ca:cf:5f:3a:fe:b5:
0b:19:a6:7f:eb:00:8b:50:68:d5:c9:18:68:60:8f:44:6c:4a:
ce:b4:dd:69:89:25:f7:c0:b9:b6:61:2b:91:bf:58:bc:fe:0e:
4d:68:5f:82:fb:57:2d:4d:6e:19:1c:82:58:3e:c6:a1:c8:9f:
ce:40:33:8b:a9:b0:d4:5a:c4:9f:0b:e4:6e:f1:6e:70:4d:6f:
28:8e:a6:b3:29:01:d2:37:ed:9b:fb:ac:81:ec:9f:c8:7f:ab:
a5:4d:d7:2c:0d:be:18:05:4f:fe:56:82:da:82:d0:f3:bb:79:
6e:a8:77:22:75:96:70:0c:62:78:3a:bc:03:d8:e7:91:bf:80:
6f:37:b8:4b:3c:c8:b8:61:0d:e2:e3:5e:8f:ae:e8:86:7b:38:
6c:71:d8:eb:97:94:58:f9:e4:da:e7:5d:02:0e:1c:9a:45:c6:
3e:24:30:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org