Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/ba6d5c7ecf040acb183524d6a53110d17bd63f65.roa
File: ba6d5c7ecf040acb183524d6a53110d17bd63f65.roa (raw, json)
Hash identifier: 8agpd4SfHcNbCdJerUWHJaBFPj7x2hBngLy17YpyyR8=
Subject key identifier: 8D:3F:5E:82:3E:20:92:C0:2F:C7:7C:D5:AD:79:29:F1:8D:CA:41:2B
Certificate issuer: /CN=44c0c42f2a746ed7ed4e4598104fe194814c0771
Certificate serial: 3E4E
Authority key identifier: 3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c0c42f2a746ed7ed4e4598104fe194814c0771.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/ba6d5c7ecf040acb183524d6a53110d17bd63f65.roa
Signing time: Thu 21 Apr 2022 15:30:58 +0000
ROA not before: Thu 21 Apr 2022 03:00:00 +0000
ROA not after: Sun 21 Apr 2024 03:00:00 +0000
asID: 270027
IP address blocks: 200.233.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15950 (0x3e4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0c42f2a746ed7ed4e4598104fe194814c0771
Validity
Not Before: Apr 21 03:00:00 2022 GMT
Not After : Apr 21 03:00:00 2024 GMT
Subject: CN=ba6d5c7ecf040acb183524d6a53110d17bd63f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:90:58:22:9d:4f:94:58:be:56:fb:d6:38:
81:6a:7a:ad:2c:12:18:67:47:6a:21:b4:99:a3:1b:
2c:7f:d9:a6:cc:b4:ca:55:ce:81:30:b4:5c:59:bd:
7d:6f:66:11:5b:a3:93:bb:ff:ca:8d:b8:d6:3b:d8:
e8:2a:b1:bd:d8:26:7c:66:2b:3b:b0:e8:6f:cc:2a:
8a:f2:0e:37:15:41:33:52:e6:99:b3:2c:ae:8a:2b:
70:3b:6f:f1:aa:95:e7:e4:63:6e:d3:17:83:49:b1:
ef:ef:cf:f0:46:72:16:98:3e:11:fa:27:a3:3b:29:
b5:b2:ca:9a:88:ac:d0:2d:c0:96:be:c2:5b:a9:c7:
74:d9:d2:a6:39:22:e2:db:43:50:ff:e4:8a:d5:d8:
9a:d2:d0:3a:66:b9:22:ac:f5:90:ad:3b:45:85:72:
e4:62:df:3f:98:cb:e4:f3:44:1d:64:91:2a:ea:3b:
c5:30:1b:0b:d0:fd:dc:d3:53:74:f0:13:de:5d:5d:
3b:3e:2f:07:9e:6b:3c:d3:33:fa:6e:dc:16:9d:e8:
32:fe:0d:f6:55:60:1d:a1:c0:bf:91:e5:9f:79:c4:
5f:04:06:e5:2f:ab:d1:ba:89:82:27:da:9c:df:5e:
20:7e:63:20:34:b1:06:88:45:71:7c:9c:74:28:42:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3F:5E:82:3E:20:92:C0:2F:C7:7C:D5:AD:79:29:F1:8D:CA:41:2B
X509v3 Authority Key Identifier:
keyid:3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c0c42f2a746ed7ed4e4598104fe194814c0771.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/ba6d5c7ecf040acb183524d6a53110d17bd63f65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/44c0c42f2a746ed7ed4e4598104fe194814c0771.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.233.40.0/24
Signature Algorithm: sha256WithRSAEncryption
21:72:04:1d:35:c6:3b:66:a0:61:44:a3:76:ea:42:8c:c0:38:
3d:0a:bc:7f:30:fb:21:68:b8:8b:61:8e:a0:a3:36:ab:ad:79:
e5:04:ee:c2:37:e7:93:dc:47:f9:75:87:98:21:d7:d0:2c:06:
19:2a:97:fb:11:ab:5b:08:ff:78:f8:05:df:ab:60:95:24:6f:
d5:ad:f3:6f:29:53:54:93:db:a8:30:3e:ce:bb:69:68:f0:21:
68:b6:df:2b:5e:dc:ae:75:9e:e4:77:f6:63:9e:37:c2:2e:7b:
ff:46:9f:68:db:a6:dc:e6:7f:34:00:92:95:d3:8f:c0:e6:1c:
72:9e:94:62:be:08:76:37:13:05:39:86:8c:95:7b:d7:9d:c5:
49:26:c7:92:6c:c1:46:cd:e0:7c:4f:d4:63:6a:6f:5c:74:6c:
ff:fe:42:42:76:bf:94:1e:fd:a2:e1:e8:c7:24:8f:df:19:81:
de:56:0a:68:36:97:be:1a:28:14:b8:68:da:56:fa:e7:12:a5:
c0:7f:2c:ce:ee:c8:20:06:13:db:b0:74:b6:4a:01:55:f3:37:
a8:53:1e:f1:60:30:fb:a6:61:d3:bf:cc:14:0e:dc:b1:e2:fe:
3f:29:67:2f:a8:a5:da:dd:6a:81:05:2a:6c:3e:82:32:c6:89:
eb:1d:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org