Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/7af5767cb15cf14c33fe0e6455bacabda6c833ae.roa
File: 7af5767cb15cf14c33fe0e6455bacabda6c833ae.roa (raw, json)
Hash identifier: 2CMOK1N2cIaGSp3u1N5cCKMeEYqEJ2y6jX/E8apdby8=
Subject key identifier: A8:36:FD:48:F1:FF:49:AB:6E:E7:10:DB:1F:93:8C:73:3E:B6:BF:BD
Certificate issuer: /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial: 0F8798
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/7af5767cb15cf14c33fe0e6455bacabda6c833ae.roa
Signing time: Fri 14 Apr 2023 10:25:42 +0000
ROA not before: Wed 12 Apr 2023 10:25:20 +0000
ROA not after: Fri 14 Apr 2028 10:25:20 +0000
asID: 834
IP address blocks: 200.26.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1017752 (0xf8798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Validity
Not Before: Apr 12 10:25:20 2023 GMT
Not After : Apr 14 10:25:20 2028 GMT
Subject: CN=7af5767cb15cf14c33fe0e6455bacabda6c833ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:16:18:18:fe:f0:1c:8e:22:1f:7d:d2:bc:
36:4a:d1:a9:1c:46:92:2c:26:a9:58:f3:4f:a3:10:
50:66:3f:63:a6:ee:0c:5f:97:18:f6:6a:87:05:b7:
42:eb:e5:d9:f9:6d:50:72:f6:08:75:a5:4b:9d:ca:
0b:76:23:37:b7:3c:98:a5:c2:a2:77:e9:3e:08:5f:
eb:a6:e9:71:7e:46:61:e1:7e:77:a0:d1:da:d8:0d:
a7:c1:5a:db:10:84:77:53:a7:9f:12:25:d6:56:62:
1a:89:14:d5:1a:5b:65:80:16:65:99:aa:db:2f:f6:
99:2c:04:71:9f:73:a6:13:d1:31:65:c1:05:b9:c9:
0f:7c:1a:38:9c:96:be:76:09:ce:15:48:dc:36:c7:
4f:15:d5:da:01:bd:ec:2a:c4:b2:4c:99:fc:e8:d5:
a0:e8:0d:e5:fa:22:b7:4e:e6:cd:f2:d6:48:bc:a3:
c5:e5:1a:ac:cc:b6:9e:20:d7:f2:d5:8f:37:97:92:
2b:0d:5e:99:c9:ad:b0:96:6e:70:58:55:7c:65:22:
68:1e:d6:21:92:99:1a:70:23:64:ad:67:58:05:af:
a6:ee:18:da:de:d2:1f:cf:03:8f:ad:70:77:b0:35:
6c:f4:cc:d7:e3:a5:2a:f1:ab:f4:71:5f:c7:18:8a:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:36:FD:48:F1:FF:49:AB:6E:E7:10:DB:1F:93:8C:73:3E:B6:BF:BD
X509v3 Authority Key Identifier:
keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/7af5767cb15cf14c33fe0e6455bacabda6c833ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.26.188.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c7:7a:ff:d1:ae:cc:44:ce:1d:19:94:33:1c:a2:a9:db:f9:
9b:db:6e:53:2e:0a:28:64:0e:15:9f:5a:91:ed:3d:0f:79:9a:
a0:5d:e2:67:ee:e2:da:9b:f4:76:dd:42:2b:cd:09:1c:f5:77:
51:86:f5:25:45:29:99:ff:fa:11:fe:76:a8:dd:68:d4:e5:4b:
8b:ba:59:e2:a1:27:7d:24:7b:a3:9b:f3:cf:2d:19:56:ce:d4:
7d:95:db:22:43:6e:59:4b:26:73:0c:4b:71:66:dc:e5:de:dd:
ca:46:b4:21:dd:a0:ae:1f:38:40:a5:80:dc:0b:66:00:7e:c0:
ad:6e:21:03:bf:40:e9:d7:49:04:b2:ba:b3:a6:30:7d:c0:85:
57:02:a7:38:c4:10:23:81:7b:c5:48:94:6e:5c:4a:00:ae:d8:
64:0a:dd:e4:7e:70:4f:cd:48:2b:b1:18:c8:01:a5:9f:fe:ab:
6d:4b:3e:2f:ff:32:9f:2d:21:30:c9:de:8a:4c:7a:b7:5b:0a:
36:f3:d1:4e:5e:2d:20:59:b4:a4:71:57:d5:9c:ba:ea:d5:e4:
77:f4:07:1f:a8:14:8e:9f:96:04:db:cd:ad:9f:5d:e5:9b:68:
cc:17:a3:49:54:01:ba:a2:f8:2f:8d:3b:4c:66:6b:23:d0:8d:
d2:0c:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:51 2023 by rpki-client on console-ams.rpki-client.org