Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/68f3580b7f53232703b048c43ed3343640532e4a.roa
File: 68f3580b7f53232703b048c43ed3343640532e4a.roa (raw, json)
Hash identifier: 5GP49bfdGk1GaIfpHVzPbGUXRa3da0du8lZGC6aFfeI=
Subject key identifier: 68:E4:91:BA:CF:16:FC:18:F7:3D:85:05:64:FD:AF:D1:B2:D4:9C:DE
Certificate issuer: /CN=71a464f59d46ac27cdbcbb0efe6e417e3717efd0
Certificate serial: 1CE2
Authority key identifier: 50:06:D9:00:0E:20:81:07:C1:3A:6B:1F:EA:9B:3D:4C:9F:EF:69:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/68f3580b7f53232703b048c43ed3343640532e4a.roa
Signing time: Wed 05 Oct 2022 00:15:56 +0000
ROA not before: Wed 05 Oct 2022 00:08:32 +0000
ROA not after: Sat 05 Oct 2024 01:08:32 +0000
asID: 8026
IP address blocks: 200.4.16.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7394 (0x1ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a464f59d46ac27cdbcbb0efe6e417e3717efd0
Validity
Not Before: Oct 5 00:08:32 2022 GMT
Not After : Oct 5 01:08:32 2024 GMT
Subject: CN=68f3580b7f53232703b048c43ed3343640532e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8e:92:ce:75:a9:64:e2:91:da:f7:43:92:eb:
f6:21:0f:6a:ad:fe:ae:31:35:56:f1:31:54:39:3c:
ed:cc:75:46:7e:40:fc:38:f1:10:24:be:8e:1c:29:
de:07:e2:c9:5f:cc:72:f6:5e:4c:71:4f:51:43:31:
99:2b:ac:0f:7f:43:c7:8c:4d:c4:25:c9:6e:34:e4:
fd:70:19:61:f5:c1:2e:7e:07:5b:d0:e0:42:58:c1:
5b:29:1a:51:42:88:62:14:7d:a9:90:3c:88:67:51:
f9:ea:ca:da:40:a5:dd:1d:46:44:06:b3:99:e4:2d:
e3:77:82:99:60:80:e6:20:3a:05:77:c3:e0:8f:da:
e4:36:20:3f:53:a9:6b:07:ec:2f:a8:02:54:e0:55:
66:be:87:0f:cd:d5:0c:1d:8f:29:ac:9a:91:6d:00:
99:62:65:a6:20:4d:5e:af:b7:26:2b:87:2c:27:6d:
c1:af:0c:4a:0f:89:96:19:87:58:a0:49:fa:28:47:
94:9d:fc:77:fe:55:f0:f0:92:7d:09:d9:c2:c0:79:
2e:17:bb:5f:57:7f:58:1a:50:62:65:70:67:05:b2:
43:61:ce:b1:67:e4:a1:e5:e2:40:01:b3:ca:51:f0:
ab:dc:dd:e4:58:6f:28:20:14:6b:39:de:31:50:82:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E4:91:BA:CF:16:FC:18:F7:3D:85:05:64:FD:AF:D1:B2:D4:9C:DE
X509v3 Authority Key Identifier:
keyid:50:06:D9:00:0E:20:81:07:C1:3A:6B:1F:EA:9B:3D:4C:9F:EF:69:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/68f3580b7f53232703b048c43ed3343640532e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.4.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:86:8f:5e:36:14:ec:6b:64:ca:d8:a3:60:3a:48:77:dc:91:
1e:02:77:b3:c9:86:17:9b:05:6b:70:2a:23:64:1d:3c:e0:63:
d3:df:51:41:63:48:2a:5f:f7:b3:2e:2a:d1:b8:75:9e:7a:8a:
12:4c:3b:ec:b9:0a:52:c8:ad:ce:d8:07:17:eb:6c:d6:b5:d7:
d4:90:54:3b:64:f3:f8:22:ab:42:70:36:2d:cd:28:0e:9f:dd:
89:9f:b5:c6:46:c2:5a:c6:a5:e3:9f:d0:78:3e:30:00:20:a6:
7a:4b:18:15:4d:46:b0:4c:a4:f5:b6:71:16:85:75:48:7e:4b:
4e:c1:53:81:39:fd:65:83:08:58:14:50:ae:c4:70:03:d0:f8:
1a:4d:5e:d9:39:54:41:b8:52:e8:a9:a8:6a:2a:29:6e:2d:20:
19:d4:53:34:38:73:c7:0d:8d:0d:43:cd:37:da:44:3e:81:f8:
f5:53:54:1a:fe:c8:7c:06:d6:8f:67:3c:bc:74:6a:06:7a:a0:
1b:a8:12:be:c6:66:7b:71:de:63:ea:26:99:89:45:ac:04:15:
6d:dc:2f:d3:45:f8:97:83:f8:20:eb:fe:79:53:d4:03:14:91:
0f:02:89:37:4f:fe:00:4c:55:3c:3a:b3:91:9a:f6:ef:d8:95:
76:33:de:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org