Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/946db1f31fd383e263fbfc511ed55ecd58e19811.roa
File: 946db1f31fd383e263fbfc511ed55ecd58e19811.roa (raw, json)
Hash identifier: W+m46kEkRVruN+Dv7eyPcDJpPsD5xov7dnJ/UhSBheI=
Subject key identifier: A5:84:F9:8A:83:DD:49:C4:1B:ED:DE:77:1E:8A:F2:DF:4F:BC:31:85
Certificate issuer: /CN=bff7b3f674f44a97ef26d385f1f6cb77da502739
Certificate serial: 190F7E
Authority key identifier: 4F:AC:50:32:15:04:B2:B9:69:5D:DF:F5:43:01:D3:D4:EE:29:D4:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bff7b3f674f44a97ef26d385f1f6cb77da502739.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/946db1f31fd383e263fbfc511ed55ecd58e19811.roa
Signing time: Thu 29 Jun 2023 22:58:46 +0000
ROA not before: Wed 28 Jun 2023 22:58:46 +0000
ROA not after: Sun 29 Jun 2025 22:58:46 +0000
asID: 265696
IP address blocks: 200.3.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1642366 (0x190f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff7b3f674f44a97ef26d385f1f6cb77da502739
Validity
Not Before: Jun 28 22:58:46 2023 GMT
Not After : Jun 29 22:58:46 2025 GMT
Subject: CN=946db1f31fd383e263fbfc511ed55ecd58e19811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:aa:d9:16:26:6d:e4:c7:02:ba:67:1e:6b:
98:19:ae:da:96:f2:9c:75:5c:2f:43:19:94:53:27:
76:8b:cb:32:52:a3:30:10:35:7f:a9:ed:18:81:c9:
75:b8:b7:cb:61:b3:a3:42:b1:20:3d:72:3e:ac:08:
5b:61:a6:66:d2:69:71:27:49:d0:de:72:d2:ab:a0:
06:3b:ef:6e:b1:56:ed:d0:f6:42:4d:cc:16:14:88:
79:8f:7e:69:f1:0f:76:76:4f:55:e9:74:ce:ab:c8:
6f:50:ec:c8:11:3b:76:af:ec:86:dd:9b:9e:ce:12:
89:45:af:ac:ac:4e:5d:53:2b:6e:1d:cb:b3:e3:2c:
1d:2f:db:85:80:ed:6b:14:a9:12:83:71:25:de:f9:
fc:d5:f6:ac:8c:5f:99:69:08:56:ba:61:bf:24:ea:
b9:bb:45:9b:77:42:20:52:17:3f:62:ff:eb:3c:26:
e9:5f:bf:86:b9:b7:40:ad:d6:43:90:80:c3:e5:9c:
cb:b2:d6:a5:8c:02:5b:3d:e7:76:a3:5f:f3:74:6a:
e4:dd:aa:b0:86:5d:2b:03:16:1a:da:7e:13:7b:04:
a8:32:de:3c:a0:1d:e1:44:90:9c:77:d4:2b:c8:c5:
93:66:55:56:96:aa:d0:4f:5f:a6:6b:9e:1d:ba:41:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:84:F9:8A:83:DD:49:C4:1B:ED:DE:77:1E:8A:F2:DF:4F:BC:31:85
X509v3 Authority Key Identifier:
keyid:4F:AC:50:32:15:04:B2:B9:69:5D:DF:F5:43:01:D3:D4:EE:29:D4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bff7b3f674f44a97ef26d385f1f6cb77da502739.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/946db1f31fd383e263fbfc511ed55ecd58e19811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/bff7b3f674f44a97ef26d385f1f6cb77da502739.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.192.0/24
Signature Algorithm: sha256WithRSAEncryption
66:03:d8:91:80:e7:fd:28:93:ee:8c:af:4d:cc:39:69:1e:c0:
52:5e:18:20:a7:14:f0:12:45:a8:74:34:f9:7a:d8:61:d0:32:
0f:3d:12:b9:95:07:30:bf:bb:a1:7f:c6:5a:ef:82:9a:0e:eb:
61:3c:9d:39:a2:e2:30:fa:76:de:fa:0a:21:5e:0e:11:a8:34:
f0:6d:3a:6d:f3:05:c5:8c:f6:f7:12:23:6f:04:9c:f3:97:3d:
a8:fe:12:3c:b8:a9:55:4d:d5:d2:bc:64:73:2a:de:c9:d7:47:
fc:b5:8e:03:2c:60:45:51:b6:55:71:a0:ee:7e:93:95:c3:67:
d4:7c:16:db:93:b1:e9:50:a6:04:7f:d4:04:5e:73:45:02:52:
c4:8c:ac:fe:33:2d:73:29:ba:68:9c:ff:34:1e:5c:bb:e9:12:
0a:48:ae:fb:34:5b:92:fc:70:23:1b:3b:db:60:60:8d:fe:15:
b9:86:18:cc:72:58:05:34:51:87:a4:5e:69:ba:2b:f8:d2:bb:
eb:f3:4b:49:61:1e:79:8c:2c:23:85:18:4a:d2:b4:84:f1:dd:
1e:9a:ea:0a:f8:71:75:d7:ec:4f:5c:41:93:4e:21:b8:d6:82:
1f:dd:1d:e7:66:c9:bc:a8:13:99:30:1f:96:a7:a8:9b:71:99:
fd:f6:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org