Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/a8acc9b27a46d34f113c2a931c99aa59503780b1.roa
File: a8acc9b27a46d34f113c2a931c99aa59503780b1.roa (raw, json)
Hash identifier: ZkJ85E8jUyQLc8Wn1zW/nKJW0R/gTeGfpR2jGH8I/tY=
Subject key identifier: 55:E9:CC:94:ED:12:94:DF:7A:D7:6D:84:8C:92:C4:93:80:DE:80:C1
Certificate issuer: /CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4
Certificate serial: 2856F7
Authority key identifier: D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/a8acc9b27a46d34f113c2a931c99aa59503780b1.roa
Signing time: Tue 09 Apr 2024 19:49:26 +0000
ROA not before: Tue 09 Apr 2024 19:49:25 +0000
ROA not after: Thu 09 Apr 2026 19:49:25 +0000
asID: 61522
IP address blocks: 200.23.206.0/24 maxlen: 24
45.68.16.0/22 maxlen: 22
2801:14:9000::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2643703 (0x2856f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4
Validity
Not Before: Apr 9 19:49:25 2024 GMT
Not After : Apr 9 19:49:25 2026 GMT
Subject: CN=a8acc9b27a46d34f113c2a931c99aa59503780b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:c7:6d:d9:6a:7f:51:fd:d9:d1:db:19:6c:
34:f3:f8:ad:da:36:08:8b:04:15:60:7e:af:db:e4:
3d:eb:88:9c:f8:e4:19:88:f6:ae:62:2b:b4:46:6a:
ea:2d:5c:7c:a8:4c:63:27:6a:44:7d:e4:75:d4:56:
69:9a:81:50:22:a2:eb:74:e3:2a:4c:92:84:4d:ca:
2c:1e:b1:10:8a:8e:07:06:bc:4f:c8:48:e9:4c:f2:
d1:b6:00:a0:11:0f:52:4b:ee:60:0d:c7:a4:3e:3c:
b3:f2:80:a6:0e:c2:60:48:6a:a2:82:e0:7c:8a:41:
dd:1d:15:e5:f6:d9:f7:c9:51:a3:11:7e:68:5f:95:
31:a4:80:3f:7d:b5:8a:ab:c1:7e:3d:49:17:e5:8f:
1c:f4:c0:10:4c:17:72:f2:d0:3f:8e:c0:18:f2:49:
fa:6a:db:0c:b5:3e:61:ef:30:88:bd:4c:19:35:4b:
64:c6:f6:81:c9:79:e6:9b:16:a1:46:05:7b:23:3b:
51:48:bb:48:7c:59:7a:99:af:8d:c3:bf:0c:8b:ba:
c0:04:a5:0c:4e:9f:3e:b2:7a:a0:2f:78:e0:29:fd:
cf:46:5d:7c:1d:27:81:fb:23:93:f2:27:4d:2f:7c:
be:3a:47:b2:c6:f0:3e:55:9c:09:56:90:6c:e4:bf:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E9:CC:94:ED:12:94:DF:7A:D7:6D:84:8C:92:C4:93:80:DE:80:C1
X509v3 Authority Key Identifier:
keyid:D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/a8acc9b27a46d34f113c2a931c99aa59503780b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/f81aa2de9d81221fefa524fd694489ce8b67c8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.16.0/22
200.23.206.0/24
IPv6:
2801:14:9000::/64
Signature Algorithm: sha256WithRSAEncryption
03:d7:db:b8:3b:b6:03:6c:68:07:4a:33:4b:72:3a:ee:6d:38:
3e:31:96:16:70:00:d3:a4:82:ee:81:d0:2f:a5:4d:2b:33:b0:
e9:7d:42:2f:17:6b:a5:8d:bf:ae:59:5a:64:21:ef:b4:5e:83:
1d:35:78:10:97:72:9c:f6:0f:0a:6b:b4:bf:86:e2:37:c9:98:
a5:16:b3:03:5f:1e:6a:ae:54:a1:a6:9f:66:42:c6:e8:c0:fd:
e0:7c:61:42:8a:50:4c:47:5c:e0:84:6a:6d:44:3b:e2:80:6e:
4a:22:06:3c:c1:1a:53:d1:00:68:0d:0d:e3:9a:fc:4f:74:f2:
72:ee:f6:01:a9:a3:4d:b3:d3:23:60:a4:e8:46:e9:b3:e7:44:
6e:bb:2c:af:86:22:f2:37:6f:3d:62:ab:43:50:0e:80:52:a3:
11:ed:21:66:34:3f:d1:54:f4:7f:89:a9:4a:6e:f8:84:63:c3:
a0:0d:ef:29:fa:63:c0:94:a1:26:c6:61:6c:26:65:aa:d2:cb:
0f:bb:10:75:aa:81:20:a1:0d:ef:63:a2:22:09:2f:34:af:e0:
30:d1:4a:dd:99:a6:86:62:31:20:a1:68:f9:46:f4:65:30:5d:
3c:03:ea:21:44:cf:93:b4:3e:75:0a:5f:d9:94:5f:9a:30:ea:
1c:7e:17:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org