Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/5f5cc938c3dcfc6354259a3224a3a47671a37e25.roa
File: 5f5cc938c3dcfc6354259a3224a3a47671a37e25.roa (raw, json)
Hash identifier: tY57qXszZIlBbHcPK0UcNXHYV/defM9FaFF1P/HN5ss=
Subject key identifier: EF:0D:C5:3E:87:BD:E4:F8:2A:17:74:9C:E2:2E:08:D5:92:03:75:3D
Certificate issuer: /CN=0317b9d1456b48aa14ec8d784f305e45943a6533
Certificate serial: 08BC8B
Authority key identifier: F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/5f5cc938c3dcfc6354259a3224a3a47671a37e25.roa
Signing time: Wed 26 Apr 2023 16:47:33 +0000
ROA not before: Tue 25 Apr 2023 16:47:33 +0000
ROA not after: Sat 26 Apr 2025 16:47:33 +0000
asID: 265622
IP address blocks: 200.110.104.0/23 maxlen: 24
2806:3a3::/34 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572555 (0x8bc8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0317b9d1456b48aa14ec8d784f305e45943a6533
Validity
Not Before: Apr 25 16:47:33 2023 GMT
Not After : Apr 26 16:47:33 2025 GMT
Subject: CN=5f5cc938c3dcfc6354259a3224a3a47671a37e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:5b:cd:d1:2c:dc:04:39:ff:55:52:d0:7e:
a1:0b:c4:67:bd:37:49:e6:56:26:79:18:b9:07:fe:
ff:71:7c:56:04:c5:c9:02:aa:9c:3d:a7:63:f4:d2:
79:1a:1f:87:f4:67:41:79:e4:55:4f:01:38:de:8b:
71:f6:a5:b5:0b:53:10:58:f0:2e:63:f8:4b:40:79:
87:a3:0b:34:79:a0:d9:f5:3d:b5:ab:39:65:0c:88:
2c:37:20:07:e8:bb:cc:48:df:e0:cd:9b:a4:fe:0a:
9b:84:21:56:ac:f6:b9:58:d5:41:e8:57:b3:09:da:
85:2b:e8:ba:23:36:d5:14:4d:63:c5:86:28:62:ac:
4a:2a:5c:e4:24:49:0d:88:fc:52:51:ac:c0:73:3a:
21:fe:6f:d4:31:02:a6:07:bf:20:3d:69:5a:1d:13:
41:e5:26:78:d8:7f:5a:df:28:41:6e:09:56:8c:6f:
eb:0e:95:10:cf:7b:53:d7:62:ae:45:53:08:86:98:
15:d1:88:e9:c1:00:81:e9:5c:78:24:62:92:d7:97:
b6:0f:c1:7b:5e:be:27:7b:c8:7a:1f:55:51:64:7d:
87:e3:71:bb:4f:ef:30:d7:85:9b:c5:c7:23:97:4e:
88:68:7f:5e:5e:32:80:8e:3d:2a:b1:79:f6:ed:5d:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0D:C5:3E:87:BD:E4:F8:2A:17:74:9C:E2:2E:08:D5:92:03:75:3D
X509v3 Authority Key Identifier:
keyid:F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/5f5cc938c3dcfc6354259a3224a3a47671a37e25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/0317b9d1456b48aa14ec8d784f305e45943a6533.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.110.104.0/23
IPv6:
2806:3a3::/34
Signature Algorithm: sha256WithRSAEncryption
80:06:15:13:59:4a:07:5a:15:05:79:cc:37:a3:48:fd:b4:3e:
5f:7f:7a:65:c5:29:e8:e4:59:fc:32:72:66:c3:de:7b:c0:e1:
e8:b0:35:bb:87:4e:64:73:53:3f:79:84:6b:67:53:e2:e0:89:
1c:9f:18:c9:5b:f7:7f:43:39:6d:d1:04:3e:91:19:20:60:43:
56:0e:99:5d:f8:2f:fe:81:6c:af:7c:a8:eb:68:57:d6:f6:14:
66:27:2e:17:8f:80:20:17:21:98:08:9d:0e:79:0e:77:3c:45:
20:94:4b:c5:5b:74:53:78:ab:d1:aa:7f:1b:5d:e1:35:c7:14:
ef:e3:89:b9:83:d3:b6:98:39:6e:dc:07:f8:f7:e8:a3:9c:66:
5e:98:f9:97:f9:89:3e:1c:b9:c5:69:dd:d1:3f:cf:e5:a0:74:
33:6f:e3:45:39:a4:0c:42:18:fb:c3:13:24:fe:23:35:21:de:
eb:ee:d2:81:b3:3b:67:25:6b:c1:1e:fe:4b:ea:64:6b:c9:bb:
a6:0d:74:fc:fc:b8:92:05:d0:86:05:60:e3:6c:4b:b8:f9:e8:
04:81:61:14:9c:10:75:53:5a:14:e0:62:50:e9:89:a7:2d:e0:
79:e6:d8:f2:62:2c:e0:97:2d:10:d2:74:3f:89:9d:77:ba:f0:
4e:bc:46:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org