Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/38c8298b05420da7963fbd8df3b65278d9c8975e.roa
File: 38c8298b05420da7963fbd8df3b65278d9c8975e.roa (raw, json)
Hash identifier: wtTR2y6g1HcA5oUUOztt193dCst9qIqNYCL5o9/HvxA=
Subject key identifier: 8A:72:A0:2B:62:40:71:D1:46:16:76:34:C9:1E:3D:19:F2:F2:76:2E
Certificate issuer: /CN=4d6514d89948e6d41988b60c1228765a24fd7536
Certificate serial: 232BC3
Authority key identifier: BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/38c8298b05420da7963fbd8df3b65278d9c8975e.roa
Signing time: Thu 31 Aug 2023 13:53:31 +0000
ROA not before: Wed 30 Aug 2023 13:53:31 +0000
ROA not after: Sun 31 Aug 2025 13:53:31 +0000
asID: 263242
IP address blocks: 200.12.250.0/24 maxlen: 24
200.12.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304963 (0x232bc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6514d89948e6d41988b60c1228765a24fd7536
Validity
Not Before: Aug 30 13:53:31 2023 GMT
Not After : Aug 31 13:53:31 2025 GMT
Subject: CN=38c8298b05420da7963fbd8df3b65278d9c8975e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:bb:10:74:80:ec:d2:b2:b3:d4:1b:2d:86:
68:68:aa:20:da:31:3a:d1:dd:c5:3f:c4:ed:ce:f9:
00:5b:2b:7c:d4:30:51:63:dd:93:0a:6b:c3:22:a6:
60:e2:f6:0b:56:89:11:fc:60:26:7b:51:53:60:4a:
e2:ff:94:9c:6b:59:6d:30:87:04:63:1f:32:55:73:
07:04:68:f3:99:76:bf:3b:eb:32:e3:4e:0f:6f:7b:
8a:f2:78:e4:df:83:09:ef:96:ac:5b:0c:40:e2:1d:
27:e5:dc:8d:8a:b3:66:08:c9:01:0c:19:e3:f9:61:
2d:53:80:0d:dd:da:b8:7c:5e:a0:57:17:30:5d:04:
c0:d2:8d:f4:6d:f3:0f:f2:e8:80:b9:2b:6b:c7:64:
38:62:70:db:38:f7:87:ce:48:09:65:41:d0:dc:71:
d9:6e:28:ab:4a:06:22:a3:30:78:84:21:5c:b2:60:
6c:50:76:6d:8f:48:ce:a7:22:18:ce:2f:ee:d3:7d:
c9:53:86:ee:ba:e1:d0:ff:30:fe:b5:cb:ba:9f:54:
8b:c3:64:3e:55:66:2b:7d:59:ef:3e:20:c1:5e:62:
0a:67:d3:ac:cf:bd:ae:8c:fd:40:a7:52:43:93:72:
dc:22:d6:50:bd:93:77:d0:2b:31:1d:24:2c:97:4a:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:72:A0:2B:62:40:71:D1:46:16:76:34:C9:1E:3D:19:F2:F2:76:2E
X509v3 Authority Key Identifier:
keyid:BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/38c8298b05420da7963fbd8df3b65278d9c8975e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.250.0/24
200.12.252.0/24
Signature Algorithm: sha256WithRSAEncryption
63:50:d2:ab:ce:09:e6:a4:ea:0b:c6:90:c9:f4:b0:39:25:06:
3f:71:2c:fe:e9:fa:f7:6a:28:61:92:45:de:00:27:85:a6:04:
0e:09:00:df:54:e5:2b:bf:f5:2e:cc:f3:b3:66:69:6d:63:da:
de:af:04:9c:1f:97:f2:81:74:8e:96:58:da:6f:f2:c6:34:d0:
fe:9b:e4:9d:f9:d3:a2:c5:e0:a4:f0:26:b0:91:44:eb:48:7e:
3d:4e:4d:0e:8b:c2:88:21:26:6e:a5:1a:02:9f:2b:ea:68:62:
43:a3:7c:f2:86:ea:b6:64:11:26:64:ce:78:9d:6d:28:52:ef:
42:a3:98:24:dd:52:cb:05:3c:da:1b:84:5a:ed:9d:ae:84:85:
6c:dc:6b:a2:2b:29:2d:49:f3:c7:c2:1a:8c:54:ac:22:2e:eb:
fa:88:ed:3c:57:43:25:0e:19:15:3f:e1:27:df:b8:7a:39:6d:
5e:18:21:23:24:9c:02:2a:12:66:6d:dd:1c:76:67:07:40:0e:
53:ca:dd:58:da:08:cb:34:ab:cc:5d:8e:9f:3b:d3:90:b2:a9:
e0:7e:90:e3:98:1b:d7:2b:a7:bf:83:44:c8:b1:5f:07:14:d7:
fb:f6:65:c7:a5:d2:fe:51:27:7c:9f:32:5c:de:9a:ce:5d:69:
70:6c:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org