Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/0a965c7dd997d463513d1ac954f76f71eef3d6a6.roa
File: 0a965c7dd997d463513d1ac954f76f71eef3d6a6.roa (raw, json)
Hash identifier: kcB0OZCDvlsdczULNUfD/H1sqifx9ZF9SbyuTh8Umfc=
Subject key identifier: 81:6A:D1:81:BC:55:43:05:54:64:A8:45:CA:69:74:03:D7:6D:D4:10
Certificate issuer: /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial: 03D6F6
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/0a965c7dd997d463513d1ac954f76f71eef3d6a6.roa
Signing time: Thu 03 Aug 2023 16:59:10 +0000
ROA not before: Wed 02 Aug 2023 16:59:10 +0000
ROA not after: Sun 03 Aug 2025 16:59:10 +0000
asID: 7418
IP address blocks: 200.90.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251638 (0x3d6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
Validity
Not Before: Aug 2 16:59:10 2023 GMT
Not After : Aug 3 16:59:10 2025 GMT
Subject: CN=0a965c7dd997d463513d1ac954f76f71eef3d6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:39:a2:eb:7f:4d:c9:52:b3:38:58:ad:19:e1:
3f:52:c8:03:3f:70:89:7a:19:d2:4d:f7:c3:72:ea:
58:c5:97:33:86:f7:a1:b7:a0:59:88:ea:cd:8b:db:
5e:4f:3c:6a:ab:0f:b0:2c:65:26:72:ad:20:da:a2:
47:a4:2f:59:ae:78:43:b0:39:02:f1:bc:22:ea:37:
cc:c3:90:cd:3a:af:1d:7b:56:0a:66:46:6b:3f:5c:
92:f3:03:13:4a:aa:c7:27:5a:71:f2:4e:12:05:f8:
12:78:c3:62:19:a9:4c:80:9e:5c:37:63:53:15:f9:
1d:65:01:37:77:86:98:50:41:04:1c:f2:46:f8:78:
08:57:21:e4:de:29:5c:79:bc:20:db:23:be:36:52:
a2:74:d1:cc:54:a5:3b:a1:c7:80:cc:ba:4d:a7:96:
41:2f:45:55:e0:c5:e9:61:46:3e:d3:ab:0f:e6:b1:
5b:8e:28:64:90:d8:c3:92:e5:d0:2a:fa:27:71:9f:
e8:fa:2b:da:65:dc:a4:3d:05:92:71:a8:be:86:ba:
71:d9:8e:06:32:06:ed:13:3c:fb:23:5f:fc:10:9c:
54:ff:34:ee:9f:86:7d:3f:4a:63:75:f1:75:85:c8:
98:f1:0f:f6:a6:19:c6:a0:db:bb:61:54:0c:18:19:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6A:D1:81:BC:55:43:05:54:64:A8:45:CA:69:74:03:D7:6D:D4:10
X509v3 Authority Key Identifier:
keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/0a965c7dd997d463513d1ac954f76f71eef3d6a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.90.192.0/20
Signature Algorithm: sha256WithRSAEncryption
44:72:e2:52:2e:0e:e9:c5:01:12:6b:b4:1f:cb:3e:2d:5a:b2:
97:6e:26:77:ea:91:ef:3b:27:f2:49:66:d2:d7:e4:9c:28:e6:
e6:4e:48:11:3c:db:e0:2b:f1:1c:e1:fc:c3:66:05:43:90:ef:
7c:d7:a5:d6:9e:95:68:1a:2e:73:4b:70:24:a8:0e:d0:50:a1:
ba:fc:9d:54:a4:a5:7f:3f:a7:d0:93:84:35:73:70:a4:f5:b8:
de:cb:28:92:78:94:9d:4d:a1:4d:02:8c:1f:90:39:2d:31:a8:
45:44:d8:0f:81:0b:7d:dc:73:51:5d:28:47:99:eb:e3:05:35:
ce:6f:21:b7:98:b9:d3:5e:0a:96:cc:16:25:4f:85:19:29:8c:
f8:b0:0f:fe:e6:8d:9d:65:4c:c4:56:f3:6f:96:4c:4c:0a:76:
0a:ba:eb:d6:cc:ad:82:52:67:42:fe:89:6f:d8:6f:20:0c:9e:
a5:9c:95:1a:b1:59:b2:5c:46:30:84:95:f1:6f:75:20:d8:da:
11:c8:60:80:b4:18:df:06:b9:e6:91:82:1b:71:d9:09:7e:36:
3c:9b:01:e9:c1:7a:59:0c:33:68:23:07:b4:11:e4:e6:28:e3:
25:7a:ff:b7:9a:fd:94:1e:35:12:6a:40:b9:c3:54:c7:60:27:
6a:5f:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org