Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/50f790df086cc4ce0b18ee9c4984fe62e96cc6a0.roa
File: 50f790df086cc4ce0b18ee9c4984fe62e96cc6a0.roa (raw, json)
Hash identifier: KRE9/Qx+naZqgYxq1ABaorpRO9xKNvNnYfg2Sb+s6Z4=
Subject key identifier: BF:3C:C9:13:F1:58:5C:8A:8C:83:39:44:DC:0F:A6:A5:E4:87:AE:C6
Certificate issuer: /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial: 028247
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/50f790df086cc4ce0b18ee9c4984fe62e96cc6a0.roa
Signing time: Tue 11 Jul 2023 17:44:37 +0000
ROA not before: Mon 10 Jul 2023 17:44:37 +0000
ROA not after: Fri 11 Jul 2025 17:44:37 +0000
asID: 16629
IP address blocks: 200.42.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164423 (0x28247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
Validity
Not Before: Jul 10 17:44:37 2023 GMT
Not After : Jul 11 17:44:37 2025 GMT
Subject: CN=50f790df086cc4ce0b18ee9c4984fe62e96cc6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:98:b8:fb:2e:38:de:f2:e4:6c:80:eb:e5:
23:6f:b5:64:b4:85:ee:09:f3:f4:8d:a2:af:ae:4f:
ce:07:db:66:ae:e1:22:20:5f:dc:1a:d2:e5:f0:03:
f9:ca:c1:f0:e5:ac:7c:e4:6e:1c:2b:1c:24:68:75:
ca:41:53:12:79:11:97:de:cc:1f:be:0c:65:81:9c:
c4:45:64:aa:d6:91:91:a3:81:68:1e:ae:ee:04:a2:
0d:68:9d:72:07:b8:c0:bd:3e:02:26:8d:50:86:64:
dc:11:42:b6:65:c9:c5:ca:0d:17:6e:9d:de:0d:ce:
ec:99:c4:08:3b:03:ed:57:98:1e:e0:b6:ae:a9:69:
af:14:ba:cd:76:3e:83:05:b1:a5:30:b9:25:f1:db:
d5:ab:a8:42:2d:44:27:14:f3:48:c5:fa:0b:73:23:
23:76:db:bb:86:68:37:b6:37:95:1a:eb:ef:31:c8:
97:11:af:00:9b:8d:23:db:5a:80:9e:0a:2f:7d:e2:
ca:03:96:92:05:d5:64:83:a0:27:0d:6b:32:1d:91:
f4:45:01:e4:4e:eb:11:15:f6:f5:9b:58:4b:54:aa:
af:56:ad:87:5f:4d:67:5b:33:a0:fa:bb:b8:ef:3c:
8d:01:33:38:2d:0d:12:b4:6c:99:ab:a2:4d:14:29:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3C:C9:13:F1:58:5C:8A:8C:83:39:44:DC:0F:A6:A5:E4:87:AE:C6
X509v3 Authority Key Identifier:
keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/50f790df086cc4ce0b18ee9c4984fe62e96cc6a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.42.160.0/21
Signature Algorithm: sha256WithRSAEncryption
d8:5a:2c:99:d9:61:c3:c1:49:4d:09:09:ac:45:4f:2c:ee:b6:
63:e3:f6:a2:68:21:73:9b:25:df:ca:7e:bc:d7:fa:19:dc:23:
33:0f:c2:6c:aa:8d:fd:96:e4:28:e0:1d:7d:5f:af:d9:37:4d:
ad:bd:5e:79:bb:1f:ea:83:d2:55:8a:78:a6:c1:ca:38:f6:98:
96:27:da:cf:da:d0:b2:0a:ac:15:a6:27:e7:39:17:02:fd:d0:
96:ed:5c:a2:b1:ae:39:0b:a0:f7:42:d3:13:97:16:c1:5b:9c:
74:f1:13:82:63:fc:25:26:c0:2d:f2:17:a0:a9:5a:4b:d7:1a:
db:96:9a:d8:47:b2:e1:3c:bc:ad:02:5e:0c:ad:1c:cc:0d:9b:
1c:77:11:75:9f:26:ed:80:62:35:4d:a4:b9:7e:93:06:79:6b:
e5:1d:c8:af:fd:1a:1d:7b:b6:d8:05:53:5b:1d:5b:2a:c5:76:
9d:74:d0:fb:97:d3:49:85:9a:63:bf:d9:2c:9b:2e:d2:6a:f2:
bc:12:8c:a3:ec:06:57:69:1b:84:fd:4e:36:22:5e:8c:e4:66:
8b:1a:be:50:5c:1b:06:67:91:50:d5:40:e3:f0:22:70:ef:d9:
be:24:3b:9e:74:d6:88:06:39:79:60:33:57:9e:73:b4:5c:7c:
04:dd:a9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org