Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a162611a8e8ed278dd7603f510b26911ace09f03.roa
File: a162611a8e8ed278dd7603f510b26911ace09f03.roa (raw, json)
Hash identifier: ATiqycWrK+HZdxOP80mP4pktsupwy7FXH8VivbosHkU=
Subject key identifier: 26:06:B7:A3:56:7B:DC:CC:9D:1C:C6:6A:18:2F:C0:9A:3E:8F:4D:97
Certificate issuer: /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial: 02C86C
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a162611a8e8ed278dd7603f510b26911ace09f03.roa
Signing time: Wed 12 Jul 2023 15:29:14 +0000
ROA not before: Tue 11 Jul 2023 15:29:14 +0000
ROA not after: Sat 12 Jul 2025 15:29:14 +0000
asID: 16629
IP address blocks: 200.113.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182380 (0x2c86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
Validity
Not Before: Jul 11 15:29:14 2023 GMT
Not After : Jul 12 15:29:14 2025 GMT
Subject: CN=a162611a8e8ed278dd7603f510b26911ace09f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:e4:48:ca:e0:0f:02:1f:ce:83:d8:d4:52:
d6:fa:cc:05:35:e5:8b:63:12:b0:ea:75:0a:c1:44:
ab:93:3a:e4:fa:a4:8b:9d:1a:b6:03:13:86:cb:69:
c4:5b:87:6e:49:22:ef:b4:58:f9:d7:d7:62:00:ac:
fe:a6:dc:fe:5c:bc:1c:1f:8c:c6:df:74:3c:01:80:
3d:58:28:ad:7b:c2:e7:fe:08:58:03:b9:41:db:de:
1c:e0:af:e3:90:5f:16:22:fd:19:01:77:a8:d1:d5:
b0:23:66:ad:e4:ba:b0:01:08:40:64:64:c8:bd:99:
2a:26:38:00:f9:e0:b2:62:c8:8b:ea:72:65:a0:2a:
bd:05:3f:76:f0:82:e8:79:5c:a9:fe:a2:38:ca:91:
32:c5:7e:68:61:48:6f:19:b0:ff:79:85:a0:7f:35:
32:ce:5f:1a:2c:ef:8a:f8:7c:36:28:88:e9:f1:cb:
ec:f4:7e:c0:73:7d:7a:36:17:0a:40:de:55:59:86:
95:45:d1:e9:0d:cb:84:01:4e:98:67:b5:e3:ba:99:
3b:56:6b:5d:39:20:a6:58:08:6c:ac:33:83:91:e6:
d9:80:18:a9:53:9f:a6:ab:1d:96:73:3f:9a:3a:e0:
6c:f6:88:bd:7c:6b:ad:e1:68:49:15:cd:96:80:ac:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:B7:A3:56:7B:DC:CC:9D:1C:C6:6A:18:2F:C0:9A:3E:8F:4D:97
X509v3 Authority Key Identifier:
keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a162611a8e8ed278dd7603f510b26911ace09f03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.113.32.0/20
Signature Algorithm: sha256WithRSAEncryption
af:a5:e0:bc:ae:5c:d4:da:c8:e4:54:60:22:3b:0c:53:b1:3e:
41:5d:7b:2a:5d:07:44:02:e5:6f:8a:da:58:4f:13:08:ed:3b:
05:c2:79:42:03:03:8e:8c:9f:b0:85:f9:7e:7b:9b:9a:fd:9b:
74:83:37:5d:5d:6b:82:cf:31:bb:4f:78:77:3c:b8:6e:1d:5d:
b1:02:8d:1c:b4:47:f3:82:48:e5:d9:0c:f9:24:c8:ca:cd:d1:
fd:2a:96:c5:a8:29:50:f3:73:20:90:ef:db:97:04:89:1d:ab:
89:a2:a8:0f:bb:ce:da:6a:63:ec:60:7f:19:3e:a5:fd:e9:20:
58:78:2f:f4:ab:3c:66:31:51:58:75:02:c5:85:83:6e:17:72:
81:86:d4:58:6c:83:2b:e4:dc:47:bc:54:45:3f:f4:b7:12:1d:
b5:9e:11:60:0a:44:e9:18:74:1b:24:d1:04:3b:6a:7f:8b:d3:
d3:6d:5d:34:0c:8d:61:85:e2:26:ba:10:37:85:cd:7a:8a:01:
b9:43:ca:61:a1:dd:71:36:27:26:77:ae:c1:8d:54:8b:6f:20:
69:70:a6:66:8e:b4:37:54:92:44:db:8f:4f:3b:3b:89:56:9d:
31:89:9e:58:b0:5f:47:ec:90:02:dd:ed:5a:71:ee:66:9a:24:
62:c2:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org