Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/2b9db47c2036c6bcc1c3ff878a164ba3ba69baf1.roa
File: 2b9db47c2036c6bcc1c3ff878a164ba3ba69baf1.roa (raw, json)
Hash identifier: W1myS5TcZotHhDO5WeaJLoF6B+xsB+QaWXLqGPJzhS8=
Subject key identifier: 7B:39:80:EC:07:3F:D5:26:F0:49:57:E7:0C:8F:20:F5:CC:56:F3:AA
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 0EA501
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/2b9db47c2036c6bcc1c3ff878a164ba3ba69baf1.roa
Signing time: Tue 11 May 2021 20:56:22 +0000
ROA not before: Tue 11 May 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 264724
IP address blocks: 200.27.72.0/24 maxlen: 24
200.27.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959745 (0xea501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: May 11 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=2b9db47c2036c6bcc1c3ff878a164ba3ba69baf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:9c:47:2e:54:1d:13:66:7c:eb:12:0f:d8:
91:30:1b:cf:c4:17:e6:3a:be:b4:a1:ac:e1:0b:c5:
06:d0:3e:af:02:8d:b6:e4:dd:d1:51:6e:c0:8c:9c:
e3:d8:4e:f6:7a:9c:1b:4b:01:54:8e:07:9d:70:82:
cf:9f:c3:21:9e:22:56:78:56:b7:3c:3e:8c:9d:d0:
97:36:49:1f:72:b7:de:8f:2d:9b:29:87:60:bc:65:
94:78:14:a7:9a:f7:98:3c:6f:07:81:4a:7a:e2:b7:
fe:b1:bc:59:a4:3c:33:9b:d8:6a:ef:77:b2:e0:fe:
69:bf:3e:91:bc:fd:97:a9:68:e9:19:a4:65:83:c0:
75:ee:0e:10:f4:1c:75:b6:60:ce:91:8e:11:54:f0:
bd:0d:72:fe:33:7d:88:8d:4b:c6:3a:2a:e6:29:30:
9f:94:1d:7b:6b:73:32:9b:bb:8d:63:da:3c:59:09:
4e:8e:f6:e7:d6:e3:05:ed:58:5f:1c:ee:a3:22:0e:
a6:5a:71:73:18:d3:51:60:8c:2e:ef:b2:1b:57:94:
0c:e6:c4:6d:61:e4:58:43:25:2c:63:81:60:30:88:
42:c8:dc:cf:44:cd:84:e5:a0:c9:16:ac:c7:c4:70:
1f:ca:d3:5c:d6:bb:fb:54:6c:13:b1:b0:8e:b0:7c:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:39:80:EC:07:3F:D5:26:F0:49:57:E7:0C:8F:20:F5:CC:56:F3:AA
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/2b9db47c2036c6bcc1c3ff878a164ba3ba69baf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.27.72.0/23
Signature Algorithm: sha256WithRSAEncryption
49:d4:fa:f6:c3:d3:d8:a8:5d:e8:2e:1b:88:11:b4:00:fb:fc:
2e:01:a5:38:46:69:b8:13:d4:33:4b:37:11:eb:8e:a2:97:9f:
b3:0f:58:1c:ab:15:64:d6:2d:1b:30:94:f0:35:54:8a:4a:a4:
da:c4:9e:a4:e4:51:2b:c9:00:b4:7a:89:b9:51:ae:ac:6a:46:
ca:6b:8b:7c:e9:6e:73:6d:40:d2:b5:45:89:42:ca:f7:e6:59:
91:f4:de:b3:73:62:e1:e1:92:94:78:3e:35:66:a4:2b:23:fb:
58:70:9c:d2:5c:d0:83:85:f0:54:57:0c:90:c3:4f:66:2e:06:
3d:d4:5f:1a:e4:34:28:9e:21:73:08:d5:80:6a:f8:da:38:14:
af:ba:c6:a9:dd:5f:ad:3b:39:6f:7b:0a:9a:21:35:25:b1:ef:
c9:cc:94:79:14:85:c0:1b:e6:bb:0b:23:b2:db:87:ad:73:85:
90:65:19:8e:27:06:be:e0:59:4d:7d:77:d8:bf:9e:b0:ff:11:
51:43:5f:c3:70:13:34:49:2e:5f:6e:1d:1e:30:f2:d7:88:c4:
50:5d:fb:d7:a1:e0:49:ef:5b:78:58:43:02:38:96:85:1a:c1:
a2:aa:ea:93:30:2e:b7:5e:62:c7:5d:4b:46:b9:21:75:f4:48:
8d:c7:6f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org