Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/2d08609b7dcaf85b5577def68f6ddae317d95a1f.roa
File: 2d08609b7dcaf85b5577def68f6ddae317d95a1f.roa (raw, json)
Hash identifier: UCK4v+zJv3+2kBudEG6NRBGO9HvFyTjSkEmIiqvIXMI=
Subject key identifier: FD:76:12:49:F6:F6:4A:7C:43:02:1E:FC:07:3B:BC:7E:31:DD:B9:78
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 20C7DA
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/2d08609b7dcaf85b5577def68f6ddae317d95a1f.roa
Signing time: Wed 10 May 2023 08:30:02 +0000
ROA not before: Tue 09 May 2023 08:30:02 +0000
ROA not after: Thu 08 May 2025 08:30:02 +0000
asID: 264724
IP address blocks: 200.27.72.0/24 maxlen: 24
200.27.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148314 (0x20c7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: May 9 08:30:02 2023 GMT
Not After : May 8 08:30:02 2025 GMT
Subject: CN=2d08609b7dcaf85b5577def68f6ddae317d95a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:d1:bf:07:cf:f8:cc:c2:1f:95:6c:fb:16:
96:45:51:a9:2b:f4:25:39:eb:63:fb:59:23:c0:83:
31:78:4c:07:37:c6:f9:a6:42:90:9d:4a:7e:7c:f3:
f5:11:9c:89:37:8e:18:fb:ad:9b:ff:94:8b:d3:a2:
55:fc:f5:cb:98:eb:58:65:b0:37:40:69:1d:2c:d4:
23:cf:32:01:ac:26:82:22:4d:a3:90:61:f7:84:36:
c2:ba:ea:64:c2:b8:19:07:aa:54:c6:1a:d0:73:f7:
b8:49:26:20:c2:06:e0:49:52:55:3d:f4:ff:37:02:
9d:e2:c5:99:74:16:43:e1:95:6c:53:6d:4c:77:1b:
84:01:1e:41:c4:aa:6b:94:6a:50:24:ff:24:12:a8:
2a:23:b8:c6:44:51:83:f1:08:9e:ec:50:38:d2:6b:
ca:4b:7b:e9:81:9d:e4:a8:b2:e3:5f:b2:ae:f1:24:
c4:35:e0:12:d6:c8:93:3f:a8:a7:9e:03:c1:30:a4:
34:51:16:84:fd:a1:db:88:86:88:99:a6:07:5e:63:
7d:1f:b7:cd:a3:e8:dc:cd:73:ac:a2:80:8d:2e:81:
cc:1c:ba:73:3e:69:fe:26:a2:7c:89:a3:21:06:5f:
54:fb:35:4b:f8:71:bb:8c:b6:72:9d:7a:ee:f3:ab:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:12:49:F6:F6:4A:7C:43:02:1E:FC:07:3B:BC:7E:31:DD:B9:78
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/2d08609b7dcaf85b5577def68f6ddae317d95a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.27.72.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:a3:2c:ee:7e:20:b0:21:9c:69:3f:0c:74:3d:34:f1:68:38:
a4:ee:af:17:9d:2b:d6:46:d4:17:ed:22:13:52:bc:94:a0:dc:
15:46:19:41:63:11:20:1d:95:04:ce:db:35:24:b9:38:3b:e3:
e0:0c:1e:85:b4:6c:9c:8c:30:ac:d2:6d:22:98:05:e5:2f:58:
39:c2:ae:40:20:a8:28:b3:a4:00:60:54:1f:2e:1e:8c:49:94:
4b:10:e4:71:e7:1c:32:70:23:22:c5:b9:96:bb:fd:2b:91:e3:
5a:86:e6:dd:b8:f0:d9:e5:07:ea:6d:af:ed:46:8c:aa:f5:27:
09:3e:14:7c:05:55:1e:35:cd:b3:79:31:34:2c:d8:a5:b0:20:
a0:1c:36:da:1d:d4:93:c5:42:f9:e1:e1:ff:ac:75:a6:27:b1:
03:a2:22:93:82:f1:a6:4e:92:66:32:8e:57:1c:d4:7f:c9:31:
8c:02:d0:7b:f6:4c:0e:8d:43:5b:ca:c1:4f:19:0e:cf:5d:5b:
c1:a8:7a:3a:3e:c2:2d:97:51:b0:ff:5e:b8:96:f8:79:ad:3a:
15:7c:80:ee:09:7f:2f:0d:2d:50:d1:cf:d6:0f:84:4d:d4:9c:
c2:49:7a:d2:a5:45:3d:5f:38:70:35:cd:d3:98:e9:9e:4a:2f:
5b:5c:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org