Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/37e1d44244a3d6d05c3a63b985975088e1eb10ff.roa
File: 37e1d44244a3d6d05c3a63b985975088e1eb10ff.roa (raw, json)
Hash identifier: 9Rcy2Q8MU5fhsZu3PX15lecDWG4z5yhOVCMELcWNJKk=
Subject key identifier: 94:83:C4:1F:AF:D4:68:30:E5:16:F2:69:05:37:21:06:FA:24:3D:A8
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 225594
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/37e1d44244a3d6d05c3a63b985975088e1eb10ff.roa
Signing time: Wed 05 Jul 2023 08:30:01 +0000
ROA not before: Tue 04 Jul 2023 08:30:01 +0000
ROA not after: Thu 03 Jul 2025 08:30:01 +0000
asID: 19244
IP address blocks: 200.27.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250132 (0x225594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: Jul 4 08:30:01 2023 GMT
Not After : Jul 3 08:30:01 2025 GMT
Subject: CN=37e1d44244a3d6d05c3a63b985975088e1eb10ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:64:ef:17:81:68:4a:0a:b9:31:bd:1e:44:
c2:1f:2a:d3:6b:c9:47:14:a1:d9:60:75:6c:39:b4:
bc:bd:28:87:e8:25:77:ee:e2:94:a7:2e:d7:9b:0a:
35:97:bf:50:6d:41:60:30:e4:6d:3b:c9:f4:ca:0d:
a0:03:ed:7c:37:f8:30:10:c7:54:38:2e:53:6f:49:
c3:ae:a2:8d:e3:37:df:e5:a1:90:6d:42:24:1a:24:
22:cd:4d:63:27:7b:60:9d:25:a7:a4:c6:f4:90:2c:
24:0b:47:47:b2:b5:35:57:b9:af:2d:9a:86:63:52:
7e:8b:27:7f:a4:ea:2b:02:0b:72:1a:69:64:4b:9f:
7b:58:3e:6d:52:7a:b7:03:0e:a2:e4:c5:f1:02:63:
31:9f:63:11:78:7f:15:dc:53:53:9f:5d:b4:ec:e0:
b4:00:e0:12:fb:af:ea:26:0a:ce:bb:9d:15:d3:ca:
fe:29:c4:ee:6d:73:3d:39:83:7e:ea:86:d9:6a:77:
79:70:2f:02:f1:65:39:c0:01:57:3c:a5:eb:08:98:
91:f4:60:45:c9:09:a5:90:6b:2e:bc:bc:ae:84:6e:
5e:c7:4d:9a:10:cf:c4:e4:70:10:3f:3a:e3:79:f9:
aa:54:9b:92:f0:54:46:3a:4b:c1:bc:a6:7b:61:9c:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:83:C4:1F:AF:D4:68:30:E5:16:F2:69:05:37:21:06:FA:24:3D:A8
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/37e1d44244a3d6d05c3a63b985975088e1eb10ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.27.11.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b6:c1:ee:60:ae:02:1d:ea:43:e0:c7:99:53:96:86:80:f4:
ab:5c:4a:7f:3b:82:0c:a3:51:16:f2:3f:52:ca:ac:f4:13:bd:
87:a5:ef:98:ce:fa:1b:be:40:08:37:ae:f0:78:0c:28:2f:2c:
1d:a6:3f:70:7b:c9:9f:b5:ce:ae:00:bc:1d:e7:fc:ff:6c:74:
16:5f:d1:88:4f:a4:72:30:7e:03:50:38:82:da:b7:e6:f9:e3:
60:fa:ee:03:8e:7f:b3:6b:20:83:4a:6e:48:f8:8d:96:03:fd:
cb:11:64:34:cb:3e:95:f7:4b:84:b5:3a:1e:8d:27:97:24:2f:
52:5d:52:a5:a9:7d:ec:c6:4c:3d:5e:46:15:7d:87:0b:1a:fd:
d7:38:92:3f:3b:3b:2a:d3:0a:ba:6a:87:18:1c:d9:4d:ef:0f:
70:13:2f:a5:36:98:06:0a:b8:8e:3e:7c:92:76:54:ac:42:7f:
ef:09:1d:43:a3:39:b1:55:65:a4:06:e5:ec:1f:f4:9d:cc:3f:
71:ce:a6:2b:6b:e3:0b:be:19:4b:ed:20:0f:fd:59:5d:a5:46:
32:b2:e2:fc:93:13:cf:04:20:70:97:8a:98:85:74:79:38:29:
2b:04:23:33:1a:92:f5:3c:f0:be:f3:8b:14:e2:67:e3:bc:d8:
8d:26:46:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org