Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/a0ae99724e49f50ff83c58694b2bb5a521085308.roa
File: a0ae99724e49f50ff83c58694b2bb5a521085308.roa (raw, json)
Hash identifier: L7nWVLPuTgfwfA8/2Ng8DtcyIFZnH8Ly6TyHz0CT+iA=
Subject key identifier: EE:FC:E5:90:3E:96:01:C4:93:21:6A:FD:9F:22:42:87:CD:00:4C:70
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 27983A
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/a0ae99724e49f50ff83c58694b2bb5a521085308.roa
Signing time: Tue 30 Jan 2024 04:02:41 +0000
ROA not before: Tue 30 Jan 2024 04:02:39 +0000
ROA not after: Fri 30 Jan 2026 04:02:39 +0000
asID: 25718
IP address blocks: 200.27.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2594874 (0x27983a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: Jan 30 04:02:39 2024 GMT
Not After : Jan 30 04:02:39 2026 GMT
Subject: CN=a0ae99724e49f50ff83c58694b2bb5a521085308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:3b:05:98:70:e5:73:fb:76:8d:b5:97:f7:
cd:03:29:66:21:35:dc:4b:a2:b7:0e:e5:3f:af:a5:
c7:62:16:b5:e9:1a:34:ed:a8:e2:ff:3a:46:c8:5d:
2b:85:cd:25:91:71:03:1f:fe:84:17:61:1f:b5:3d:
2d:81:16:ff:99:ae:18:d9:e6:4d:35:ff:f6:e7:b8:
dc:8a:db:3d:f9:a3:30:81:07:32:1b:6c:a2:5a:6e:
fb:38:12:99:7a:a8:0e:b9:a8:59:21:91:67:3b:ce:
f2:5c:c5:0a:26:d2:5d:45:e4:dc:43:45:ed:45:86:
f9:c8:e0:f8:6f:d2:03:a4:aa:8a:4d:8d:b4:72:08:
72:1f:d2:47:77:8f:33:0a:0e:e1:1f:66:10:82:da:
e0:ec:37:57:f9:e3:5b:3a:62:5d:7a:59:03:4c:0e:
d5:3e:42:da:63:85:63:87:7d:01:ac:53:08:e7:2e:
0f:6a:1f:19:55:38:74:28:4c:75:f7:a8:c1:6e:8f:
e0:19:f5:e8:c4:0e:d2:ab:83:81:c1:dd:09:8c:e9:
6b:a1:00:e1:e9:54:ea:f5:b4:58:1e:98:03:f8:51:
a1:54:fd:37:e9:c5:58:11:ea:8c:25:25:33:f7:0f:
bd:79:81:ed:e4:69:06:52:79:a1:3d:64:36:9b:c0:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:E5:90:3E:96:01:C4:93:21:6A:FD:9F:22:42:87:CD:00:4C:70
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/a0ae99724e49f50ff83c58694b2bb5a521085308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.27.156.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1d:b5:e6:78:6d:82:25:67:65:3f:3e:34:54:0c:a9:c7:d9:
69:06:cd:6d:b4:12:b0:cc:4a:f5:6c:6e:64:7d:13:92:70:57:
1b:07:f6:c2:e0:85:54:1b:f0:15:d4:f2:b8:ad:6e:4b:3b:20:
51:07:8d:63:5c:9b:3d:16:c1:ec:f8:42:5f:0a:2a:1f:4b:94:
3e:ee:23:d8:6a:83:05:33:9a:49:9b:e6:9b:60:a8:44:b5:68:
32:49:6f:c0:62:b7:36:b1:c9:19:aa:c3:3f:01:ca:d3:4e:f8:
eb:e3:47:dd:3a:3b:38:18:ee:75:fe:14:51:66:86:ea:31:1a:
7e:5b:93:11:63:2d:39:a1:08:d5:ff:1e:e7:73:c5:4c:8a:8b:
23:bb:92:35:6a:fd:34:77:ed:fc:b1:4d:75:e6:3b:4c:89:63:
99:b4:2e:2e:18:6d:d3:1d:f5:44:df:56:97:ad:28:41:07:03:
11:16:dc:da:95:e3:65:c4:41:1b:92:cc:f2:70:b9:1e:19:de:
22:da:3b:0e:6b:22:55:03:dd:2d:10:8e:d7:ec:e2:d1:df:85:
d1:6d:d8:47:7c:0a:69:92:71:9b:61:db:97:31:8c:23:2b:85:
41:e0:49:17:dd:98:b9:86:2a:93:60:a4:7c:3f:01:2d:e5:06:
a1:0f:0f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org