Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/d2bdfb535f062e456626dbb153165188d0b3b5cd.roa
File: d2bdfb535f062e456626dbb153165188d0b3b5cd.roa (raw, json)
Hash identifier: 7h8MlhYgQ98M1/Fbyc0rJejfbwyQrkfsi39QccdxnvU=
Subject key identifier: A7:D6:35:F3:99:D1:26:A8:34:B8:E6:23:A1:20:6F:3C:B8:11:50:25
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 27AE81
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/d2bdfb535f062e456626dbb153165188d0b3b5cd.roa
Signing time: Tue 30 Jan 2024 04:02:47 +0000
ROA not before: Tue 30 Jan 2024 04:02:39 +0000
ROA not after: Fri 30 Jan 2026 04:02:39 +0000
asID: 19244
IP address blocks: 200.27.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2600577 (0x27ae81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: Jan 30 04:02:39 2024 GMT
Not After : Jan 30 04:02:39 2026 GMT
Subject: CN=d2bdfb535f062e456626dbb153165188d0b3b5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:f3:f2:43:63:11:65:c1:f4:e8:24:e1:b6:
bc:89:83:04:7f:02:2e:8f:27:12:8c:ba:db:a5:11:
9c:97:4e:50:65:3b:86:a4:df:15:9b:36:30:f3:e3:
5a:13:b3:97:de:86:8e:e6:00:94:b4:07:ea:5b:8d:
2b:4a:99:c5:c6:43:ff:86:54:e0:fa:83:28:3e:67:
5f:7f:20:b5:bf:65:34:e2:d9:ef:a3:15:88:64:85:
1e:e9:89:38:a8:33:e7:a3:4b:a9:97:ef:cb:76:fa:
fe:7e:03:10:fa:15:9b:cb:19:06:87:5c:6d:d2:10:
0d:4b:41:72:86:14:f0:06:03:c1:88:3b:8f:11:94:
54:ea:ad:16:e9:db:98:d8:93:9e:37:32:db:07:a1:
20:72:a9:af:1c:c3:c9:aa:91:a2:17:a8:fc:a8:9d:
0a:7a:72:19:04:22:11:86:b6:06:91:0d:91:11:fa:
e1:92:51:d7:8a:e8:7c:8f:10:f7:fe:50:9c:2a:75:
99:24:ee:61:ad:92:29:c6:1e:95:12:85:8d:d6:7c:
aa:ea:8a:5c:e1:57:97:7f:64:e1:29:aa:21:24:8b:
9d:c8:d2:63:2a:ab:ba:1e:2f:f6:04:d4:a2:56:99:
87:7c:49:ef:f4:9a:b3:71:94:e3:fb:16:63:97:a3:
c2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:35:F3:99:D1:26:A8:34:B8:E6:23:A1:20:6F:3C:B8:11:50:25
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/d2bdfb535f062e456626dbb153165188d0b3b5cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.27.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:aa:ae:76:4c:28:fa:27:89:86:af:c0:c4:e1:73:fd:67:25:
52:5e:64:f9:b2:ba:26:f7:c7:0f:b9:4e:03:45:80:bb:98:61:
d1:74:37:76:64:d2:d2:62:e0:05:35:11:3f:51:33:69:89:de:
c9:85:e0:74:6c:48:5d:da:91:cf:be:b5:d8:05:9b:be:bd:f9:
cd:2b:a5:02:79:bd:95:1b:7c:59:a5:f6:31:52:5d:7d:7b:d4:
37:4d:e2:2e:7b:ad:e1:18:ae:b5:2e:87:3b:25:e9:6f:a4:1b:
f9:f6:ab:de:b2:51:c4:99:db:a0:8c:b0:fd:3c:67:55:f3:ef:
bc:9b:09:c6:1b:50:3f:d7:53:6a:d9:8f:26:d5:20:83:59:b8:
7b:6f:ab:19:37:e5:d4:6e:07:12:3b:c0:72:ca:4d:fb:9e:d8:
db:9a:26:fc:80:d1:1d:e8:d0:af:ae:f6:d6:ac:fe:43:01:0d:
94:26:e5:c9:ce:33:c2:f5:50:58:71:b8:5c:b5:99:28:44:08:
4a:80:c5:1a:4d:ec:68:ed:50:4f:e4:f4:31:4b:7c:09:33:d4:
c8:5f:70:49:b6:8b:c2:c4:51:b9:15:5c:bf:25:22:ca:66:b5:
0f:f6:11:7c:e3:06:49:d6:12:9e:b6:cf:5f:87:55:00:db:76:
b8:2d:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org