Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/f75f4f42b7eefbe0d8f00f76570d2bf15f38714c.roa
File: f75f4f42b7eefbe0d8f00f76570d2bf15f38714c.roa (raw, json)
Hash identifier: zYtPQHiv5se4Vt/7n+9vhrHkKwOV8FG0f7sMEUp+V3Y=
Subject key identifier: 72:9A:0A:4C:AE:35:04:62:55:75:89:C9:1E:4E:F0:7F:30:74:6A:9A
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 27A7E7
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/f75f4f42b7eefbe0d8f00f76570d2bf15f38714c.roa
Signing time: Tue 30 Jan 2024 04:02:46 +0000
ROA not before: Tue 30 Jan 2024 04:02:39 +0000
ROA not after: Fri 30 Jan 2026 04:02:39 +0000
asID: 12252
IP address blocks: 200.14.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2598887 (0x27a7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: Jan 30 04:02:39 2024 GMT
Not After : Jan 30 04:02:39 2026 GMT
Subject: CN=f75f4f42b7eefbe0d8f00f76570d2bf15f38714c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:18:7d:ba:6e:83:01:c0:31:e6:80:a1:22:
e1:8e:2d:ed:af:0a:41:b9:5e:c1:a6:db:41:3f:83:
1e:1b:be:bf:16:a0:22:4b:49:12:1f:d3:4e:d1:11:
98:25:b8:06:97:e7:9f:54:d7:f4:93:8b:39:8d:95:
86:22:64:cb:97:66:5a:49:31:51:94:86:22:db:f0:
bf:29:75:3b:8f:eb:fe:6a:fd:f9:2e:b9:c3:14:48:
0e:28:2c:eb:69:b0:2f:f9:09:fa:28:04:b0:32:e3:
2e:6d:b1:1e:c2:d0:4d:b4:21:e1:6d:87:95:91:fc:
fc:3a:e7:88:ee:c2:ac:47:49:e7:eb:53:a7:53:49:
85:c7:bd:07:73:1b:a7:bf:3f:c3:d1:0a:8e:c1:ac:
a4:36:ee:e9:89:21:01:8e:9a:ca:eb:22:6b:7a:27:
b4:26:b7:c4:51:b7:83:48:f5:22:60:52:69:94:62:
3c:34:ce:d2:99:e9:0e:0d:8e:20:68:8e:ee:be:cb:
85:db:80:dc:ff:eb:b4:28:3c:4d:6a:5b:ed:9c:8f:
0e:70:ce:f1:0d:43:ad:f9:10:09:1f:fd:16:78:1b:
53:c5:dd:70:ee:1c:19:c2:bb:1e:43:b6:0b:bc:fd:
d0:8d:a9:92:b3:6d:f4:5c:9d:37:63:6f:47:4c:df:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9A:0A:4C:AE:35:04:62:55:75:89:C9:1E:4E:F0:7F:30:74:6A:9A
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/f75f4f42b7eefbe0d8f00f76570d2bf15f38714c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.240.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:0a:ee:21:29:e3:31:08:34:85:ef:9e:9c:67:ec:ee:b9:eb:
ae:a3:15:8b:ba:0b:51:aa:7d:6b:2f:b3:41:63:9e:70:1b:d4:
e0:e6:33:5c:bb:80:b1:1d:01:c7:77:05:5d:b5:52:f2:5a:f8:
32:aa:4d:8e:18:a1:1f:ee:37:62:6e:fc:a2:04:2d:48:ae:b4:
d9:ef:90:44:e7:f4:69:b3:db:a7:70:53:14:06:27:ac:3f:8f:
8f:5a:a3:36:32:ea:c8:46:6e:c4:c4:fe:ab:e7:50:11:a4:f0:
a1:00:b1:42:31:63:df:85:0f:b6:57:fb:ae:f2:a8:e9:76:c8:
92:74:97:c1:a7:12:90:0d:cd:97:31:74:d5:36:b1:06:56:98:
1a:bc:09:b9:3f:9b:45:91:7a:42:69:a7:ab:a6:57:3b:47:7f:
19:74:9b:92:20:4a:17:42:0d:c9:00:b0:e6:a0:77:5a:87:3c:
88:0a:80:62:60:ca:ed:88:49:67:12:8c:8a:68:a9:5e:6f:64:
93:bc:43:2d:5f:0a:00:bb:61:8f:24:13:69:7b:a5:ef:d8:39:
f9:06:6f:32:d0:da:eb:40:73:1d:bc:f5:e3:7c:97:f3:c7:e9:
e7:b5:a5:dd:9b:77:f5:e3:11:64:4f:9a:7f:47:62:d3:68:82:
db:d5:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org