Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/3fbfb3e5f0870dd94677a99963c9a2dd38eac291.roa
File: 3fbfb3e5f0870dd94677a99963c9a2dd38eac291.roa (raw, json)
Hash identifier: 9Po4kgra9Ca+tEghZLJwDFEwdxzH1/6W02Chtb4u5w4=
Subject key identifier: 26:7A:C9:25:BB:5E:94:91:64:13:A9:BD:44:D0:57:BF:31:33:56:CA
Certificate issuer: /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial: 1DD237
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/3fbfb3e5f0870dd94677a99963c9a2dd38eac291.roa
Signing time: Thu 05 Jan 2023 20:18:04 +0000
ROA not before: Wed 04 Jan 2023 20:17:14 +0000
ROA not after: Sun 05 Jan 2025 20:17:14 +0000
asID: 26506
IP address blocks: 200.25.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1954359 (0x1dd237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Validity
Not Before: Jan 4 20:17:14 2023 GMT
Not After : Jan 5 20:17:14 2025 GMT
Subject: CN=3fbfb3e5f0870dd94677a99963c9a2dd38eac291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:8e:03:cd:a7:31:a7:9a:0d:b2:3f:4d:7b:
c0:5e:71:75:7a:ec:0f:26:d9:24:01:b6:3e:ba:84:
56:0f:9f:dd:49:29:50:49:98:d0:a9:ba:92:8f:44:
ae:d4:2f:f4:f6:b0:19:ee:60:bd:27:1b:a0:79:83:
fa:c0:2c:d6:4f:f3:4b:a6:10:12:9b:cd:3d:39:63:
b1:a6:f2:dc:5b:98:43:67:99:2e:85:e2:1d:45:1e:
45:b2:c1:c3:7f:65:01:14:76:de:aa:c0:2a:eb:45:
f9:a8:b5:42:28:82:ca:a0:6e:02:c1:65:e9:53:af:
f9:b7:23:48:c9:6c:8e:23:eb:8c:85:40:01:e4:09:
f7:2a:71:82:eb:55:54:13:7d:49:10:c2:60:82:0d:
8d:2b:8e:98:e1:dc:81:af:b5:0f:28:07:2e:2e:24:
ca:ba:75:26:8e:ce:c2:ac:b0:71:ab:dd:5c:1b:45:
e7:a6:3d:24:d2:9d:b3:8d:16:0b:49:49:17:8d:6f:
b8:5c:51:43:90:78:1a:3c:e0:b0:16:a3:b2:2a:ba:
f5:03:1e:e5:f8:4f:d7:17:be:f3:86:31:4a:c8:57:
f0:74:c9:81:8c:52:4b:78:5c:19:29:54:b8:b0:12:
ef:9e:44:6c:a8:a5:c9:b6:66:4f:f6:03:79:9d:62:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7A:C9:25:BB:5E:94:91:64:13:A9:BD:44:D0:57:BF:31:33:56:CA
X509v3 Authority Key Identifier:
keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/3fbfb3e5f0870dd94677a99963c9a2dd38eac291.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.25.82.0/23
Signature Algorithm: sha256WithRSAEncryption
96:af:2a:f5:92:c5:78:72:d4:30:7a:42:9b:3e:1d:c7:ed:5a:
83:83:cb:5e:ea:a0:b8:5d:1a:ea:02:cf:1b:27:8c:69:70:7b:
91:08:b4:e5:f9:e7:ee:1f:02:f2:99:dc:4f:31:5e:26:1b:b0:
13:bb:57:80:52:cf:b0:25:42:34:7c:cc:5e:86:98:d0:e5:c6:
36:ac:44:5c:ac:05:c9:3e:dc:06:22:2d:5f:74:d4:f1:61:e0:
8c:3d:37:33:1f:aa:e9:ec:dd:c8:80:bc:01:e2:cc:72:26:9f:
31:87:d8:e2:7d:39:d5:65:9e:2b:b0:9d:88:d6:d2:4b:f2:f6:
f3:f9:8f:9c:87:b0:f8:6b:38:bb:2a:4c:19:91:82:8e:04:72:
c3:18:c3:a9:b3:e3:1c:b8:52:c1:b5:15:fb:02:21:96:e4:c8:
55:5f:dd:e0:60:65:a9:30:71:70:05:c3:8d:8c:55:96:32:be:
54:7c:81:c0:fb:31:b3:cd:34:64:af:22:16:06:01:dc:6a:ee:
d4:6f:17:e5:bf:84:e4:86:c7:44:ab:63:08:fc:89:2e:c2:bc:
e5:02:b4:2b:3b:7f:de:e3:80:c9:5e:63:e0:57:7b:45:19:45:
62:f3:9c:d2:03:56:11:4b:e6:1a:88:c3:13:2e:fb:47:00:0b:
9c:2e:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org