Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/477bd5cdfb5b5870812b8b70e4a1a0c7c08f9e4a.roa
File: 477bd5cdfb5b5870812b8b70e4a1a0c7c08f9e4a.roa (raw, json)
Hash identifier: 19ZM0GMd8Mg95JCMHPpdgRO2gWUk4TMXe3gx9J1+49g=
Subject key identifier: FD:99:EA:56:87:A5:D5:93:98:92:6A:E7:00:DD:E0:85:D8:11:AA:63
Certificate issuer: /CN=4213629bff1656b039692adab742735c1703764c
Certificate serial: 28D17C
Authority key identifier: 14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/477bd5cdfb5b5870812b8b70e4a1a0c7c08f9e4a.roa
Signing time: Mon 19 Feb 2024 17:00:40 +0000
ROA not before: Mon 19 Feb 2024 17:00:37 +0000
ROA not after: Mon 19 Feb 2029 17:00:37 +0000
asID: 26506
IP address blocks: 200.25.82.0/23 maxlen: 24
200.25.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675068 (0x28d17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4213629bff1656b039692adab742735c1703764c
Validity
Not Before: Feb 19 17:00:37 2024 GMT
Not After : Feb 19 17:00:37 2029 GMT
Subject: CN=477bd5cdfb5b5870812b8b70e4a1a0c7c08f9e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:bb:68:67:31:ef:50:89:57:3d:a2:90:e4:
c6:83:9d:ed:e8:cf:2f:69:dc:56:22:13:61:0e:0a:
d9:1d:c3:95:d1:ca:96:fd:63:d3:00:7e:19:58:4e:
b0:b7:7b:a1:dc:01:0d:98:c0:bd:e8:70:cc:b4:42:
69:6e:12:c6:2d:c2:f6:a8:4b:92:10:fd:dc:9c:e0:
a6:1b:f0:05:d3:2e:df:6c:ee:79:33:4f:b7:4c:4c:
5b:37:19:ac:68:c7:67:1e:10:5b:e9:f5:eb:9c:51:
7a:15:03:2b:64:33:c5:be:55:89:ab:e5:78:1c:ab:
5e:15:68:77:12:c3:5f:e3:ed:ea:67:c5:ab:28:2e:
b6:2a:a2:30:3b:3b:e5:30:14:4a:51:9b:cf:94:c3:
e9:5a:8d:03:3c:40:d9:68:cd:4c:70:c8:db:f7:a6:
d5:0c:b9:ee:64:66:4c:dc:31:17:dd:f2:f8:42:d9:
88:fb:00:5b:e7:b5:2b:f6:51:03:8c:91:e2:54:bd:
4f:37:9d:0c:26:e5:f2:d4:9c:d7:30:82:af:85:47:
cd:55:ce:eb:ae:83:86:ee:1c:37:ee:3a:be:65:b0:
f9:7d:41:c2:9b:f3:55:c3:ff:e6:4f:bc:2a:34:4e:
0e:7f:11:f3:cc:2f:5e:86:f3:5b:6e:56:26:7d:37:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:99:EA:56:87:A5:D5:93:98:92:6A:E7:00:DD:E0:85:D8:11:AA:63
X509v3 Authority Key Identifier:
keyid:14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/477bd5cdfb5b5870812b8b70e4a1a0c7c08f9e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4213629bff1656b039692adab742735c1703764c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.25.82.0/23
200.25.86.0/23
Signature Algorithm: sha256WithRSAEncryption
79:90:84:4a:da:66:f2:af:8a:83:e8:12:ff:7f:d0:08:a4:f1:
8b:ec:64:84:7e:dc:05:67:a7:d1:0f:9c:ea:11:bf:89:6c:7f:
b4:97:97:cc:38:1d:6c:58:63:39:76:f0:53:66:0e:d7:44:42:
15:08:89:90:48:c3:a9:9f:7c:82:01:63:8c:c2:12:9e:58:72:
6e:13:48:71:fb:9f:96:a4:47:5a:b1:7d:7f:05:01:13:77:d2:
9e:be:dc:0b:87:fe:84:15:b2:a5:7a:fe:92:5a:cd:9b:96:29:
66:a3:80:8a:23:c3:c7:a3:96:cb:6e:da:fd:70:88:58:35:6f:
25:ad:20:55:94:b3:86:91:46:a3:ef:a8:06:04:49:5b:89:0e:
47:89:75:38:d3:5f:1a:0a:5d:aa:56:10:22:74:69:f5:12:b6:
83:af:66:de:18:d5:af:ff:04:d0:6b:7b:78:4d:ad:4e:db:08:
07:f3:0e:a1:f6:91:4e:d0:c0:ce:0a:b7:60:75:30:54:6b:94:
cd:b3:d6:17:fc:cb:f7:41:7b:05:08:89:98:b6:e7:b0:07:3e:
8b:af:94:88:e6:37:03:91:70:65:ce:e4:33:63:57:29:9d:03:
d0:ee:4d:73:f1:da:aa:9a:51:7c:05:d4:96:15:fa:d1:af:da:
9f:b7:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org