Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4affefc16664d983226ff3f1bc946b548b6fbe74.roa
File: 4affefc16664d983226ff3f1bc946b548b6fbe74.roa (raw, json)
Hash identifier: HZCrosrWQsSsGSaZ/dk6QZ8nV5CMItycMwcYZ2zQwbY=
Subject key identifier: 57:BA:31:A0:E5:6F:8A:69:8F:92:DF:5A:7E:EC:48:D2:F6:E1:33:1F
Certificate issuer: /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial: 21387D
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4affefc16664d983226ff3f1bc946b548b6fbe74.roa
Signing time: Fri 05 May 2023 20:54:59 +0000
ROA not before: Thu 04 May 2023 20:54:59 +0000
ROA not after: Mon 05 May 2025 20:54:59 +0000
asID: 26506
IP address blocks: 200.25.82.0/23 maxlen: 24
200.25.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177149 (0x21387d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Validity
Not Before: May 4 20:54:59 2023 GMT
Not After : May 5 20:54:59 2025 GMT
Subject: CN=4affefc16664d983226ff3f1bc946b548b6fbe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:d5:ce:cc:f7:fe:4f:72:76:20:93:59:6f:
ec:99:6e:cb:b3:d5:37:a7:ab:43:4e:ef:0c:95:22:
20:8b:bd:d5:fb:34:2a:69:dc:a2:e5:1b:90:23:10:
26:9f:53:ed:17:ed:54:00:24:89:46:8a:5d:9e:14:
cb:62:61:be:2b:f3:d2:45:88:65:f3:ef:58:3c:1c:
0d:41:4a:63:74:29:d0:2d:8d:b5:03:f4:4b:1c:0d:
b7:be:7d:3a:90:6b:b3:f7:5a:84:8d:ba:d6:d5:b1:
5f:01:56:5e:0c:db:fa:86:4d:5b:b7:8c:17:96:df:
49:34:ee:c0:28:54:74:fb:f7:ee:93:cd:ca:50:40:
d6:db:f5:67:2f:69:ba:49:a9:e7:28:be:78:1c:0c:
04:c6:77:0c:e5:e2:a1:c7:cb:3e:f8:e1:5d:d1:24:
a6:2d:d2:7e:6f:bf:15:ea:3d:ae:f8:c8:ee:b2:5d:
06:9d:57:e9:d8:7e:7f:a4:f0:00:88:55:d3:65:81:
63:66:89:a8:5e:df:84:11:76:20:d1:14:d1:c4:0d:
44:c8:d6:06:9e:ac:4f:85:7a:4f:3c:e8:33:db:06:
d4:3a:69:b9:34:46:74:4c:c5:e9:3f:6b:20:f6:aa:
84:f3:f2:4e:5f:c1:85:d3:30:f5:70:00:64:1c:2a:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BA:31:A0:E5:6F:8A:69:8F:92:DF:5A:7E:EC:48:D2:F6:E1:33:1F
X509v3 Authority Key Identifier:
keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4affefc16664d983226ff3f1bc946b548b6fbe74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.25.82.0/23
200.25.86.0/23
Signature Algorithm: sha256WithRSAEncryption
70:52:09:dc:3c:ae:01:26:41:7a:05:ad:44:3f:46:d1:b6:c5:
ec:7f:9a:53:6e:f4:6b:50:0a:e4:a7:14:dd:4b:34:5b:f5:22:
e3:06:c2:4a:1b:9e:ec:fa:10:08:4a:d0:a1:88:32:4b:4a:65:
31:25:10:4b:82:be:b4:bb:2f:3d:91:ed:e1:68:82:59:c9:42:
50:00:c7:9f:a1:cf:af:a9:f8:78:2b:59:ff:ce:11:9a:82:25:
cf:31:9f:69:a6:9d:07:5d:c5:59:ab:4a:f1:ad:71:8b:07:2a:
4e:f1:a3:b5:c3:b2:0d:5c:f6:a5:2b:fd:1d:04:3b:54:ce:b0:
1c:11:14:bd:ce:6c:46:d7:47:1f:56:90:d3:96:9b:20:5d:89:
ed:f5:08:d0:c4:4f:ea:84:bb:52:44:77:e4:e8:f7:e0:0a:cb:
c4:b6:c8:dc:3f:ca:dd:66:85:7e:92:0d:11:f0:71:fc:b0:3e:
a4:68:50:70:90:88:e3:63:90:9c:1a:56:09:a1:84:39:c3:be:
a0:00:60:81:9c:da:82:de:16:51:a1:2e:df:96:eb:a7:10:71:
72:98:f0:bd:62:41:29:af:08:a5:f1:ea:a4:e1:1c:ec:a1:e9:
a2:4b:7a:3f:b5:46:ee:60:52:3d:46:ae:39:f6:a5:73:c2:92:
84:d4:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 21:07:38 2024 by rpki-client on console-fra.rpki-client.org