Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/5c29f53a93a9aaafcece572d42bcab49777e3f13.roa
File: 5c29f53a93a9aaafcece572d42bcab49777e3f13.roa (raw, json)
Hash identifier: gPLT5rXxSrBtDwIekz+ZwtwuFq3lAMCixfHC+wNsd5Y=
Subject key identifier: 06:A1:CB:CC:FE:A7:30:3A:F6:FF:17:66:B3:D9:32:7A:CA:E7:BC:BE
Certificate issuer: /CN=4213629bff1656b039692adab742735c1703764c
Certificate serial: 28C1E4
Authority key identifier: 14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/5c29f53a93a9aaafcece572d42bcab49777e3f13.roa
Signing time: Mon 19 Feb 2024 17:00:37 +0000
ROA not before: Mon 19 Feb 2024 17:00:37 +0000
ROA not after: Mon 19 Feb 2029 17:00:37 +0000
asID: 64124
IP address blocks: 200.25.13.0/24 maxlen: 24
200.25.68.0/24 maxlen: 24
2800:1e0:2100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2671076 (0x28c1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4213629bff1656b039692adab742735c1703764c
Validity
Not Before: Feb 19 17:00:37 2024 GMT
Not After : Feb 19 17:00:37 2029 GMT
Subject: CN=5c29f53a93a9aaafcece572d42bcab49777e3f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:b9:18:0f:ab:5a:99:b2:c0:af:5c:0c:1a:
25:9a:5d:87:ad:80:41:eb:12:96:3c:49:68:d0:52:
f6:56:a3:98:b3:9b:8a:93:15:f4:c7:b8:95:74:f1:
3a:2f:c3:d3:b2:b0:e2:16:9f:78:13:10:3f:cc:e5:
b5:3c:2d:49:4e:4d:c9:11:ea:69:a0:b6:74:05:ec:
b5:80:22:1b:12:0d:8f:3a:41:e0:be:3a:3a:62:12:
7d:01:82:f6:e6:2d:86:8a:c6:48:d1:fb:84:c6:81:
41:9e:44:a8:27:4c:3a:70:a6:d7:8d:9e:a2:c6:ad:
47:f3:ce:f1:53:e5:72:bf:13:de:90:0a:5d:6d:e5:
de:e0:97:2f:33:c0:42:a4:46:2a:2c:55:a4:96:1f:
b5:ab:30:fd:e0:1d:a0:ae:f2:6a:48:f3:d0:86:b2:
ea:94:9e:43:2f:0b:35:86:5e:3a:5f:04:85:4a:f8:
07:4d:f0:a0:d7:e8:d7:1c:a4:26:e6:8a:bd:38:4e:
32:10:b5:3c:6b:55:a5:3f:94:ba:85:6d:28:c2:55:
bc:3d:1f:37:e8:47:43:71:04:31:f3:b3:ce:73:e3:
99:58:3e:a5:89:57:0e:51:46:92:a4:06:9d:a2:7e:
13:a1:ba:c1:3c:eb:d3:cc:80:82:31:f2:d8:ee:a0:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A1:CB:CC:FE:A7:30:3A:F6:FF:17:66:B3:D9:32:7A:CA:E7:BC:BE
X509v3 Authority Key Identifier:
keyid:14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/5c29f53a93a9aaafcece572d42bcab49777e3f13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4213629bff1656b039692adab742735c1703764c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.25.13.0/24
200.25.68.0/24
IPv6:
2800:1e0:2100::/40
Signature Algorithm: sha256WithRSAEncryption
34:83:5b:24:53:62:42:8a:ad:e6:77:74:dc:28:f5:b1:97:05:
3e:57:b9:12:bc:89:7a:c6:bf:ee:cb:a5:0c:73:23:9d:ab:3e:
2f:12:e9:d5:22:12:3c:87:a1:25:bf:c5:2d:09:f5:9e:be:b4:
6b:42:1e:b1:12:8d:aa:82:f5:3f:d0:e8:7a:1a:c2:da:33:00:
ba:62:6c:19:40:5d:99:a1:5a:e7:da:f9:78:78:bb:08:d2:c6:
96:ee:b8:e6:68:5c:4f:f3:32:05:80:74:e7:e3:2a:7c:d9:5b:
c3:5c:a9:08:62:be:bf:46:1e:95:71:98:ea:7e:8b:fc:18:5f:
24:d7:8a:fa:59:94:c2:17:9a:bf:c3:eb:85:9c:38:3c:ed:aa:
f1:43:60:86:49:db:14:eb:2d:41:2f:e0:ee:a5:9d:d6:1a:57:
88:44:23:57:a1:48:3a:a8:d1:75:49:06:0b:89:20:49:39:0c:
bf:0a:dc:7c:84:db:ed:0b:c7:ea:db:f3:b1:c7:c8:00:ac:80:
2a:00:bb:ed:74:6c:94:6a:1d:97:cc:61:ea:2c:28:e8:d4:09:
e3:ef:05:c0:c2:fc:8e:ad:f5:da:e6:b8:51:d2:32:42:39:7d:
bd:8e:de:90:dd:c9:be:0d:c4:d3:df:fe:92:29:e5:ab:c2:6b:
4a:e6:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org