Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/67b2c5971744e08baffcb70e958646ff3a2decaf.roa
File: 67b2c5971744e08baffcb70e958646ff3a2decaf.roa (raw, json)
Hash identifier: c46hWttA4gMbylka4FBCuyfrfIaMLqSaT55A2KJx3vc=
Subject key identifier: 08:64:73:52:47:D8:D1:8B:33:F1:31:93:C2:D1:6F:60:37:73:69:EA
Certificate issuer: /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial: 203689
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/67b2c5971744e08baffcb70e958646ff3a2decaf.roa
Signing time: Fri 14 Apr 2023 00:36:43 +0000
ROA not before: Thu 13 Apr 2023 00:31:34 +0000
ROA not after: Mon 14 Apr 2025 00:31:34 +0000
asID: 26506
IP address blocks: 200.25.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111113 (0x203689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Validity
Not Before: Apr 13 00:31:34 2023 GMT
Not After : Apr 14 00:31:34 2025 GMT
Subject: CN=67b2c5971744e08baffcb70e958646ff3a2decaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:40:d1:ec:53:c2:4c:a6:ae:8c:e9:96:77:
7f:9a:04:0a:23:38:74:e6:3a:42:79:6d:99:f4:5c:
0a:85:6a:a5:74:2f:bc:b6:88:b9:99:c5:a3:ba:d9:
72:3f:1e:84:78:9d:62:a2:27:99:64:7b:96:c6:0c:
e5:7e:56:ef:98:f6:bf:39:a6:18:17:ff:7f:73:43:
8e:7e:9f:c9:45:68:7d:24:b9:ed:5f:63:d6:00:f6:
32:0b:18:f0:29:8a:93:50:5a:ab:66:80:86:35:80:
6c:72:8c:97:38:61:f9:77:95:50:99:37:30:2e:d1:
89:30:fb:a8:f9:4b:f6:fc:e7:42:2b:e0:95:aa:03:
82:40:b0:45:b4:7d:e4:76:1d:09:18:cc:fa:3c:cc:
c2:7b:83:82:da:07:96:83:f4:43:f8:c0:46:52:f9:
66:5e:41:e6:19:80:50:8f:83:2d:37:e1:0e:3d:b4:
0a:66:2a:75:d4:57:41:ec:56:c6:3f:28:f7:b8:12:
43:2b:fd:0a:9d:ae:f3:8c:38:14:63:1f:b4:44:6a:
94:45:7d:7d:70:14:92:23:db:fe:78:64:02:3b:e9:
28:39:82:bb:62:7c:59:bf:1b:8b:96:d1:2a:db:96:
e3:51:75:5d:c8:8f:18:e1:d0:2a:b5:48:de:43:35:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:64:73:52:47:D8:D1:8B:33:F1:31:93:C2:D1:6F:60:37:73:69:EA
X509v3 Authority Key Identifier:
keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/67b2c5971744e08baffcb70e958646ff3a2decaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.25.86.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:5c:8e:2e:44:ef:90:dc:b0:14:85:3a:c5:22:65:84:6d:0f:
f1:c0:b5:d5:33:da:41:95:ca:ac:8e:89:fc:fa:9f:23:69:d2:
33:01:59:29:d4:28:29:74:29:18:64:80:3e:6e:9d:3b:82:18:
c3:f1:aa:00:92:da:b4:e1:d2:36:22:85:e2:8f:16:95:39:65:
6b:92:8b:88:ca:4f:79:db:82:1f:32:87:14:1f:97:c6:7c:b9:
22:b3:79:01:58:76:be:2e:e7:65:e6:3f:1e:e9:ed:6a:2d:26:
c4:b9:8c:14:1c:f6:85:66:1b:d3:d2:73:0b:3c:55:cf:13:09:
95:9c:08:8f:d9:01:9c:0e:1c:7b:d0:1f:55:9f:42:7d:51:68:
b8:55:c8:6f:1d:34:d0:f7:0c:9a:e9:8c:2c:e1:92:a3:05:11:
16:ed:39:a1:f6:3e:4a:37:bc:d7:56:87:2d:e2:f9:6d:b6:b5:
bc:69:6d:cc:49:68:ec:d8:bd:92:c4:7f:aa:6c:7e:f1:6f:2f:
a8:ad:a8:0d:97:3f:61:a7:d0:16:09:a0:62:ee:26:dc:27:c6:
27:b4:b9:4c:fe:8f:d1:0f:23:ba:fe:1e:99:70:b8:2b:cd:6a:
99:45:de:3a:c3:ba:ad:7b:7d:0d:8a:de:89:43:1f:e5:af:66:
80:87:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org