Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/ca2aa9b0922833cbe7f3d1d8e6b232bf192dfde2.roa
File: ca2aa9b0922833cbe7f3d1d8e6b232bf192dfde2.roa (raw, json)
Hash identifier: kHbxvKu1vjhB1cbzCWq8kXnvYzAq5XiM7yzSpPcKl8Y=
Subject key identifier: 50:83:83:BF:9E:CE:19:86:0D:2C:97:B8:EA:18:29:EC:04:FE:BC:D0
Certificate issuer: /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial: 13019C
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/ca2aa9b0922833cbe7f3d1d8e6b232bf192dfde2.roa
Signing time: Mon 01 Nov 2021 20:13:32 +0000
ROA not before: Wed 18 Aug 2021 03:00:00 +0000
ROA not after: Tue 18 Aug 2026 03:00:00 +0000
asID: 64124
IP address blocks: 200.25.13.0/24 maxlen: 24
200.25.68.0/24 maxlen: 24
2800:1e0:2100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245596 (0x13019c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Validity
Not Before: Aug 18 03:00:00 2021 GMT
Not After : Aug 18 03:00:00 2026 GMT
Subject: CN=ca2aa9b0922833cbe7f3d1d8e6b232bf192dfde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:b7:55:57:46:42:aa:ff:2c:fb:c2:07:6b:
b3:f8:a9:af:72:7f:b8:10:bd:1a:89:e8:be:71:90:
c2:b6:50:8f:e5:5b:94:67:d8:3b:57:35:75:cc:c7:
a3:c9:85:07:8e:29:01:3a:a5:e4:47:1a:c9:93:cb:
4b:22:7b:f4:0c:01:48:69:fd:6d:8d:e2:98:a9:7b:
e6:71:e9:36:5e:6a:ca:fd:06:bc:04:14:36:88:6d:
f5:22:63:fd:05:63:36:5e:c5:42:d4:58:d1:43:66:
20:d6:eb:e1:4a:7a:36:f4:67:07:a5:de:95:b3:b7:
9f:c4:d8:60:a9:55:23:e6:1d:f5:31:a3:69:30:6b:
fa:2e:72:19:52:12:53:ad:20:2f:44:48:90:42:ce:
4f:45:8d:68:2b:c2:e1:69:3e:06:7e:ea:1d:e6:da:
48:70:bb:91:05:39:bb:3c:bb:aa:f7:c2:72:20:22:
70:87:92:e8:bc:eb:52:a3:91:0d:27:21:31:07:d2:
6d:3c:e7:d1:ef:6e:6e:82:cb:25:78:00:1d:68:8a:
01:bb:f3:4b:36:92:fb:0d:e6:bb:22:28:6c:ed:5f:
4f:b9:1f:3a:55:42:46:73:cc:00:97:04:69:9e:d8:
2c:ec:43:0d:de:f9:1c:00:6f:bd:ec:ce:7e:6c:e9:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:83:83:BF:9E:CE:19:86:0D:2C:97:B8:EA:18:29:EC:04:FE:BC:D0
X509v3 Authority Key Identifier:
keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/ca2aa9b0922833cbe7f3d1d8e6b232bf192dfde2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.25.13.0/24
200.25.68.0/24
IPv6:
2800:1e0:2100::/40
Signature Algorithm: sha256WithRSAEncryption
57:eb:42:c8:61:64:05:d4:2d:51:a8:7e:f8:fa:d5:fd:f8:b4:
04:fc:3e:ce:7d:1d:1d:3a:53:62:08:ed:b9:c0:d5:99:95:24:
f2:5e:54:1f:07:70:99:64:21:e9:ab:e6:69:16:c7:91:92:2b:
37:eb:ca:2c:3a:a2:55:09:65:ad:c1:a9:33:84:4c:77:21:8f:
b3:06:f8:8a:3d:5d:e7:15:e6:f8:d0:74:6b:37:93:7e:14:9d:
e2:08:53:82:fc:09:68:33:4a:b8:fd:ad:42:d8:7b:fb:8a:00:
63:53:66:d5:31:be:7d:41:5c:55:3b:d5:e5:7e:49:15:23:d8:
57:ea:63:34:11:0b:b3:f7:ea:fa:8c:66:58:f3:a2:5f:6b:80:
c1:a9:bd:4f:c2:0d:31:2b:6e:01:51:c1:79:e5:c9:43:15:2f:
3d:d6:c0:01:0a:d8:c0:a3:cb:0d:73:8e:4c:3e:12:64:b5:0c:
9b:f8:4c:d1:7a:12:09:c9:43:f0:72:89:f3:d0:f3:f1:08:a9:
3b:56:d4:11:6f:0b:59:62:dc:b5:84:94:7c:5e:49:8f:29:9f:
55:4e:ec:a0:b9:1e:e4:be:d2:83:d2:54:f9:3e:63:e7:22:a6:
fe:90:7b:a7:0f:6b:00:55:3e:ef:d0:e3:c2:40:6a:22:e1:67:
74:e2:cd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org