Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/91c82b54f2f4a0d56a0902a70cb61e50c5298a88.roa
File: 91c82b54f2f4a0d56a0902a70cb61e50c5298a88.roa (raw, json)
Hash identifier: CQw6EZD7RK68Ydhl2QW4BusHHQ/IOJUCUCg3PH1RoMA=
Subject key identifier: 38:39:B1:98:5E:46:40:F8:8C:DC:C6:7B:09:04:C2:0E:85:D3:E8:74
Certificate issuer: /CN=fc45a0da4b9457f1d354f1d490746e5603aea754
Certificate serial: 0F8FE4
Authority key identifier: 63:49:A9:6A:58:E9:0D:23:CC:54:06:77:E3:EA:EA:32:F3:15:D8:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc45a0da4b9457f1d354f1d490746e5603aea754.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/91c82b54f2f4a0d56a0902a70cb61e50c5298a88.roa
Signing time: Thu 29 Feb 2024 15:40:42 +0000
ROA not before: Thu 29 Feb 2024 15:40:41 +0000
ROA not after: Sat 28 Feb 2026 15:40:41 +0000
asID: 3454
IP address blocks: 200.23.202.0/24 maxlen: 24
148.234.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1019876 (0xf8fe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc45a0da4b9457f1d354f1d490746e5603aea754
Validity
Not Before: Feb 29 15:40:41 2024 GMT
Not After : Feb 28 15:40:41 2026 GMT
Subject: CN=91c82b54f2f4a0d56a0902a70cb61e50c5298a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:82:4d:f2:3b:5d:6d:ed:93:81:f3:03:3d:
91:5d:e2:d2:ec:dc:66:d0:3e:47:c1:45:d8:32:6c:
3c:7d:87:15:72:0f:3e:32:a1:eb:83:ec:3f:7c:9f:
df:6a:48:00:51:02:9a:31:36:1e:94:7d:7d:ad:86:
ff:77:f4:ef:fb:7f:e4:0a:13:8b:d1:bd:94:9c:87:
02:4d:ed:87:e5:45:71:b8:5f:47:46:5e:df:de:d4:
95:12:47:36:ff:f6:38:76:30:28:0b:27:d8:b5:14:
ed:de:ed:2a:63:89:ef:5b:e4:80:28:54:aa:6a:8d:
a0:7c:a4:60:cc:5e:36:23:09:80:95:63:67:6c:e3:
5b:a3:51:a1:34:ee:7a:7b:1a:83:1e:45:5b:31:c9:
42:46:74:3b:83:cf:6c:e4:57:25:a2:c9:f9:82:f0:
9d:25:2c:d0:8d:09:d9:d5:be:5a:d4:4a:98:4c:d6:
cb:e1:eb:8c:db:39:22:5f:ad:e8:77:60:05:20:2b:
42:f7:9a:3e:22:65:1f:03:75:20:94:10:7e:f8:8c:
c6:be:46:21:b6:02:27:8c:36:41:8f:fc:37:b7:3e:
dd:6d:4b:33:2d:54:bf:0a:bc:8c:9c:a0:c5:19:40:
a0:17:04:9f:dc:0b:aa:9d:32:0d:f9:f4:51:09:48:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:39:B1:98:5E:46:40:F8:8C:DC:C6:7B:09:04:C2:0E:85:D3:E8:74
X509v3 Authority Key Identifier:
keyid:63:49:A9:6A:58:E9:0D:23:CC:54:06:77:E3:EA:EA:32:F3:15:D8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc45a0da4b9457f1d354f1d490746e5603aea754.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/91c82b54f2f4a0d56a0902a70cb61e50c5298a88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/fc45a0da4b9457f1d354f1d490746e5603aea754.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.234.0.0/16
200.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f4:83:14:e6:45:ff:e2:86:1d:87:e0:f5:14:76:9b:5c:d4:
d9:f4:f3:5a:1b:7c:4c:00:ef:2e:83:fe:e0:16:c5:53:d4:a5:
ec:81:0f:79:e3:1e:ad:24:a9:3f:b1:74:c0:af:d7:69:14:17:
41:5d:c6:27:76:7d:30:4a:ef:fd:1b:f8:8b:04:34:27:b9:5f:
5b:8e:0c:02:7c:26:4b:a1:71:3c:b7:66:30:6f:2e:36:61:1f:
35:52:6b:92:6f:df:27:d8:e2:a7:4e:f0:df:ff:50:d9:d3:cf:
e2:43:4d:b3:dd:7d:2a:c7:f8:14:be:61:a0:2e:3b:ec:db:ad:
cf:20:17:aa:6b:b7:95:85:dc:e9:08:81:4c:d7:69:88:bd:d3:
c8:5c:86:8a:aa:50:15:c5:f4:8f:39:2c:68:46:95:ed:9b:76:
15:08:22:ec:f8:26:8e:96:11:86:38:c8:6d:62:7f:7b:47:b2:
88:03:13:ae:f5:f5:bb:c4:c1:b9:03:e4:97:11:4c:09:85:07:
a9:14:1d:e8:7f:66:7e:46:97:db:4b:01:2e:cd:7a:4b:6f:bc:
9c:74:58:48:a2:1b:95:6b:8e:03:5f:c1:5a:74:f5:56:be:0d:
e0:a1:c4:c3:45:4f:ba:47:bd:1f:ab:35:d0:f9:c6:29:98:ba:
d0:7d:c4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org