Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/bcad812db3357ade25d5fbba3ec501a2079e6a05.roa
File: bcad812db3357ade25d5fbba3ec501a2079e6a05.roa (raw, json)
Hash identifier: ThO8f8HpdTx+8AUuiaaIPncufatiqPd9i79uCaKZs8w=
Subject key identifier: 1E:82:61:EF:3C:BB:1C:03:84:FA:BB:57:43:04:7F:17:9E:E4:13:96
Certificate issuer: /CN=228f4088c9ec4b56bc838a3499f768d5cf73bab9
Certificate serial: 118F03
Authority key identifier: AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/bcad812db3357ade25d5fbba3ec501a2079e6a05.roa
Signing time: Sat 20 May 2023 08:30:01 +0000
ROA not before: Fri 19 May 2023 08:30:01 +0000
ROA not after: Sun 18 May 2025 08:30:01 +0000
asID: 28458
IP address blocks: 200.106.164.0/24 maxlen: 24
200.106.165.0/24 maxlen: 24
200.106.166.0/24 maxlen: 24
200.106.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150723 (0x118f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228f4088c9ec4b56bc838a3499f768d5cf73bab9
Validity
Not Before: May 19 08:30:01 2023 GMT
Not After : May 18 08:30:01 2025 GMT
Subject: CN=bcad812db3357ade25d5fbba3ec501a2079e6a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:3e:ba:23:37:4c:fd:59:78:7f:c8:11:e0:
2a:db:fc:49:6f:2f:f7:ef:d5:3e:60:13:f1:63:ad:
d8:3c:93:6d:9d:9f:ef:7e:d7:a9:20:21:db:a2:d6:
90:e1:2d:91:28:87:e7:e4:5e:64:c1:20:af:ea:da:
63:6f:9a:04:f8:66:c9:96:8f:cb:83:2a:5e:97:70:
c9:49:4d:1d:7c:db:3e:0e:d1:d4:2c:56:4b:90:d8:
de:93:15:8b:25:7f:57:6e:ba:ea:0e:72:f1:77:f5:
2e:9f:b6:1c:d7:81:d9:9d:13:f7:2c:2b:a7:03:4e:
d8:2a:b8:73:75:42:af:60:e9:6d:6c:56:6e:00:f5:
17:23:0b:fd:82:5e:20:c2:37:e5:19:6a:23:79:b6:
6e:c8:5d:87:b9:79:28:e5:af:fd:e4:9c:26:95:3e:
73:4f:6c:4f:dd:a8:66:fa:9b:34:ef:41:35:68:d1:
e1:0d:ac:aa:06:1d:96:f2:23:2c:fc:96:81:c5:85:
a6:73:29:14:bb:d7:04:d5:41:7c:39:ea:13:1d:83:
11:1e:92:9d:18:47:d5:9c:2e:fa:4f:40:b5:09:b7:
eb:71:83:b8:84:9b:dd:3b:d3:71:52:73:2f:9d:86:
98:f8:3b:9a:89:be:06:42:b0:fe:2f:51:9a:79:13:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:82:61:EF:3C:BB:1C:03:84:FA:BB:57:43:04:7F:17:9E:E4:13:96
X509v3 Authority Key Identifier:
keyid:AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/bcad812db3357ade25d5fbba3ec501a2079e6a05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.106.164.0/22
Signature Algorithm: sha256WithRSAEncryption
05:45:46:62:1f:fd:32:fa:8f:80:5c:58:4f:04:54:ea:f9:2b:
89:1e:38:7c:5a:76:ce:48:7e:db:6b:d6:c7:d6:1e:c6:94:f0:
18:64:9b:a4:fc:dc:fd:c9:f8:ce:64:99:01:37:52:3c:b6:3c:
20:9b:49:f4:d3:15:0f:ce:f6:83:f1:ae:7c:a0:ce:16:aa:e0:
32:5a:d2:a2:ce:53:03:1c:c8:8c:6c:4a:98:ea:a9:cd:ae:2e:
67:c9:76:5c:3f:e8:ad:61:9e:71:c0:90:33:0b:86:b0:a3:04:
dd:b0:64:83:47:f1:8d:f5:00:3b:b4:5a:2b:94:8a:7c:4e:09:
a7:64:a9:3e:0b:32:9e:df:21:db:a3:e3:3d:92:02:e1:16:ff:
c0:f7:62:29:cd:c7:65:5d:86:b0:16:6a:76:c3:bc:8e:2d:44:
ff:28:44:b5:5d:ba:98:51:d3:60:73:49:9c:3d:19:55:25:95:
42:ff:3b:f9:94:2c:f6:6b:59:c2:39:96:4f:12:38:07:a9:7f:
37:d2:88:f4:68:08:f0:39:0a:31:97:22:2a:08:fc:2b:6a:c2:
19:69:6c:1d:64:18:d4:94:35:d4:0f:0d:47:9a:f2:6b:77:30:
83:b6:73:cf:4c:3f:95:53:58:b9:3f:31:98:11:6b:a5:c4:cb:
84:b7:8c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org