Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/d07d78bc9af40d0603dc7508c96f7a877e3be403.roa
File: d07d78bc9af40d0603dc7508c96f7a877e3be403.roa (raw, json)
Hash identifier: gSCE93uxZ6/87NYP1TMVLRV3yNiUHKu3j4USVLmedvo=
Subject key identifier: 92:8F:65:7B:C4:03:28:F9:A4:48:2B:1B:1D:90:1E:13:62:0E:54:BE
Certificate issuer: /CN=64b3bc09828cc99775b2fc1d0a01fbd5c59ce506
Certificate serial: 310C
Authority key identifier: C9:C7:25:65:61:A4:18:31:42:B1:54:83:EE:32:85:84:66:7A:AC:B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/d07d78bc9af40d0603dc7508c96f7a877e3be403.roa
Signing time: Wed 05 Jan 2022 14:58:00 +0000
ROA not before: Wed 05 Jan 2022 03:00:00 +0000
ROA not after: Fri 05 Jan 2024 03:00:00 +0000
asID: 269981
IP address blocks: 200.215.248.0/22 maxlen: 24
2803:4ee0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12556 (0x310c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b3bc09828cc99775b2fc1d0a01fbd5c59ce506
Validity
Not Before: Jan 5 03:00:00 2022 GMT
Not After : Jan 5 03:00:00 2024 GMT
Subject: CN=d07d78bc9af40d0603dc7508c96f7a877e3be403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:4d:50:b7:f8:6b:12:38:3f:c6:d4:9d:87:
e9:92:0d:73:6a:35:49:1d:d4:3a:89:1b:91:aa:b6:
15:2f:6b:81:94:0c:d2:23:74:8e:8e:98:34:30:a6:
17:02:30:b9:5b:7b:67:ef:fe:7a:4f:bc:99:84:c7:
6f:e9:e0:75:58:24:55:b8:81:64:92:2f:de:bb:6a:
45:c5:50:c6:91:d3:ba:7d:75:30:e5:35:37:de:cb:
85:f9:de:1a:53:9c:13:4d:b0:79:fd:99:95:56:49:
ff:fe:3a:58:f9:c6:4c:c9:fc:38:ed:54:b9:73:e3:
5a:6e:e7:05:87:31:2b:d6:61:07:b2:30:8b:65:bc:
58:35:74:73:4c:f7:02:9c:1f:3f:fd:9d:ff:c0:c1:
f4:7a:e6:6b:bc:af:d2:8d:9d:fa:44:bf:5e:9d:ad:
45:23:1b:f5:b6:6e:6b:68:e3:8b:2f:fa:cf:5a:6d:
a5:9e:05:ed:b2:56:54:38:c2:3d:b9:82:5c:bc:ea:
f8:b6:1a:46:dd:5f:1b:a9:11:f0:ef:fd:63:32:9d:
b9:6a:1a:ab:50:5f:b4:e9:56:d9:3b:92:a9:3e:bb:
88:16:39:0b:54:10:d4:56:8d:b3:91:d0:a8:68:36:
90:e3:88:ed:32:96:b3:14:28:c3:3f:88:ce:76:f3:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8F:65:7B:C4:03:28:F9:A4:48:2B:1B:1D:90:1E:13:62:0E:54:BE
X509v3 Authority Key Identifier:
keyid:C9:C7:25:65:61:A4:18:31:42:B1:54:83:EE:32:85:84:66:7A:AC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/d07d78bc9af40d0603dc7508c96f7a877e3be403.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.215.248.0/22
IPv6:
2803:4ee0::/32
Signature Algorithm: sha256WithRSAEncryption
70:2d:ba:58:fa:80:19:89:19:44:3a:d0:4a:13:34:9c:fb:57:
2d:59:c4:92:a8:f1:dd:70:1e:18:e2:5d:5c:8d:98:2f:25:85:
c5:19:85:71:10:d9:6d:95:5c:4a:28:45:fd:32:f0:42:e0:55:
50:d6:31:d1:36:e9:25:5b:24:87:7d:36:19:9e:09:6f:f0:f5:
e3:bc:dc:29:2d:22:80:f2:ed:fa:97:34:57:05:f6:2c:e7:9d:
db:44:79:91:88:f5:a4:2d:f8:67:e6:d1:74:a6:5e:dc:bd:3d:
92:e6:ee:40:2f:60:3a:c5:3e:ed:d0:0c:c1:3f:b8:0f:29:bc:
09:49:f6:29:97:cf:87:cd:25:71:8c:fa:24:b6:8e:11:42:aa:
c6:f4:c2:cb:1d:e1:11:74:e0:02:44:ce:2b:89:bd:ba:9a:fa:
02:7f:80:93:e9:4b:a7:34:e4:7b:5c:18:38:2b:19:85:3e:eb:
1c:c1:25:0c:5c:3e:41:4d:74:fe:a3:fa:b8:40:4e:7a:20:e5:
49:d7:9d:3d:1f:82:fd:bf:a6:87:2d:42:fc:37:a9:3d:21:3b:
da:11:59:0f:2a:2f:6d:1a:0e:fe:52:29:75:f5:7b:c3:e2:7c:
2e:a6:9d:d4:6b:4f:72:b4:97:4d:78:06:78:08:cc:ea:94:f6:
be:c8:e6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:14 2024 by rpki-client on console-fra.rpki-client.org