Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/bdc29f6dfc0a900a15122fbb9ea8896a155988f2.roa
File: bdc29f6dfc0a900a15122fbb9ea8896a155988f2.roa (raw, json)
Hash identifier: fy3sORCC98unzIOZb+LVY+W0VeKJGkJjYx0Iy3s2PIc=
Subject key identifier: 8E:52:99:81:57:BF:58:35:9D:38:79:0F:CE:20:5D:3D:9A:83:E9:2F
Certificate issuer: /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial: 2090FC
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/bdc29f6dfc0a900a15122fbb9ea8896a155988f2.roa
Signing time: Thu 27 Apr 2023 08:30:01 +0000
ROA not before: Wed 26 Apr 2023 08:30:01 +0000
ROA not after: Fri 25 Apr 2025 08:30:01 +0000
asID: 211397
IP address blocks: 200.85.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2134268 (0x2090fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Validity
Not Before: Apr 26 08:30:01 2023 GMT
Not After : Apr 25 08:30:01 2025 GMT
Subject: CN=bdc29f6dfc0a900a15122fbb9ea8896a155988f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:01:10:ee:70:3d:f8:e8:03:c2:8d:46:b1:
47:50:a6:c5:90:be:90:42:20:6d:1d:10:8f:1b:4b:
a1:0a:4c:28:2b:bc:a9:3f:b2:ea:29:1c:3d:68:96:
97:78:9d:25:36:e8:8a:cd:d2:07:c1:77:f8:f0:69:
90:4b:76:97:68:d8:81:4a:fa:e0:fd:44:7f:2f:a1:
9f:3a:09:ee:3d:1c:e5:2e:b3:e2:a2:6a:7e:33:68:
87:73:bd:8d:2a:de:75:eb:02:a1:33:a0:d3:6a:f2:
97:7e:58:da:2d:53:0a:97:65:99:19:cf:a2:50:1c:
e0:bc:a0:0d:ad:67:95:b4:62:f5:87:23:f3:b1:fa:
b5:25:c4:7c:e4:e2:0e:47:eb:8e:5a:b9:d6:85:8d:
fa:3b:f9:e1:9d:62:32:9f:94:bc:b9:c6:b5:4f:70:
c1:bb:2f:91:b1:47:6a:1d:18:f7:2a:53:a6:d2:65:
c9:b9:12:46:af:cb:c2:90:28:f2:1b:aa:b3:fa:a4:
1c:35:df:e9:fd:21:0f:e8:2c:af:59:ae:a9:c0:bf:
76:0b:fc:d7:e6:04:7c:68:e4:cd:f5:d2:00:8e:19:
4d:40:b2:f1:26:fd:7a:09:70:08:f1:5a:1c:f8:72:
f5:94:93:bd:8f:3c:0e:4b:e3:36:6a:0f:c2:5b:f8:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:52:99:81:57:BF:58:35:9D:38:79:0F:CE:20:5D:3D:9A:83:E9:2F
X509v3 Authority Key Identifier:
keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/bdc29f6dfc0a900a15122fbb9ea8896a155988f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.142.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2e:5d:07:27:20:4a:28:6d:0e:ab:7b:ef:f6:7e:0c:31:b0:
62:9a:a8:f2:7e:a2:fb:c3:2c:b1:9a:f7:eb:05:df:46:3c:a9:
e9:a1:33:88:7a:97:49:df:17:57:f5:ef:db:82:a8:ae:f1:9c:
2d:cb:41:83:87:02:f9:38:b1:92:a1:89:35:62:aa:2a:fa:4f:
e0:cf:80:d1:47:86:23:eb:e2:6c:45:a5:5f:72:d1:0c:f5:93:
c2:cc:1d:24:01:b6:69:96:fb:64:6f:8a:56:ff:9c:d9:46:43:
49:39:6a:f4:bb:03:5d:d7:0d:52:5f:c0:c4:80:83:7c:3e:5d:
2f:d7:cd:21:a3:1d:e8:7a:78:1d:46:0b:6e:d8:a9:65:58:3f:
13:16:2a:38:c0:5b:3f:8b:a3:ff:a0:94:6e:94:66:da:b2:9e:
63:5d:b3:46:13:ae:76:72:e3:88:b0:34:04:7f:aa:ce:5f:af:
c1:ff:65:3b:c0:e3:26:61:62:b0:33:47:3c:b7:14:a1:ef:ea:
ef:51:86:75:86:bc:3d:b1:df:cd:34:5b:33:60:ad:97:38:d9:
1b:72:ef:1f:df:0e:24:21:d8:f3:c9:33:1f:99:84:f8:46:51:
c4:bb:e1:65:92:3e:a3:70:c3:ec:39:a3:7a:81:f2:49:71:bf:
36:83:c6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org