Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/27cedf6dd0628efd21c261af64bee605698600c4.roa
File: 27cedf6dd0628efd21c261af64bee605698600c4.roa (raw, json)
Hash identifier: 1lmLHkJZF3rQ3zffacr2zg8H1N4ATK44NQC2PYnkK/g=
Subject key identifier: A3:26:2D:60:44:0E:99:3A:60:4C:39:3C:F3:0A:8E:52:B5:8C:5E:1B
Certificate issuer: /CN=2d58158bda6f6fd6f2d2ecdd11220a4132b054c8
Certificate serial: 05327D
Authority key identifier: 0E:16:D9:27:D2:72:B6:16:3D:F9:54:E1:01:E2:39:3D:8A:B3:68:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/27cedf6dd0628efd21c261af64bee605698600c4.roa
Signing time: Wed 24 Mar 2021 14:39:17 +0000
ROA not before: Wed 24 Mar 2021 14:39:17 +0000
ROA not after: Tue 24 Mar 2026 14:39:17 +0000
asID: 19582
IP address blocks: 200.0.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340605 (0x5327d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d58158bda6f6fd6f2d2ecdd11220a4132b054c8
Validity
Not Before: Mar 24 14:39:17 2021 GMT
Not After : Mar 24 14:39:17 2026 GMT
Subject: CN=27cedf6dd0628efd21c261af64bee605698600c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f5:77:46:27:ec:cc:81:a9:94:de:16:bf:af:
48:41:d1:87:71:74:19:60:2c:ed:0b:ae:96:ee:77:
88:a9:15:3a:13:90:46:73:ee:d9:13:f3:05:23:97:
07:ec:02:ea:3f:a3:d9:52:b2:bd:eb:f2:50:14:ba:
e6:29:7c:c6:5c:e1:31:65:e9:ea:0e:4d:28:d1:4b:
5e:c9:43:28:51:a5:5e:4a:9d:56:b0:fe:fe:ef:c0:
cf:8b:70:7b:00:44:e2:16:ce:62:c1:c6:93:23:33:
2a:1e:3f:7c:1f:01:be:60:43:8d:56:d4:a6:e4:49:
8f:28:ee:e1:e1:97:6d:34:f1:43:18:d1:a9:0a:c0:
30:4e:98:da:5e:d5:75:e8:3c:25:51:f6:bb:45:b5:
b2:4e:67:8a:e0:1e:1d:da:6a:01:ce:dd:dd:f5:51:
82:86:ab:b0:c2:41:a3:5f:93:7a:16:e3:f4:8a:3b:
22:f4:08:b9:b6:6d:12:a5:5c:11:36:05:15:40:09:
38:f5:2c:ec:e5:5a:de:0c:5b:f1:c2:78:17:f0:5f:
44:a5:4a:fe:9b:0f:37:1f:01:59:33:70:78:46:f6:
5d:b6:6a:54:a6:72:52:ea:51:6c:54:40:d0:1c:75:
c6:84:6a:71:7c:75:7b:0b:c5:cf:19:39:4b:68:b4:
d5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:26:2D:60:44:0E:99:3A:60:4C:39:3C:F3:0A:8E:52:B5:8C:5E:1B
X509v3 Authority Key Identifier:
keyid:0E:16:D9:27:D2:72:B6:16:3D:F9:54:E1:01:E2:39:3D:8A:B3:68:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/27cedf6dd0628efd21c261af64bee605698600c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:6d:63:c6:d9:87:dc:b8:bf:74:0f:b5:c7:05:bb:49:e7:11:
17:56:3f:09:38:ca:f8:6f:07:fa:a7:56:06:3f:c1:00:47:94:
d8:4f:6b:62:84:7c:5e:10:93:05:24:8b:94:2f:52:c2:e5:a9:
17:a6:bd:2b:69:24:e4:b4:ee:a8:a0:2a:98:bb:0f:44:06:0b:
d1:9c:56:fb:2b:4b:f7:c4:90:73:fe:94:50:71:e6:97:fc:ca:
69:63:98:ab:03:cd:ea:33:34:2a:03:62:47:1a:5f:ab:eb:ec:
74:47:77:8f:17:4e:93:ed:23:9f:35:0a:9b:26:7a:f7:68:df:
80:88:4a:a9:81:c9:3e:78:eb:d5:e6:23:fa:c8:12:95:12:19:
f8:d5:12:8a:eb:1e:b4:2c:4a:22:dd:d5:04:98:4d:c4:7f:e9:
03:76:51:bb:f9:a7:2e:39:1a:67:9f:aa:f5:91:6c:6d:7f:a8:
3b:91:b9:b6:d8:eb:0a:a4:55:81:1f:fa:84:53:a9:9e:9a:08:
e5:6c:24:9f:5b:45:24:d3:4b:80:e5:cc:f6:c3:9d:35:5f:d6:
bc:a1:00:e1:d2:81:84:d5:02:c7:9a:e6:a7:ba:be:68:d1:39:
ed:d7:24:82:94:ab:e5:3b:bd:ed:ae:10:23:e1:ba:93:80:a9:
57:e1:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org