Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/c687d2ec28e0084df7901a3d42cd0bcef2df7df5.roa
File: c687d2ec28e0084df7901a3d42cd0bcef2df7df5.roa (raw, json)
Hash identifier: kGl4W2apBluPt/lcTFWnm1Q4OceWEOtoHFPTeJ0TtLs=
Subject key identifier: FA:51:BE:F8:3D:8A:F9:CF:94:FC:ED:44:C9:11:E9:C0:3C:70:DF:B5
Certificate issuer: /CN=df2dedcd12e6d3557cb0c4aed3914512c97a3eac
Certificate serial: 05EA44
Authority key identifier: 9A:EB:C5:26:E2:E4:AF:E5:26:35:E4:A0:85:E0:DD:3D:D9:87:F0:4E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df2dedcd12e6d3557cb0c4aed3914512c97a3eac.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/c687d2ec28e0084df7901a3d42cd0bcef2df7df5.roa
Signing time: Wed 20 Mar 2024 01:06:17 +0000
ROA not before: Wed 20 Mar 2024 01:06:16 +0000
ROA not after: Fri 20 Mar 2026 01:06:16 +0000
asID: 269913
IP address blocks: 200.123.228.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387652 (0x5ea44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2dedcd12e6d3557cb0c4aed3914512c97a3eac
Validity
Not Before: Mar 20 01:06:16 2024 GMT
Not After : Mar 20 01:06:16 2026 GMT
Subject: CN=c687d2ec28e0084df7901a3d42cd0bcef2df7df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:f2:5f:0a:27:57:8f:8f:56:2a:80:d3:35:
92:85:d6:22:da:9d:f6:80:e9:00:67:9c:71:89:13:
c3:15:2f:53:91:a2:2a:f3:c8:ff:34:73:2c:82:47:
53:06:db:53:58:52:0e:5b:37:e9:ac:51:f2:f9:91:
5c:fd:a1:b8:50:86:7a:3c:80:0a:04:96:10:d1:8e:
1b:0f:83:fa:93:11:25:53:0f:0b:13:91:87:19:4b:
7a:05:aa:ab:16:af:5f:ae:43:07:4b:30:da:8c:1c:
65:e1:f9:e3:21:e7:81:c8:7c:82:06:14:9e:9c:94:
83:68:1b:7d:bf:4f:f8:41:d4:2c:e4:99:1c:4b:30:
63:77:42:b9:16:48:8d:c4:1f:a0:86:d3:b1:18:b8:
00:c6:22:e3:14:97:0a:d7:93:83:bc:f5:8f:15:9b:
42:13:5e:98:96:bf:c0:1a:0c:f4:a5:93:49:e0:09:
43:3e:6d:3c:88:44:9c:bd:12:fa:fb:11:b5:cb:3e:
28:0c:ba:b8:21:a5:61:f8:1e:5c:47:8e:05:5d:80:
df:fc:95:38:0b:5f:0f:a7:0c:fb:d6:9b:e3:c9:52:
d7:99:3a:2f:a4:f4:74:10:7e:6d:7f:9b:ae:cf:ff:
21:6b:2d:e2:1b:6b:1f:a7:3f:bc:88:7c:6f:47:41:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:51:BE:F8:3D:8A:F9:CF:94:FC:ED:44:C9:11:E9:C0:3C:70:DF:B5
X509v3 Authority Key Identifier:
keyid:9A:EB:C5:26:E2:E4:AF:E5:26:35:E4:A0:85:E0:DD:3D:D9:87:F0:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df2dedcd12e6d3557cb0c4aed3914512c97a3eac.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/c687d2ec28e0084df7901a3d42cd0bcef2df7df5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/df2dedcd12e6d3557cb0c4aed3914512c97a3eac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.228.0/22
Signature Algorithm: sha256WithRSAEncryption
74:f1:bd:2c:70:e5:e8:2a:1d:82:5c:77:83:f7:90:77:c9:41:
d6:59:e4:d0:93:14:be:e6:02:50:3f:4e:c2:f3:56:9f:a4:20:
65:c9:d2:bf:c1:45:9c:c1:59:14:a9:4f:ac:7b:32:06:bc:ae:
f1:d7:2b:8a:34:82:98:37:97:68:ef:b1:72:a6:28:bb:db:35:
cf:dd:63:f4:d9:a7:f6:db:af:5f:0d:90:83:cd:03:45:06:1e:
6b:46:d8:4a:68:c5:a9:11:5a:74:0f:1a:a4:6a:cd:f8:78:86:
2d:50:6c:8a:18:ac:d4:90:ef:b2:28:58:04:2f:5e:23:4b:bd:
e4:95:70:5d:7d:dc:2e:6c:ae:98:cb:e7:8f:79:eb:c9:92:47:
a0:76:52:4a:9a:6b:5c:e4:17:42:ce:51:c3:24:c5:96:cd:8a:
ff:bd:43:b9:5e:13:0f:ba:12:34:2b:2a:e5:75:9e:19:e2:fd:
bb:72:6e:8a:d3:51:bc:2b:d5:16:4d:54:7f:5f:3f:04:15:9f:
1d:6d:ba:b9:fe:22:bf:e6:d8:1e:73:f1:6e:c7:d9:93:72:44:
62:2f:1e:42:56:27:97:ea:9b:1f:b3:55:f3:89:15:a3:b7:b7:
ca:97:76:24:8e:f7:10:27:5b:69:66:f3:eb:d8:97:51:0f:fa:
7d:6c:8d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org