Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3230302e312e3135362e302f32322d3234203d3e203237373735.roa
File: 3230302e312e3135362e302f32322d3234203d3e203237373735.roa (raw, json)
Hash identifier: mb2OknlzrqDdm8+eb77wO3KmhA20fRROMmgx6OLdJHU=
Subject key identifier: 91:DF:EB:87:B6:D0:70:3C:9C:35:B9:4C:54:5B:5F:56:A4:64:68:4E
Certificate issuer: /CN=E448655A46C905154A46DF19D5CADDB20B5D1153
Certificate serial: 6A574DD9540BF185F44C224B9E3B999135B6ABAF
Authority key identifier: E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3230302e312e3135362e302f32322d3234203d3e203237373735.roa
Signing time: Tue 05 Mar 2024 17:41:32 +0000
ROA not before: Tue 05 Mar 2024 17:36:32 +0000
ROA not after: Tue 04 Mar 2025 17:41:32 +0000
asID: 27775
IP address blocks: 200.1.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:57:4d:d9:54:0b:f1:85:f4:4c:22:4b:9e:3b:99:91:35:b6:ab:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E448655A46C905154A46DF19D5CADDB20B5D1153
Validity
Not Before: Mar 5 17:36:32 2024 GMT
Not After : Mar 4 17:41:32 2025 GMT
Subject: CN=91DFEB87B6D0703C9C35B94C545B5F56A464684E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:fa:87:2b:cc:a2:64:ab:f0:1b:50:dd:7e:
74:8a:32:9a:71:fa:14:51:cd:5d:e4:f7:bd:a8:f0:
3c:af:fc:75:a3:64:b5:d1:61:ba:c7:8d:05:b8:10:
f8:7c:79:6d:a0:f5:b7:82:1f:32:ae:f7:b7:e5:a6:
46:dc:e2:ac:23:55:97:04:f0:e6:fe:37:29:10:75:
d8:ac:a1:6b:a1:4c:2a:df:24:81:a7:62:e2:70:28:
01:5c:98:ea:e6:3b:fc:3b:d7:34:62:a4:88:52:58:
27:32:fe:14:28:33:64:2e:d4:37:ee:37:10:99:1e:
52:df:12:3c:df:26:19:ca:11:8b:d3:ec:8d:3a:f1:
45:12:4a:38:e4:b1:60:73:d9:4c:0d:bf:56:bb:5f:
6a:da:41:12:26:63:f7:3c:24:d5:55:6c:f2:8b:d8:
7d:f2:e7:ed:bd:f5:73:dc:44:c4:45:a1:88:44:64:
79:fb:42:d1:71:0d:e0:24:6f:31:36:f5:a6:31:e9:
55:f4:10:85:01:df:71:30:ea:d9:68:74:ce:9f:a8:
5b:e8:6c:3a:14:f7:b6:1a:19:b9:79:df:d2:b6:04:
c7:4e:3f:cd:f8:cc:55:d7:fe:a4:a2:02:2f:4a:1d:
ba:07:d7:4b:75:c6:4e:39:5e:fe:de:fd:b3:53:e8:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:EB:87:B6:D0:70:3C:9C:35:B9:4C:54:5B:5F:56:A4:64:68:4E
X509v3 Authority Key Identifier:
keyid:E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3230302e312e3135362e302f32322d3234203d3e203237373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.1.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:7c:f0:e5:7e:39:f4:e9:35:45:fd:5b:1c:a8:05:5a:e1:07:
fd:d9:d0:11:13:00:6e:42:5a:43:2f:93:a5:f3:1a:75:84:7a:
18:49:86:b0:5d:f3:a7:18:a2:17:6f:82:3d:53:70:a1:dc:a6:
5c:c2:86:dd:f8:ff:7e:17:dc:82:5f:b5:ad:7f:d8:26:4c:fa:
19:8a:24:5c:f6:1a:50:fc:a7:8d:96:eb:ca:a3:3a:e3:e3:c7:
80:08:c6:df:d9:04:35:b8:23:e1:8c:37:cc:b7:26:87:d5:92:
1c:35:61:e7:20:57:8a:ad:7a:e7:40:5e:49:21:95:3d:0f:be:
41:1e:c5:87:46:a1:4b:00:72:fb:65:0c:ce:71:6f:53:85:71:
40:06:8d:cc:eb:f9:0e:0a:69:9d:81:a7:b5:01:14:eb:58:60:
7c:b1:ec:e0:cd:e1:26:c9:55:4d:18:2a:d0:72:3a:83:8e:e7:
5d:ff:b9:9c:f8:eb:55:08:06:5b:b6:5b:c9:8b:18:0f:a4:95:
78:dd:7f:a5:09:d6:c9:e4:ea:70:0e:c7:99:c5:35:00:41:39:
cc:d2:0c:27:a7:d4:9e:c7:90:cd:ee:f8:bc:cf:d0:7d:b0:b1:
17:39:14:e6:46:e5:ca:2e:11:40:22:72:37:87:d9:40:40:ed:
e9:0b:8a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:18:52 2025 by rpki-client