Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27813.roa
File: AS27813.roa (raw, json)
Hash identifier: mlUnpKczEOz8dbOJH3FcbMkb/wnku/Dpg81Vk1SxggY=
Subject key identifier: 8C:80:9F:1D:0D:60:C7:78:7A:7A:72:3E:70:AF:1C:F9:9F:C8:AA:BA
Certificate issuer: /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial: 5F4BFE24B48D95E5301C18B156E3AB9EA5476C9E
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27813.roa
Signing time: Tue 05 Mar 2024 18:07:58 +0000
ROA not before: Tue 05 Mar 2024 18:02:58 +0000
ROA not after: Tue 04 Mar 2025 18:07:58 +0000
asID: 27813
IP address blocks: 201.254.236.0/24 maxlen: 24
201.254.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:4b:fe:24:b4:8d:95:e5:30:1c:18:b1:56:e3:ab:9e:a5:47:6c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Validity
Not Before: Mar 5 18:02:58 2024 GMT
Not After : Mar 4 18:07:58 2025 GMT
Subject: CN=8C809F1D0D60C7787A7A723E70AF1CF99FC8AABA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f4:31:7c:15:d1:2d:9e:52:2d:9c:7f:6e:90:
63:25:40:a3:07:43:99:4d:8e:20:ba:1a:01:a1:73:
b4:df:66:01:95:8a:c9:8d:ef:5c:22:d8:76:6d:c4:
30:31:29:53:3f:49:25:44:53:30:19:63:f0:c6:81:
5e:f4:51:31:5e:0e:fe:47:ba:48:55:46:a7:2d:16:
09:3f:3e:c0:96:2d:52:55:ad:c0:02:43:a1:e3:94:
bc:08:39:cd:06:41:52:e8:dd:a2:e9:61:87:99:30:
a7:65:16:08:ec:24:79:92:ff:90:56:25:75:ba:52:
2a:2b:a7:15:cc:54:e8:8a:4e:4e:8e:5f:91:a1:40:
3b:dd:05:52:fa:77:96:53:4a:53:68:24:1e:92:e8:
93:ef:9a:e6:c7:a2:46:f7:3c:de:33:95:f7:4a:a7:
dc:82:fc:62:27:c5:a7:62:44:3b:f3:e1:05:18:a7:
79:dd:f8:8b:d0:f5:82:7e:1f:1c:8c:12:88:95:47:
b8:74:68:31:27:9d:6f:bc:9e:34:22:2d:31:76:1f:
15:ef:9f:7a:30:90:6d:e4:f6:e6:6a:b4:94:48:80:
32:59:de:94:d4:ab:61:66:27:c7:50:cf:a7:e5:ff:
8b:6a:06:7c:9e:ab:59:f1:55:9e:38:d1:24:11:05:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:80:9F:1D:0D:60:C7:78:7A:7A:72:3E:70:AF:1C:F9:9F:C8:AA:BA
X509v3 Authority Key Identifier:
keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27813.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.254.236.0/24
201.254.238.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e8:30:28:0b:a6:30:32:05:33:cc:9a:f6:e4:ef:b5:51:73:
0a:37:fe:85:be:63:5b:c3:91:4c:1e:04:97:7d:67:64:fe:d5:
51:a1:fb:8c:b7:b5:f2:bb:cc:f8:82:ad:4d:09:d7:a8:6c:b2:
b8:00:8e:e0:65:c2:bf:98:ee:21:f4:9f:1a:5d:ee:30:e2:72:
bb:d1:1e:75:e2:9e:19:cd:83:d2:b5:64:ad:8b:9a:fb:ef:16:
5b:c8:7f:1d:b0:96:46:61:3d:a5:98:dc:5e:71:26:c6:cc:93:
3f:ad:97:58:46:23:07:35:0c:03:c6:b3:1b:a1:4f:f5:0f:05:
4d:d0:81:50:63:58:d7:0b:1a:c7:b3:76:33:40:bc:3b:c0:99:
53:01:1d:84:74:9a:e7:f7:de:9e:69:bf:bc:68:25:45:55:29:
53:ac:90:01:e2:7a:e8:16:e3:8b:3e:9d:d3:de:41:4b:a5:a0:
f6:bd:e8:6f:b4:18:ac:c6:28:1b:18:a7:e0:db:7a:b5:ff:46:
23:52:b4:b1:b0:fd:de:37:e0:9c:1c:e2:7e:ea:62:d5:d9:0f:
d6:e0:13:08:11:c2:b4:04:39:e8:13:20:41:05:cb:1f:73:06:
2c:f9:74:e5:ee:18:90:cd:ce:4b:2e:da:fc:f4:76:b6:16:ad:
43:0f:27:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:15:46 2025 by rpki-client