Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/810daabe70a48e952efc9614cc88fe0a1096559a.roa
File: 810daabe70a48e952efc9614cc88fe0a1096559a.roa (raw, json)
Hash identifier: 5WhrNkyPG55iFq5ZAfnDm47/wNCeMgku1PvpB7uM6nE=
Subject key identifier: 30:B8:8E:99:B2:E1:B3:7B:E2:EB:AF:9E:BF:7D:90:F3:9C:75:42:9D
Certificate issuer: /CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Certificate serial: 1CF690
Authority key identifier: 2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/810daabe70a48e952efc9614cc88fe0a1096559a.roa
Signing time: Thu 07 Sep 2023 14:58:19 +0000
ROA not before: Wed 06 Sep 2023 14:58:19 +0000
ROA not after: Sun 07 Sep 2025 14:58:19 +0000
asID: 263812
IP address blocks: 200.107.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898128 (0x1cf690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Validity
Not Before: Sep 6 14:58:19 2023 GMT
Not After : Sep 7 14:58:19 2025 GMT
Subject: CN=810daabe70a48e952efc9614cc88fe0a1096559a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:08:b4:39:c2:1f:cc:39:b7:f8:b1:34:af:9c:
6b:63:45:76:ff:5a:67:bf:c2:d1:f6:44:22:67:12:
71:2d:65:3c:bb:05:20:1c:a3:c4:c0:7c:d6:99:77:
44:28:a9:6c:54:ab:83:c4:52:25:0f:d0:7a:44:4a:
e4:46:03:9d:06:f2:d9:1c:2c:a0:a1:56:0a:16:97:
62:36:b9:66:bd:5b:c8:c4:a1:82:ed:80:e9:69:c5:
96:3b:1f:ee:35:bf:c2:a4:f3:be:e7:fc:a3:3b:32:
3c:c6:9b:25:86:b2:3e:09:76:6b:4e:a9:8f:dc:f2:
88:76:2d:01:e2:6a:69:c0:69:9d:52:88:40:4e:23:
13:24:62:9c:47:76:b5:d3:2f:33:5a:15:47:1f:42:
2f:9a:2d:51:29:d7:7f:13:0a:2b:6f:de:49:5b:5d:
31:2e:28:2d:56:85:9d:7f:aa:59:e4:18:d3:7c:51:
99:9b:b3:84:5d:fb:f1:a5:26:27:f8:9e:d5:a3:73:
37:b9:97:91:74:62:9d:e5:ea:2c:f7:b5:da:84:b1:
8b:72:ce:33:10:db:31:db:39:3e:50:f9:4b:fd:7e:
ea:56:54:d1:47:7e:5d:6d:ef:f7:75:38:68:48:2e:
9b:16:1a:e5:78:05:27:85:e0:e2:58:73:b5:2e:a3:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B8:8E:99:B2:E1:B3:7B:E2:EB:AF:9E:BF:7D:90:F3:9C:75:42:9D
X509v3 Authority Key Identifier:
keyid:2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/810daabe70a48e952efc9614cc88fe0a1096559a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.107.204.0/22
Signature Algorithm: sha256WithRSAEncryption
10:79:62:85:ad:5d:4e:e2:bf:66:10:aa:cf:65:d1:d3:6c:39:
6a:47:45:f2:7f:05:ec:2b:44:b6:a3:8d:87:09:c0:2d:e6:5d:
c0:60:0c:2e:13:80:46:72:43:c5:b8:76:b6:4c:00:2f:f6:54:
96:b0:d0:36:06:d8:bc:00:a5:11:c3:bb:fa:b4:06:71:be:54:
7e:a4:cc:d2:39:4d:0c:64:83:b5:91:a6:85:88:c6:a9:8d:e8:
62:45:89:ad:e3:49:56:09:bb:35:7e:42:25:a7:05:bf:f7:b0:
ce:0b:15:bb:5d:f8:50:9f:59:9b:5d:9a:45:bd:0f:f2:85:fc:
49:6c:1c:8a:b7:6d:a4:29:e1:77:66:74:af:93:51:58:b2:ca:
eb:ab:e5:9b:fe:0b:b2:36:48:f9:10:d3:39:46:fc:5f:e6:96:
0e:7e:f5:b3:4b:9a:6f:5b:ab:d6:0b:20:3c:68:24:8a:a9:79:
23:04:b6:ae:4d:70:1d:fd:4c:9d:85:3c:b4:e0:d9:51:a1:d5:
a9:79:24:63:6b:a0:e1:2d:92:84:46:0b:2c:7f:38:fd:b9:03:
3e:c0:a2:88:21:20:f6:e5:c6:b0:63:66:d0:76:81:75:08:c4:
5e:42:e1:f9:0b:11:cd:a1:51:22:22:1a:ad:0e:c8:9d:94:ba:
e3:00:c2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:32:03 2025 by rpki-client