Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/4e21118886b5d1722af28a7192410dbdd2944c60.roa
File: 4e21118886b5d1722af28a7192410dbdd2944c60.roa (raw, json)
Hash identifier: IsKkjVIv6whXiSaKPnF/vRUccmC6G0ILCizUTtn03DQ=
Subject key identifier: 15:AB:36:A2:C4:53:10:96:8A:FA:1F:7D:F3:98:8F:14:5A:F7:C2:A2
Certificate issuer: /CN=185ca6bb80f033ceba341dcaab97097fc3891bcd
Certificate serial: 055035
Authority key identifier: BB:72:A9:73:72:8A:BF:4E:93:B7:E0:82:F3:30:CB:6E:16:D3:36:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/185ca6bb80f033ceba341dcaab97097fc3891bcd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/4e21118886b5d1722af28a7192410dbdd2944c60.roa
Signing time: Fri 05 May 2023 16:48:36 +0000
ROA not before: Thu 04 May 2023 16:48:36 +0000
ROA not after: Mon 05 May 2025 16:48:36 +0000
asID: 28458
IP address blocks: 200.23.53.0/24 maxlen: 24
200.23.168.0/23 maxlen: 24
200.23.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348213 (0x55035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185ca6bb80f033ceba341dcaab97097fc3891bcd
Validity
Not Before: May 4 16:48:36 2023 GMT
Not After : May 5 16:48:36 2025 GMT
Subject: CN=4e21118886b5d1722af28a7192410dbdd2944c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:94:46:d0:a3:7d:0f:70:73:a9:17:84:48:
24:a6:99:39:88:48:df:54:ca:d2:f8:87:c3:6b:ac:
32:91:7c:2a:80:b5:31:95:a5:4d:a5:fd:ac:b5:7a:
29:42:d3:2a:66:2f:7a:e0:28:91:9f:e8:4b:43:e9:
a2:2e:a9:76:01:a1:7e:8b:6e:04:26:ca:3e:5b:93:
61:e4:c4:63:bd:9d:d7:ab:d2:17:d0:1e:77:b8:05:
a6:93:8e:fc:77:62:f3:49:1a:60:c1:0f:9b:88:10:
a7:d6:20:5a:80:c4:22:53:b5:30:89:e3:c5:d0:23:
3d:5b:8c:ec:86:e5:3f:ab:02:c9:49:f4:4e:43:52:
28:fe:9b:ad:45:02:fc:81:a6:e3:67:d1:f1:af:88:
44:b7:96:74:19:97:b2:1e:7b:de:ae:bd:8b:a2:b4:
3b:6d:3a:5b:06:b7:46:d6:d1:f8:dd:53:f1:d9:23:
f1:12:a2:9b:c1:b2:a3:84:00:17:3b:67:ec:40:18:
0b:be:18:fb:d5:48:8e:a7:2b:a5:a4:6e:6e:38:c4:
5f:db:08:a6:ca:82:59:bd:0f:59:37:c8:0d:b5:37:
10:f4:35:27:e8:e4:e1:7d:33:5b:f8:a0:f1:ac:b8:
10:e0:22:00:e1:6e:a6:1b:88:a8:9b:fb:6f:75:38:
3c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AB:36:A2:C4:53:10:96:8A:FA:1F:7D:F3:98:8F:14:5A:F7:C2:A2
X509v3 Authority Key Identifier:
keyid:BB:72:A9:73:72:8A:BF:4E:93:B7:E0:82:F3:30:CB:6E:16:D3:36:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/185ca6bb80f033ceba341dcaab97097fc3891bcd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/4e21118886b5d1722af28a7192410dbdd2944c60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/185ca6bb80f033ceba341dcaab97097fc3891bcd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.23.53.0/24
200.23.168.0-200.23.170.255
Signature Algorithm: sha256WithRSAEncryption
5d:17:78:94:f9:55:21:a1:dd:12:26:e5:6a:4f:0d:4a:ae:09:
88:1f:2a:69:cf:89:d5:64:63:76:eb:f0:1d:b8:2e:9a:18:dc:
3e:31:06:b7:10:03:7a:66:fd:9f:7a:ff:04:ed:59:15:ce:8a:
b2:27:e1:84:15:dc:15:a2:6f:f6:29:84:85:f5:01:34:d6:83:
b2:a2:75:32:52:fe:a0:e3:f1:c5:c8:f2:71:e2:3f:5e:75:a9:
b5:37:92:6a:70:4e:4d:e1:3a:6d:ec:35:92:52:7d:95:dd:6d:
04:7e:20:7c:88:f9:47:ed:44:68:15:53:5f:31:14:04:af:60:
be:cf:b8:0c:b6:6b:59:85:de:fb:a9:e7:8d:a4:56:09:a5:08:
fd:46:c5:bc:8a:ae:22:2e:1b:d0:80:f5:c7:b0:36:70:e3:30:
9d:bc:c0:e6:03:d8:96:f2:07:f9:ce:bc:16:64:65:0e:73:25:
62:a5:7b:7b:1e:70:74:bf:3e:7a:13:c9:5d:44:4b:1a:13:d8:
ee:02:bf:03:64:68:76:ea:7a:8a:d7:79:db:bf:e6:b9:38:33:
1f:49:d9:c3:a0:d4:6b:e5:31:43:98:e5:8a:36:cc:ba:cf:11:
8f:08:c3:40:04:0e:05:d9:64:91:0f:f5:90:e9:4c:48:19:b0:
c3:2b:7d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:45:47 2025 by rpki-client