Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21900da0-a9eb-4d98-bf72-d415b2bfa7e0/971292fdc9defbb1ccf15181580011c98e44bd56.roa
File: 971292fdc9defbb1ccf15181580011c98e44bd56.roa (raw, json)
Hash identifier: bry+tCa11rB5tl5/mESiRgD1NRSK1sjwyIzO3VFpKys=
Subject key identifier: B0:E5:31:6B:56:F1:BD:B1:45:29:F6:54:4E:37:53:AB:88:25:F5:39
Certificate issuer: /CN=7301727ac2c04bf0b74625766b1a1dc6f6fa9b2f
Certificate serial: 1285C5
Authority key identifier: B8:33:7A:CF:B6:CD:40:63:B4:39:7B:9E:08:33:D9:04:00:5D:58:2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7301727ac2c04bf0b74625766b1a1dc6f6fa9b2f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21900da0-a9eb-4d98-bf72-d415b2bfa7e0/971292fdc9defbb1ccf15181580011c98e44bd56.roa
Signing time: Thu 28 Oct 2021 14:55:44 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 264780
IP address blocks: 168.228.248.0/22 maxlen: 24
170.247.136.0/22 maxlen: 24
200.12.28.0/22 maxlen: 24
200.126.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213893 (0x1285c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7301727ac2c04bf0b74625766b1a1dc6f6fa9b2f
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=971292fdc9defbb1ccf15181580011c98e44bd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:95:34:d0:8c:77:7d:56:3e:e5:f9:55:4d:
c7:9c:2f:d3:2e:a2:2b:e8:37:97:3a:fa:df:b2:b9:
51:a5:15:d3:2b:09:1e:2c:bf:12:11:42:8e:b5:e9:
7c:b8:49:d1:4a:ed:56:bf:0a:01:ae:31:f4:65:55:
ba:29:b3:62:fe:53:8a:9a:37:92:73:43:40:0a:ae:
cf:a3:e8:a1:dc:59:09:b3:ef:25:34:9b:70:2b:d9:
26:2f:d9:4a:ba:9c:86:6b:c2:75:e4:d0:0d:4d:b8:
30:fd:cf:49:40:29:61:e7:d8:86:be:2a:f4:db:c9:
a2:3c:74:34:1f:b7:f0:eb:82:0c:8f:ba:0c:77:01:
3a:b0:aa:4b:38:a1:9c:96:38:1a:57:aa:79:0c:e0:
5a:93:51:47:3e:22:6d:0a:f8:d1:56:c9:75:f2:a6:
c0:9a:bb:76:c6:3c:c0:f0:95:ab:16:4e:af:e2:c8:
fd:27:e1:65:65:6c:5e:7f:56:09:16:b9:d1:8e:bd:
79:5b:61:76:69:0c:79:93:d4:7b:3b:fb:91:2d:88:
28:35:e0:48:5e:0c:d2:40:1a:b8:fb:fe:4e:e4:91:
78:40:11:35:85:fc:3d:7d:33:12:d6:8c:60:dc:02:
99:50:66:1e:98:5b:93:e2:f2:e8:e0:83:b5:21:85:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E5:31:6B:56:F1:BD:B1:45:29:F6:54:4E:37:53:AB:88:25:F5:39
X509v3 Authority Key Identifier:
keyid:B8:33:7A:CF:B6:CD:40:63:B4:39:7B:9E:08:33:D9:04:00:5D:58:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7301727ac2c04bf0b74625766b1a1dc6f6fa9b2f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21900da0-a9eb-4d98-bf72-d415b2bfa7e0/971292fdc9defbb1ccf15181580011c98e44bd56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/21900da0-a9eb-4d98-bf72-d415b2bfa7e0/7301727ac2c04bf0b74625766b1a1dc6f6fa9b2f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.248.0/22
170.247.136.0/22
200.12.28.0/22
200.126.32.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:c6:6b:f4:c4:17:bf:01:12:c8:60:38:2e:8d:f4:12:ee:39:
19:5d:14:8b:9b:c3:2e:48:dc:95:89:23:3b:35:d6:e4:44:0e:
a9:c7:b0:5d:71:7c:79:bd:8d:82:7c:f0:fa:93:5a:d2:0a:65:
60:d3:ee:33:12:0f:21:fe:3e:99:ab:35:42:5d:a6:c5:61:90:
b9:38:9a:d2:95:b0:74:a9:8f:54:ce:d7:2a:72:0f:6f:71:ea:
31:cd:08:70:74:f1:ed:cd:05:ba:a6:0c:d1:6e:6f:0c:bb:94:
d4:a7:8d:ee:ca:8d:a6:d4:70:3f:a4:89:bf:59:10:6b:79:47:
53:9f:90:5b:40:f2:ff:f0:ca:ec:f0:38:25:c3:70:83:8e:1d:
71:f9:95:59:c5:40:43:49:d9:19:04:63:c6:bb:0e:41:3f:38:
09:0f:83:7b:73:96:4e:a4:de:d5:aa:46:6a:f4:8b:76:a6:7f:
2d:e3:06:b9:70:3e:5d:ac:c3:45:63:3c:ec:00:7f:c9:10:0a:
52:94:fa:b1:dd:22:ec:ff:e5:af:2a:5e:51:c9:91:b2:9e:97:
48:eb:91:04:7a:9f:57:6a:24:9d:1b:0a:29:df:f9:80:95:66:
bf:39:02:41:2c:8b:24:7f:2e:e1:41:3e:7e:06:73:52:6a:c6:
2a:94:b9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org