Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/1c8827551aaba06577666c1de34eaeaf4c02ba24.roa
File: 1c8827551aaba06577666c1de34eaeaf4c02ba24.roa (raw, json)
Hash identifier: 4oRbFK/WKHbKNxHyNlbMyG1UMsU4iimeVOu1uX4bYIs=
Subject key identifier: 1F:96:CA:99:09:51:15:5C:77:A4:66:67:04:D1:9A:91:94:3E:8C:17
Certificate issuer: /CN=8a34b88edc7711ba98c357c0cd7c26b4d31bbe13
Certificate serial: 29BC86
Authority key identifier: AC:7D:06:CC:8D:9C:83:2B:CF:18:0B:CB:6C:01:5E:C2:4A:6D:A7:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/1c8827551aaba06577666c1de34eaeaf4c02ba24.roa
Signing time: Tue 02 Apr 2024 19:20:17 +0000
ROA not before: Tue 02 Apr 2024 19:20:17 +0000
ROA not after: Thu 02 Apr 2026 19:20:17 +0000
asID: 27947
IP address blocks: 192.188.59.0/24 maxlen: 24
200.9.176.0/24 maxlen: 24
200.10.147.0/24 maxlen: 24
200.10.148.0/22 maxlen: 24
200.126.0.0/19 maxlen: 24
2801:0:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2735238 (0x29bc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a34b88edc7711ba98c357c0cd7c26b4d31bbe13
Validity
Not Before: Apr 2 19:20:17 2024 GMT
Not After : Apr 2 19:20:17 2026 GMT
Subject: CN=1c8827551aaba06577666c1de34eaeaf4c02ba24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:ed:89:bd:0f:c6:8c:2b:18:75:0d:c2:60:
d0:32:6c:ef:f1:a3:0b:70:b1:23:66:d0:27:9c:b1:
8d:21:05:cf:ff:f4:61:c9:1e:d0:ac:2e:58:53:0c:
40:b6:1e:50:d5:59:9a:4d:4b:9c:10:88:c3:ac:79:
f1:e8:78:1c:bf:1d:d9:ce:42:90:9c:48:79:7e:e8:
57:1e:e7:f3:93:e4:26:e7:52:ee:4b:f7:8f:59:1d:
13:80:66:97:c5:0a:16:23:e6:1f:e5:8b:de:3f:59:
6a:00:9b:96:bc:ae:ca:83:dd:0c:42:83:a5:d6:54:
20:18:0c:44:89:e1:e0:27:38:25:71:f8:24:f0:3d:
d0:e2:5d:b1:51:98:b7:ff:2c:e9:07:f4:c3:fe:1b:
ce:a0:77:38:4a:35:96:c6:b9:5a:01:d1:9a:81:3b:
5b:ba:03:78:83:2e:0e:5f:75:b9:ef:8b:db:5e:32:
19:e1:01:ac:09:54:65:cd:3d:63:39:bf:8f:1b:89:
3c:31:f9:62:b4:f2:4e:c0:ae:81:55:21:5e:d1:cf:
0d:7c:05:f4:ee:29:22:ee:c1:b7:52:f2:b0:fa:22:
ee:fe:2b:d3:3c:15:40:77:0b:32:fa:30:3f:ca:20:
e6:ee:cd:86:df:b4:de:96:81:8b:88:ae:c6:bc:39:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:CA:99:09:51:15:5C:77:A4:66:67:04:D1:9A:91:94:3E:8C:17
X509v3 Authority Key Identifier:
keyid:AC:7D:06:CC:8D:9C:83:2B:CF:18:0B:CB:6C:01:5E:C2:4A:6D:A7:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/1c8827551aaba06577666c1de34eaeaf4c02ba24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.59.0/24
200.9.176.0/24
200.10.147.0-200.10.151.255
200.126.0.0/19
IPv6:
2801:0:20::/48
Signature Algorithm: sha256WithRSAEncryption
3b:46:b6:01:d6:04:9a:26:19:c2:7f:fe:2e:23:1a:1b:e6:a5:
74:e7:3d:5e:03:d9:f7:85:8e:ac:a6:f8:41:ab:de:fa:ee:68:
d9:65:56:21:9b:83:bc:e4:cd:99:d7:9b:44:cd:cb:fc:98:2b:
d9:c1:55:32:a0:95:bf:6d:6a:18:bf:72:00:18:f9:d4:1f:80:
e2:f0:f6:7c:e2:63:e0:d6:48:97:3f:04:f9:84:01:45:f6:dc:
92:37:74:01:2f:3c:fe:82:17:f2:e7:85:d8:d0:cf:34:fb:76:
7e:f3:d6:3a:c0:23:45:54:be:79:58:cd:dc:c8:76:40:2a:28:
46:31:f9:fd:c2:79:1e:18:83:a8:80:04:54:4f:da:3f:84:b1:
64:49:0a:3b:06:41:08:fe:01:22:2a:2b:7e:35:95:1d:e8:7c:
7d:bc:53:34:b8:5c:68:b2:6c:41:1a:10:79:12:8f:c3:9c:ae:
29:4e:28:00:af:a8:6d:e3:e8:d5:33:d8:de:2b:78:70:69:b9:
db:1c:23:55:98:e0:a3:01:6a:05:8d:19:1d:6e:e4:1f:40:cd:
15:b1:a9:8a:b8:b2:84:64:c4:12:e4:ec:43:98:01:4d:4d:39:
c8:f9:54:6a:28:83:7b:2e:27:19:ee:1b:f7:9e:1e:16:b7:3b:
f3:1c:25:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org