Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/70f010e15f0c302a27282ba154992c37ad738e57.roa
File: 70f010e15f0c302a27282ba154992c37ad738e57.roa (raw, json)
Hash identifier: XRpkSLEGL8uCWehpvlAw9ixEKAhMWizP6dg0vcKZQmc=
Subject key identifier: 48:E9:6A:68:A8:A0:78:6C:19:32:C4:46:AF:C3:9E:0C:16:72:BE:CE
Certificate issuer: /CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
Certificate serial: 271B8F
Authority key identifier: E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/70f010e15f0c302a27282ba154992c37ad738e57.roa
Signing time: Thu 09 Nov 2023 18:28:57 +0000
ROA not before: Thu 09 Nov 2023 18:28:56 +0000
ROA not after: Sun 09 Nov 2025 18:28:56 +0000
asID: 16732
IP address blocks: 200.59.44.0/23 maxlen: 24
200.59.50.0/23 maxlen: 24
200.59.52.0/22 maxlen: 24
200.59.56.0/22 maxlen: 24
200.59.192.0/20 maxlen: 24
200.59.36.0/22 maxlen: 24
200.59.32.0/20 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2562959 (0x271b8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
Validity
Not Before: Nov 9 18:28:56 2023 GMT
Not After : Nov 9 18:28:56 2025 GMT
Subject: CN=70f010e15f0c302a27282ba154992c37ad738e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:30:2a:f1:17:53:76:ac:bc:6b:b3:fc:9a:
f4:68:06:f1:73:73:a2:54:a6:88:fe:46:b1:27:c0:
4f:61:3e:3f:86:60:6f:4c:12:eb:dc:18:a7:20:fe:
38:5a:ed:fd:3d:6f:ad:25:c5:2d:b1:ec:f9:db:05:
f6:30:66:c3:c6:61:bc:d3:e5:1f:87:7e:f3:e4:8b:
e5:2d:30:cb:89:f3:d4:12:79:cd:08:ef:c3:ef:74:
43:fe:23:7e:ee:37:5b:64:dd:f4:27:b2:b2:08:84:
2d:56:cd:d7:ba:ca:26:ad:fc:d8:98:68:e7:23:16:
8c:d9:58:42:46:62:8f:5b:bd:ae:60:ee:95:28:35:
20:d1:93:85:50:1b:0d:25:a8:72:8f:f9:65:d3:76:
d9:df:a3:4b:41:12:64:74:8d:95:1e:93:cd:5f:36:
e3:c6:df:0c:5d:a5:79:16:f5:3e:05:3b:2c:26:c3:
01:75:b1:8e:9b:25:e3:f7:69:75:5f:b1:c2:87:b2:
0e:be:e3:ad:81:f0:ce:3c:a4:47:8b:7d:4a:02:8a:
92:0a:9e:f1:5a:51:42:21:70:e9:4a:13:21:9e:4c:
0c:8a:d5:19:24:8b:dd:27:9d:11:20:78:ec:e1:48:
86:76:5d:59:f4:56:21:ed:b4:23:28:e1:c9:af:9e:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E9:6A:68:A8:A0:78:6C:19:32:C4:46:AF:C3:9E:0C:16:72:BE:CE
X509v3 Authority Key Identifier:
keyid:E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/70f010e15f0c302a27282ba154992c37ad738e57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/07a3e63d1966870c34f83b79e6705d8dc3f9b809.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.59.32.0/20
200.59.50.0-200.59.59.255
200.59.192.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:92:a0:1e:06:f3:a9:3c:a2:e9:84:db:4b:68:eb:00:39:c8:
22:23:4c:7f:39:3e:b8:39:80:b1:30:fc:b8:90:21:45:dd:63:
9f:7c:f9:ba:4d:08:d2:ad:91:69:56:e0:99:2d:4c:7e:11:29:
69:dc:59:f6:ee:8e:46:27:98:56:54:f2:e6:d1:9d:e4:4c:bd:
99:92:8e:15:e6:a6:ff:3d:a9:94:27:38:cf:f5:ed:5b:a1:4b:
66:82:13:f9:54:aa:57:88:bc:4a:20:52:70:1a:45:86:fe:53:
6f:2c:8a:fa:bf:0f:24:9e:1e:8d:76:d2:ff:fe:c3:a6:3e:a2:
95:23:74:33:66:5b:dd:22:15:8d:78:1c:7f:7b:8f:01:d1:c6:
e0:5b:69:a6:e9:70:5d:74:a5:8c:9d:a7:10:17:02:2f:6f:6c:
5f:47:46:ad:a6:42:75:42:9b:8e:40:14:c6:86:d1:f1:a9:65:
73:0d:63:9b:e4:b8:8c:b5:42:dd:21:b1:d8:6f:5f:03:44:da:
a7:dc:d5:e9:09:08:cb:cf:40:d5:74:97:78:57:27:89:a7:3f:
90:8e:9b:32:5d:b1:06:e1:5f:eb:73:88:df:a0:4b:f8:b2:fd:
ac:72:be:6d:1e:4e:9f:23:18:53:2c:20:b1:4b:54:3f:86:e9:
b3:38:5d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org