Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/229fd5b5499ea38e8adceb7cdb1872555ff1c9f1.roa
File: 229fd5b5499ea38e8adceb7cdb1872555ff1c9f1.roa (raw, json)
Hash identifier: 8NGcQ+Y3y4U7CCrY5Rs+wJID6ohJGKOdOyvwjWfLfcU=
Subject key identifier: AF:09:D6:AE:82:36:A0:61:9B:3A:52:1E:AE:61:5F:5E:98:DA:EE:D9
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 249090
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/229fd5b5499ea38e8adceb7cdb1872555ff1c9f1.roa
Signing time: Fri 21 Jul 2023 20:55:32 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 52444
IP address blocks: 200.41.121.0/24 maxlen: 24
190.216.61.0/24 maxlen: 24
200.41.21.0/24 maxlen: 24
201.234.90.0/24 maxlen: 24
201.234.104.0/24 maxlen: 24
201.234.32.0/24 maxlen: 24
201.234.46.0/24 maxlen: 24
190.216.26.80/28 maxlen: 28
200.49.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2396304 (0x249090)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=229fd5b5499ea38e8adceb7cdb1872555ff1c9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:88:1a:50:a3:f6:b8:cc:19:7f:e1:ac:05:
87:08:e2:15:e9:86:4c:0f:bc:2d:1a:5e:e6:e3:08:
67:19:97:42:8e:08:9b:6a:4a:ec:b7:45:98:61:6d:
9f:87:09:2c:be:a4:87:d5:27:c2:3e:19:4d:ec:d3:
79:88:33:6f:97:b4:07:cc:a4:40:56:f3:27:93:d4:
39:40:f8:c1:7f:87:6b:73:1e:fd:20:4c:16:a6:d6:
d9:fc:e7:ff:b0:11:0a:e8:6d:1b:14:e6:a0:58:8c:
22:a2:f8:dd:78:3f:b3:da:85:83:df:82:2c:5f:d8:
c6:b3:4e:01:ce:ba:86:79:d9:86:7f:48:8e:c2:ec:
e1:f1:3a:9f:99:94:79:22:5b:57:ef:76:86:67:3f:
c3:3a:78:27:bd:33:24:24:6c:6f:f4:1d:a0:45:a6:
de:3e:67:dc:ba:2c:59:7b:3e:b2:65:58:4c:c4:a4:
d0:62:0c:d6:ff:3d:fd:79:92:7c:2e:04:7a:8a:66:
06:b8:93:fc:9d:6e:2d:40:e9:a2:b8:b7:65:54:e9:
5b:a8:ca:0d:f6:cf:03:8c:bd:ed:7d:45:18:cd:1f:
8c:67:cc:ce:ad:de:eb:e9:3b:9c:10:34:f1:12:23:
59:41:f2:c9:84:bd:64:9c:60:b4:3a:f5:8c:60:28:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:D6:AE:82:36:A0:61:9B:3A:52:1E:AE:61:5F:5E:98:DA:EE:D9
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/229fd5b5499ea38e8adceb7cdb1872555ff1c9f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.26.80/28
190.216.61.0/24
200.41.21.0/24
200.41.121.0/24
200.49.1.0/24
201.234.32.0/24
201.234.46.0/24
201.234.90.0/24
201.234.104.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f7:75:f7:f2:d0:5f:2c:13:79:73:36:15:82:d2:97:9f:f0:
d5:f8:c0:fd:48:34:c1:49:bb:92:f4:16:52:f8:b7:13:b6:ea:
4c:38:10:57:44:fa:3e:d4:41:6f:80:a3:07:00:c5:df:31:c2:
7b:f6:c0:57:3b:77:37:aa:4a:d7:d4:d7:58:be:7a:71:f0:b8:
2c:d4:16:24:74:f8:9a:bb:54:7e:86:bd:af:32:9d:38:6b:95:
85:f5:26:7b:f6:7d:f0:97:a8:82:76:d1:71:93:58:b3:ba:8a:
bb:8a:88:30:f5:65:db:68:ab:70:9e:5a:18:9e:56:4e:1a:9e:
43:a6:a9:7b:9d:52:ce:13:c1:77:da:a1:16:13:ef:96:2e:21:
94:c9:e0:98:ea:1e:65:4e:cc:70:47:b9:da:26:f3:87:bf:67:
54:00:24:53:06:ed:a2:a3:87:bb:1c:23:b9:30:2b:a3:29:77:
2e:24:35:c7:02:39:dc:3f:f5:6c:51:2d:20:fb:1a:b7:2c:8a:
8a:6b:5d:5b:7c:58:72:49:b4:6f:c4:f0:36:65:8c:b8:40:c4:
bf:3c:f6:d6:43:a3:68:29:2a:7c:ea:3b:bc:61:1e:1a:b6:ff:
7d:96:0b:5e:12:ce:27:37:54:4a:ed:87:33:50:bd:b8:0a:c7:
ac:3f:a3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org