Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/6531c5fc8280307b36f13c4bb77b2b4a4db41e16.roa
File: 6531c5fc8280307b36f13c4bb77b2b4a4db41e16.roa (raw, json)
Hash identifier: qHWpe795w/oviNQvuv7xBeLF6ax35h4AYFLqAfI16NI=
Subject key identifier: 70:77:32:12:FE:2E:94:D6:A5:FD:68:04:09:06:6C:18:CE:01:DA:40
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 250167
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/6531c5fc8280307b36f13c4bb77b2b4a4db41e16.roa
Signing time: Fri 21 Jul 2023 20:56:40 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 263736
IP address blocks: 200.31.3.0/24 maxlen: 24
190.216.28.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2425191 (0x250167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=6531c5fc8280307b36f13c4bb77b2b4a4db41e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:69:77:c9:0e:dd:e1:42:43:6d:38:81:cf:
3c:88:41:4f:79:41:70:ea:67:b9:67:4d:1b:9e:73:
67:44:43:6a:6f:3b:9d:14:81:58:5d:88:75:7b:37:
f5:00:57:aa:17:e1:25:da:cb:34:7f:2c:a1:27:9e:
d7:28:67:de:14:06:54:88:f3:f5:bc:82:d4:32:b5:
ab:8f:8c:21:f1:16:cf:22:6c:e1:58:e5:a3:61:58:
84:48:77:1d:13:c0:d4:de:ce:4a:45:ff:b2:05:db:
29:fa:fc:02:72:e4:0d:21:fe:6d:ef:2a:75:90:6f:
ed:a7:86:00:c0:b6:7d:e2:d4:a7:88:37:9f:e8:21:
3e:af:90:42:82:46:75:68:2d:10:a1:e1:ac:20:f8:
06:aa:2c:ac:8e:e3:72:60:e0:24:ff:e3:4f:8c:9a:
f9:4f:a3:71:56:44:b2:63:3e:2d:d8:2c:dd:7c:78:
5a:aa:ae:16:83:f3:fa:56:97:8b:a3:e3:82:68:92:
52:f4:ed:d6:8d:e2:a9:98:77:7f:3d:5a:59:56:d4:
c1:a1:4b:4a:fd:2b:cc:8a:e9:36:a7:b7:22:e5:df:
6f:a9:32:c1:49:55:22:d6:61:02:62:b2:97:34:16:
9a:b5:e9:c7:5c:e0:15:2f:2d:df:18:fa:72:c0:56:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:77:32:12:FE:2E:94:D6:A5:FD:68:04:09:06:6C:18:CE:01:DA:40
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/6531c5fc8280307b36f13c4bb77b2b4a4db41e16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.28.128/25
200.31.3.0/24
Signature Algorithm: sha256WithRSAEncryption
93:93:b8:71:9a:0a:91:e3:24:24:c8:69:e3:2f:33:47:91:11:
ac:db:39:a4:29:5e:44:1e:d9:f2:21:02:8c:75:da:f9:ea:19:
fd:37:c4:88:ce:36:25:91:fe:cd:3f:3b:88:de:35:02:0c:76:
1a:16:e4:77:f9:01:6f:54:4c:85:8f:22:63:2e:df:6d:f3:2a:
76:e5:f1:ec:e1:e4:01:a4:1a:2a:97:b9:fe:c1:b9:18:35:b6:
7a:af:f5:7f:db:16:18:eb:d4:fe:b5:07:0c:d1:37:00:fe:b2:
86:3f:ef:1c:9a:78:f8:8b:be:6e:7d:0a:7e:3e:26:dc:9d:b0:
51:d5:38:83:e2:c4:9d:47:61:03:12:49:7e:5f:18:24:30:96:
75:b6:a7:61:b2:fc:84:1e:58:f6:ea:27:5e:75:ad:d4:f1:e7:
c1:3f:ab:2b:ea:70:13:58:16:e3:1c:34:5e:9c:bf:3d:96:92:
7a:d3:d3:1a:3f:aa:84:c2:2e:c2:cc:e6:e8:ea:bc:a9:17:94:
4c:d8:06:db:97:c1:e6:6c:fb:7d:6a:84:d4:de:19:0d:8c:18:
37:20:8e:3e:96:91:83:d2:00:b9:2c:3e:dc:cc:e9:e6:ee:0c:
d8:42:8e:35:8a:0a:c8:87:6e:e0:1b:ad:69:15:6e:04:cc:70:
82:c6:19:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org