Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9ecb567fe6a011ae120925b74a0c46b9ab748432.roa
File: 9ecb567fe6a011ae120925b74a0c46b9ab748432.roa (raw, json)
Hash identifier: ce3bal5J/1TOXFlx3OhTGuiY0EsKqPfEbhnf7jsRzjA=
Subject key identifier: 7E:7E:04:2A:87:22:FF:3A:E6:2C:F3:64:A1:78:35:6A:21:5F:86:A9
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 250B25
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9ecb567fe6a011ae120925b74a0c46b9ab748432.roa
Signing time: Fri 21 Jul 2023 20:56:47 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 20207
IP address blocks: 200.41.17.0/24 maxlen: 24
190.216.60.0/24 maxlen: 24
190.216.62.0/24 maxlen: 24
200.41.20.0/24 maxlen: 24
200.55.26.0/24 maxlen: 24
200.55.28.0/24 maxlen: 24
190.216.18.0/24 maxlen: 24
190.216.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2427685 (0x250b25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=9ecb567fe6a011ae120925b74a0c46b9ab748432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:88:9f:d1:c3:b1:c5:48:26:01:de:b5:d6:
bc:78:3c:b2:57:44:a6:b3:74:b0:fa:0d:2c:fa:bb:
fe:94:3a:bb:9e:e2:4b:11:5d:d7:c1:ee:4e:38:0b:
0d:e9:38:82:c1:43:10:5c:b9:72:fa:7e:28:81:05:
ce:71:f7:44:89:4a:e3:16:cc:e5:67:30:9f:52:ce:
ea:0c:48:2d:86:e8:26:14:8f:0a:b1:fa:4b:8e:6e:
a8:a0:df:b7:93:b1:db:d9:ce:71:9c:e8:d7:72:0c:
25:be:6a:fd:9a:03:3e:89:ae:39:2f:39:c0:7f:0b:
ba:59:ee:61:10:30:1d:72:b4:c8:5c:9e:cd:56:33:
55:4d:78:aa:6a:05:3d:e0:75:0c:81:a6:96:97:cc:
d5:cd:f2:2b:72:a1:c3:5a:ad:6c:62:71:a3:b9:fe:
a5:cd:59:a8:1a:50:b9:59:2f:5b:c5:27:80:de:8b:
c5:ba:cd:78:31:9c:b0:ae:ff:80:7a:f9:89:77:94:
13:50:2e:1c:f3:ad:3a:33:79:2d:f2:fb:37:cb:51:
f2:34:e1:8c:74:08:fe:03:b6:2d:06:aa:b5:2f:8a:
0d:7c:d0:89:54:50:cb:78:fe:c4:4d:ed:65:30:32:
ff:a6:65:13:c9:3e:98:0d:b9:78:0b:fb:47:8f:81:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7E:04:2A:87:22:FF:3A:E6:2C:F3:64:A1:78:35:6A:21:5F:86:A9
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9ecb567fe6a011ae120925b74a0c46b9ab748432.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.18.0/24
190.216.24.0/24
190.216.60.0/24
190.216.62.0/24
200.41.17.0/24
200.41.20.0/24
200.55.26.0/24
200.55.28.0/24
Signature Algorithm: sha256WithRSAEncryption
24:93:ca:1e:ef:37:14:3e:a7:2b:2e:fd:a8:6c:f1:1b:8f:c3:
3d:32:ba:24:a8:6a:5b:51:7a:b2:74:a8:fa:99:45:38:d9:17:
b4:f3:09:f7:70:4b:5f:bb:48:35:e2:38:74:0b:0d:36:f0:31:
b6:88:81:f2:f3:53:23:48:53:1b:75:0c:f4:92:25:8b:e3:76:
28:3e:67:8c:73:4d:48:fa:ca:5d:db:f6:ae:8a:ea:bf:81:56:
c5:76:a8:4d:9e:8c:a6:da:f8:4b:e1:8f:6a:5d:74:ff:f6:58:
f3:de:9d:1e:6a:57:75:95:6d:b1:99:05:9f:0c:db:ee:f0:dc:
0d:c0:7e:81:0c:8a:52:55:a0:28:f3:1d:9c:a8:5c:9a:b6:0a:
19:8d:b1:47:66:cc:3d:c8:0a:d6:61:5e:30:f1:93:6a:cf:08:
1c:01:92:53:58:96:8e:e6:a0:8d:f4:b1:30:52:d0:b2:82:95:
64:f2:b9:86:f6:58:85:8b:94:96:f6:26:d4:aa:29:37:cc:73:
3b:04:c3:70:a8:6f:54:a2:6b:e8:69:88:ed:20:ff:c3:c4:bc:
89:9b:17:2e:d5:21:a0:d8:ed:c0:ad:6e:5d:7e:75:bb:de:23:
ec:56:98:3f:b2:bc:10:59:2e:9e:b6:65:8a:66:21:8d:c3:b1:
0d:f4:82:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org