Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/218ab888761de9c5746b285aa817c97e1a9c080d.roa
File: 218ab888761de9c5746b285aa817c97e1a9c080d.roa (raw, json)
Hash identifier: UdCJirku9gHTquLZ/LIFqFtP0OMJbZrdfsTUbGPDZHU=
Subject key identifier: 4A:B8:98:C3:3B:5C:4B:C1:08:30:8C:D4:F8:1C:F2:14:E1:F3:55:1C
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 0EEE81
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/218ab888761de9c5746b285aa817c97e1a9c080d.roa
Signing time: Tue 21 Mar 2023 23:04:42 +0000
ROA not before: Mon 10 Jan 2022 03:00:00 +0000
ROA not after: Sat 13 Jan 2024 03:00:00 +0000
asID: 23243
IP address blocks: 200.12.32.0/24 maxlen: 24
200.12.33.0/24 maxlen: 24
200.12.34.0/24 maxlen: 24
200.12.47.0/24 maxlen: 24
200.12.49.0/24 maxlen: 24
200.12.51.0/24 maxlen: 24
200.12.61.0/24 maxlen: 24
200.12.62.0/24 maxlen: 24
200.12.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978561 (0xeee81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Jan 10 03:00:00 2022 GMT
Not After : Jan 13 03:00:00 2024 GMT
Subject: CN=218ab888761de9c5746b285aa817c97e1a9c080d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:07:ca:20:3d:7f:f9:47:5b:58:0d:3d:31:84:
28:1f:e8:2f:be:88:8b:a9:7c:1c:8b:a8:5b:d4:c8:
ae:13:61:8f:18:27:81:e8:9f:e7:59:ad:96:bb:0f:
3c:0b:6f:32:c3:0d:42:22:a9:01:e8:ed:73:58:a2:
be:80:2a:7e:49:28:c1:10:91:1b:de:1f:fc:d3:31:
ec:90:4b:6d:13:8c:5b:3a:23:97:92:ca:46:ed:c4:
83:e4:b8:23:22:ff:45:8a:39:92:16:1b:95:88:97:
52:0d:54:b1:4c:5a:b2:64:4a:15:05:39:c2:32:4e:
cf:0f:b0:b3:ce:29:68:09:ba:b1:69:69:4d:d5:34:
0a:90:41:f1:ba:cd:6e:76:80:f1:5a:45:b2:a7:b6:
3d:e1:a7:81:ff:ca:2d:d3:ed:8f:ca:60:c5:c0:ac:
57:74:45:18:26:41:64:89:c5:28:ef:b5:6c:e2:36:
d0:f7:d3:5b:17:18:df:71:06:d8:a0:66:70:c8:91:
8c:02:3a:7e:f0:d1:36:39:9b:36:25:37:47:2e:97:
9e:77:4d:35:0c:23:00:45:1b:90:d2:be:87:b8:c8:
4f:98:44:74:7d:1b:e9:97:82:b4:9a:45:42:f2:7e:
f9:d0:e7:28:dd:a0:f2:43:a3:3c:04:05:6d:84:8c:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B8:98:C3:3B:5C:4B:C1:08:30:8C:D4:F8:1C:F2:14:E1:F3:55:1C
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/218ab888761de9c5746b285aa817c97e1a9c080d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.32.0-200.12.34.255
200.12.47.0/24
200.12.49.0/24
200.12.51.0/24
200.12.61.0-200.12.63.255
Signature Algorithm: sha256WithRSAEncryption
4d:60:5e:91:7b:0e:61:11:bd:07:80:3c:d0:4c:de:02:38:54:
83:51:24:ee:d2:06:75:cf:d9:68:2f:ac:c8:d9:84:48:25:b3:
81:6d:56:21:1b:48:3e:b4:24:6c:ac:18:3c:4f:4a:a0:8a:76:
2f:eb:50:f3:80:17:39:34:b5:1e:8e:a3:0f:96:6a:fb:c4:ff:
fc:6c:9c:41:c0:6e:54:4d:44:91:3c:8b:15:e2:cb:27:e6:22:
31:8b:ef:e8:65:b0:69:21:78:d9:4c:62:c5:b3:a0:cc:47:4c:
9c:f1:3d:d2:85:7e:fd:70:87:fd:71:92:46:18:cb:b3:79:39:
99:1a:e7:88:44:3e:e5:5b:26:d2:21:2d:4d:9d:2c:fd:b7:16:
59:40:97:e7:3c:21:c7:cc:14:62:61:e3:fd:76:4c:ed:49:9f:
20:3c:0d:fc:35:1d:e2:f1:02:b2:ed:0b:f4:22:f2:f8:4f:65:
6b:7f:ab:17:64:bb:f5:3b:d9:3a:52:77:6d:ea:36:52:01:7a:
d9:ae:6c:c8:e7:ce:07:5e:fa:34:75:05:4c:21:72:7f:7b:92:
58:68:c3:da:18:49:d0:06:1f:ef:b5:89:4c:80:12:6a:6d:0a:
97:75:66:a9:7c:fa:6b:79:7e:a7:d8:cf:24:6e:da:ff:e0:91:
0d:0f:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org