Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/37b2e5bafe60cb20c49414b48349c58bbe5e2fad.roa
File: 37b2e5bafe60cb20c49414b48349c58bbe5e2fad.roa (raw, json)
Hash identifier: WbzIRAgL5V6Ba2LugReypo4rVupYF3htBSwWOkRg0nc=
Subject key identifier: 23:A1:43:B6:F2:25:90:E9:02:5A:99:09:B5:F9:EF:8C:17:99:29:FA
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 07AA68
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/37b2e5bafe60cb20c49414b48349c58bbe5e2fad.roa
Signing time: Tue 31 May 2022 16:21:17 +0000
ROA not before: Thu 13 Jan 2022 03:00:00 +0000
ROA not after: Sat 13 Jan 2024 03:00:00 +0000
asID: 23243
IP address blocks: 200.12.32.0/24 maxlen: 24
200.12.33.0/24 maxlen: 24
200.12.34.0/24 maxlen: 24
200.12.62.0/24 maxlen: 24
200.12.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502376 (0x7aa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Jan 13 03:00:00 2022 GMT
Not After : Jan 13 03:00:00 2024 GMT
Subject: CN=37b2e5bafe60cb20c49414b48349c58bbe5e2fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:70:1f:97:e6:60:14:7c:34:d0:dc:95:d0:
10:60:69:9d:df:70:78:13:4f:76:63:dd:25:86:90:
9f:79:2e:8d:94:f1:82:02:84:48:13:38:4b:c9:25:
5c:22:b2:4c:32:94:b1:e9:3b:0b:e2:e9:df:03:06:
af:9c:a4:28:3a:e9:52:15:c2:31:99:02:e8:dd:6c:
7e:65:c5:5e:cb:9c:71:f6:bc:33:c6:b0:37:0d:3d:
5a:53:48:26:76:d2:e6:09:f9:55:72:5b:55:f1:98:
7d:2b:e7:c8:f3:ab:4e:a6:b3:83:9a:fd:24:e9:95:
24:e6:74:60:81:c3:5e:b4:67:fa:5a:9f:7c:04:05:
c4:a6:14:8a:d0:cf:3a:3a:74:dd:82:46:25:54:11:
d9:54:68:37:f1:4e:09:1e:01:e1:b4:6c:97:9d:0d:
26:cb:35:7c:00:fc:56:fc:6a:71:ea:56:ac:19:4c:
7e:a6:ba:56:44:86:2d:d6:25:df:fa:05:5f:e2:ab:
e3:41:8a:51:de:6a:cb:35:10:42:04:8a:16:bb:fc:
e3:17:8f:7b:75:cf:42:a2:58:25:2d:18:94:5c:29:
b9:61:04:b3:85:ca:ee:e9:79:4d:c1:17:24:3a:80:
e6:c4:26:17:6a:34:f1:5e:fb:73:d6:27:f4:27:e8:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A1:43:B6:F2:25:90:E9:02:5A:99:09:B5:F9:EF:8C:17:99:29:FA
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/37b2e5bafe60cb20c49414b48349c58bbe5e2fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.32.0-200.12.34.255
200.12.62.0/23
Signature Algorithm: sha256WithRSAEncryption
44:d5:f9:cf:08:45:8e:94:99:ce:2c:3f:f8:77:78:06:d3:2f:
e7:a5:f1:80:5a:db:8d:58:ac:be:1e:ed:6b:98:9e:1d:58:b6:
68:f8:38:bf:78:86:8b:b1:ef:e0:f4:e8:ac:59:a3:b3:b6:4f:
87:16:00:87:9e:f4:68:ee:f9:6c:93:0e:0f:8d:0b:7a:0a:1f:
73:42:2c:0c:be:9a:10:9b:6b:52:cc:f5:ed:2e:4e:64:5b:bc:
cd:c3:d9:26:b5:b6:09:0d:c7:d3:1b:09:26:ad:6a:09:27:75:
b7:d5:d7:8e:0a:b0:22:4c:d0:10:bd:5b:15:07:76:d1:41:b0:
73:7b:bf:ee:4b:cb:72:f9:5a:e7:5f:8c:ea:79:ef:5f:17:c8:
3c:ee:92:e5:16:60:51:05:77:9b:89:9e:a0:28:1e:9e:67:b3:
97:0b:1d:f3:31:b9:36:b0:de:26:1e:bf:43:86:0c:88:57:ed:
39:f3:2c:30:58:17:2e:bc:63:a0:ec:29:13:35:76:2f:f5:33:
bb:9c:19:01:64:5d:5d:15:0f:2f:58:40:f1:76:38:b3:5e:e5:
61:4d:e7:7a:d7:43:70:db:16:08:c0:c1:8e:16:f4:f8:97:ca:
28:b7:23:b4:b5:c9:06:b2:66:49:f9:3c:59:7c:66:22:96:f4:
dc:80:4f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org