Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/e788aab591aaef8b0120a8278a5a57095587ac8c.roa
File: e788aab591aaef8b0120a8278a5a57095587ac8c.roa (raw, json)
Hash identifier: sChd6W1WAQ5egY+xH91tkNRuoLhpimCKZDcvakHV4Bk=
Subject key identifier: 8F:8A:1B:BD:D9:0C:FF:A9:9F:33:15:36:CC:F4:28:B3:CB:12:F4:7B
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 14D67E
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/e788aab591aaef8b0120a8278a5a57095587ac8c.roa
Signing time: Mon 06 Nov 2023 21:55:51 +0000
ROA not before: Mon 06 Nov 2023 21:55:51 +0000
ROA not after: Thu 06 Nov 2025 21:55:51 +0000
asID: 26617
IP address blocks: 200.12.36.0/22 maxlen: 24
200.12.44.0/23 maxlen: 24
200.12.46.0/24 maxlen: 24
200.12.48.0/24 maxlen: 24
200.12.56.0/24 maxlen: 24
190.104.113.0/24 maxlen: 24
190.104.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1365630 (0x14d67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Nov 6 21:55:51 2023 GMT
Not After : Nov 6 21:55:51 2025 GMT
Subject: CN=e788aab591aaef8b0120a8278a5a57095587ac8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:13:39:8d:7e:6c:95:d7:3e:09:e3:ad:75:
68:46:bc:56:47:26:a8:30:ca:76:cf:13:3e:f4:1e:
bf:21:c1:6b:12:d7:80:32:20:b9:5d:a9:19:40:80:
35:84:f7:df:70:21:8b:5a:f7:79:20:74:83:85:c2:
b4:ad:1d:22:ba:ee:6a:07:68:a6:68:a8:7f:83:cf:
a6:d0:3b:5a:69:4c:6f:5b:40:d0:57:00:71:56:a4:
63:41:89:a6:05:59:a9:15:ac:1f:2f:fa:2d:aa:35:
4b:7f:10:55:6f:38:99:98:77:9f:a8:a3:50:ef:a6:
7c:45:b7:fa:13:c0:0d:10:7d:e2:e9:e1:93:f3:b1:
bb:d5:90:91:d4:cd:ab:17:22:4a:7f:59:75:7e:1e:
3a:b0:cc:f4:48:f3:7c:cf:52:c1:fb:4c:4e:55:f8:
b6:2f:c3:61:69:cf:58:f5:94:c1:69:f7:38:55:28:
79:68:c7:a0:73:d1:7b:f6:da:fc:ec:5e:ae:ab:e2:
dc:48:59:fd:0f:5e:22:02:c1:25:78:9f:91:fc:fa:
88:7b:21:75:eb:e4:5a:77:ef:3e:0c:03:43:11:a6:
04:3c:e3:4d:3c:50:19:ea:cf:c9:a5:41:83:d8:b9:
9f:40:87:e7:a2:ad:5f:b4:87:cd:d6:28:5a:a0:c4:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8A:1B:BD:D9:0C:FF:A9:9F:33:15:36:CC:F4:28:B3:CB:12:F4:7B
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/e788aab591aaef8b0120a8278a5a57095587ac8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.113.0/24
190.104.117.0/24
200.12.36.0/22
200.12.44.0-200.12.46.255
200.12.48.0/24
200.12.56.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5c:99:fc:fd:08:9a:18:81:ee:9a:fc:51:38:b0:99:38:d4:
86:ab:93:58:af:3f:ec:d3:f0:5b:4d:f0:d7:4d:a2:df:f9:67:
d4:37:10:10:a3:51:49:b1:0c:a2:b7:93:8b:8b:21:b6:9c:35:
1f:b4:01:3b:65:56:76:e0:38:6e:4b:48:76:2a:cd:77:a6:b5:
ba:3c:dd:0e:2f:9a:ae:40:df:d2:bc:2a:3f:9d:e3:f4:63:13:
0f:4c:1b:51:28:c4:ed:64:96:cd:0a:f3:a5:1d:f7:70:87:79:
53:94:31:a5:26:6c:57:a9:fa:0b:a4:28:2e:08:ab:d0:f4:b7:
9c:dd:81:92:d5:0a:71:94:54:53:ee:e0:b9:74:6b:40:22:8d:
d4:17:7f:7f:35:20:15:7d:71:69:f5:0d:b9:9b:da:3e:2a:b3:
b1:64:15:28:c9:41:3d:3e:53:e4:fa:c7:a9:0b:06:19:3e:88:
a3:a8:6c:11:ce:3e:e8:74:a8:45:d5:d1:2e:15:10:e3:65:16:
4b:78:0e:73:ae:11:29:31:33:3e:53:2c:1a:fb:a9:95:b9:17:
48:4f:c6:39:59:cc:f3:fb:b8:ad:43:2c:bb:40:6e:e6:a5:6d:
41:dd:d2:ce:01:d6:70:0c:8e:61:61:22:a3:62:65:fe:ba:63:
87:99:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org