Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/db90cddf344338a2561133009c609595a9bd3d7b.roa
File: db90cddf344338a2561133009c609595a9bd3d7b.roa (raw, json)
Hash identifier: RN9SWhwoR1Ise5nxyK3iRi+cDBKkSjJ3Wm8xOpBXs6s=
Subject key identifier: AC:D4:34:A8:E3:46:A1:9E:95:F5:EE:83:1E:8A:A8:2C:E3:AD:C9:A4
Certificate issuer: /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial: 0E213C
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/db90cddf344338a2561133009c609595a9bd3d7b.roa
Signing time: Wed 24 Mar 2021 14:42:05 +0000
ROA not before: Wed 24 Mar 2021 14:42:05 +0000
ROA not after: Tue 24 Mar 2026 14:42:05 +0000
asID: 23383
IP address blocks: 200.30.129.0/24 maxlen: 24
200.30.135.0/24 maxlen: 24
200.30.136.0/23 maxlen: 24
200.30.155.0/24 maxlen: 24
200.30.156.0/23 maxlen: 24
200.30.163.0/24 maxlen: 24
200.30.164.0/24 maxlen: 24
200.30.168.0/24 maxlen: 24
200.30.178.0/24 maxlen: 24
200.30.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926012 (0xe213c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Validity
Not Before: Mar 24 14:42:05 2021 GMT
Not After : Mar 24 14:42:05 2026 GMT
Subject: CN=db90cddf344338a2561133009c609595a9bd3d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:05:d1:d2:c6:0e:8a:79:ec:59:6d:99:5d:
c3:05:fd:ce:2e:30:fd:25:91:12:11:a6:0d:82:cd:
09:8d:01:de:5d:b9:32:e7:b9:1c:c9:47:3d:c9:e4:
7d:8c:e4:d3:37:5e:da:46:74:50:5d:e9:7d:d6:cc:
5f:7c:cd:bd:3e:7d:d1:3f:b1:d6:f2:b9:b0:5c:23:
aa:60:73:5d:fa:b5:d6:32:dc:b0:ab:38:13:f4:c6:
53:91:fe:3a:03:0f:70:9c:af:30:bc:5c:d7:a4:2a:
9e:f2:b9:cb:b7:51:66:37:a7:37:54:f3:61:bd:bb:
0b:0f:ea:e4:b7:53:eb:eb:28:a8:c1:76:a5:61:fa:
f5:57:76:cf:78:61:48:74:4e:3e:0f:6b:ff:e0:30:
7f:11:85:d7:64:d9:f3:12:52:3a:de:01:8a:7a:f0:
aa:6e:3a:e6:db:77:72:06:5e:25:3f:ab:7d:d6:c5:
cc:77:ff:47:99:55:1b:18:1e:9f:4c:5c:86:ed:31:
a1:64:9f:c4:c3:c1:1c:64:f8:06:ec:65:35:b4:fa:
9d:0d:06:3c:8b:9b:0c:0e:c3:08:f0:65:9c:da:38:
9e:92:d8:89:3b:88:db:44:d2:57:19:98:7b:19:f8:
0d:55:65:73:49:5e:08:44:38:18:10:fc:41:98:e0:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D4:34:A8:E3:46:A1:9E:95:F5:EE:83:1E:8A:A8:2C:E3:AD:C9:A4
X509v3 Authority Key Identifier:
keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/db90cddf344338a2561133009c609595a9bd3d7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.129.0/24
200.30.135.0-200.30.137.255
200.30.155.0-200.30.157.255
200.30.163.0-200.30.164.255
200.30.168.0/24
200.30.178.0/24
200.30.185.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ac:cd:01:1d:d4:97:a7:7c:4f:36:2e:b7:01:23:f5:f1:29:
41:f0:37:67:a4:ad:17:2a:19:3d:f8:7e:c4:74:c5:ab:a2:c7:
90:10:7c:5d:a4:27:4b:42:a7:b4:62:7f:25:ca:65:e3:8b:b5:
13:2f:34:2d:5f:40:b8:2f:1a:05:96:3f:c1:6e:18:ea:c7:ac:
7c:1c:02:fd:e8:71:79:df:1f:b1:f2:61:68:8a:b2:b0:33:7f:
57:30:c2:e4:7e:c0:60:11:86:aa:94:68:e6:57:5d:39:24:a8:
fb:d4:a2:2a:03:3c:c6:0d:b9:af:4d:d9:e9:d9:30:85:16:e5:
98:02:4a:fe:8f:ec:a4:3f:7d:3c:39:f7:dd:29:d0:0f:d5:bd:
4c:37:75:f7:87:9e:13:2e:cb:92:43:75:40:9a:6c:89:83:2b:
e0:3f:38:06:c8:40:82:e0:9c:68:f3:f9:2c:a7:f3:8d:3f:d2:
35:5b:1b:cc:3c:21:0d:ae:3f:c0:c7:ce:2c:d3:f9:1b:c8:5a:
e2:49:ac:64:07:6f:36:81:f0:f7:ee:6a:51:e7:f7:4c:bd:7c:
ad:e6:8e:a3:47:cc:9e:72:19:39:d9:b3:00:ea:fe:cb:c6:c5:
38:d8:16:10:be:5e:5d:ed:b7:ed:24:e5:ad:83:1e:84:68:eb:
77:31:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 00:37:15 2024 by rpki-client on console-ams.rpki-client.org