Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/b9d33d253dc90498a01c5248bff36370508dffa8.roa
File: b9d33d253dc90498a01c5248bff36370508dffa8.roa (raw, json)
Hash identifier: GDnA55Ew6yQALTBzsuyFTtq5fc7pGNjDYp6xf41q4KU=
Subject key identifier: 89:E9:C4:B3:35:D0:8F:D1:64:9A:CA:80:E2:4D:07:A6:DA:3D:95:64
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 2211C0
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/b9d33d253dc90498a01c5248bff36370508dffa8.roa
Signing time: Tue 25 Apr 2023 15:04:50 +0000
ROA not before: Mon 24 Apr 2023 15:04:37 +0000
ROA not after: Fri 25 Apr 2025 15:04:37 +0000
asID: 21599
IP address blocks: 201.218.192.0/18 maxlen: 24
190.5.224.0/19 maxlen: 24
200.90.128.0/20 maxlen: 24
190.122.160.0/20 maxlen: 24
200.46.0.0/16 maxlen: 24
200.115.128.0/19 maxlen: 24
2803:600::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2232768 (0x2211c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 15:04:37 2023 GMT
Not After : Apr 25 15:04:37 2025 GMT
Subject: CN=b9d33d253dc90498a01c5248bff36370508dffa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:de:7b:45:54:84:9d:6b:ba:38:f7:cc:c0:
0e:f3:ee:27:cf:ee:52:1c:8f:56:d2:86:4e:f4:ca:
49:9e:30:71:cc:6c:9b:1e:57:3c:37:30:76:08:c4:
9b:9b:3b:fd:af:ef:34:ab:75:aa:f1:20:a3:04:c7:
bc:ed:60:f4:11:ff:ec:eb:f1:ba:1f:25:e9:98:bc:
6b:4d:c8:35:9b:3a:fb:0e:9f:5c:d7:3b:6e:3c:a6:
74:20:84:0e:38:8a:b3:30:b9:78:32:f4:9d:52:29:
70:f2:1a:e3:ff:ae:53:7d:d2:5a:68:32:76:06:22:
2d:8e:60:5c:fd:9b:d7:1f:c7:e8:21:2c:86:9d:bf:
3b:34:c7:81:1e:58:df:31:e7:1c:ac:59:89:af:2e:
4e:41:ad:ac:6a:2a:33:e2:15:06:e2:e5:f3:03:f5:
4b:fa:45:c8:7c:57:99:5d:c5:04:5a:15:20:5c:ec:
a3:e1:41:b7:92:13:0f:b1:0a:79:31:85:2e:58:ab:
1a:d6:f6:e1:ca:55:97:61:a1:41:37:de:81:60:88:
62:8a:cf:a9:ef:bc:ac:c5:7c:13:80:41:c0:7c:2a:
41:e8:f2:39:d7:15:84:2c:eb:a9:fd:a1:ff:66:5e:
94:01:76:32:b8:c1:76:e8:2b:1d:ef:62:f2:c6:98:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E9:C4:B3:35:D0:8F:D1:64:9A:CA:80:E2:4D:07:A6:DA:3D:95:64
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/b9d33d253dc90498a01c5248bff36370508dffa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.5.224.0/19
190.122.160.0/20
200.46.0.0/16
200.90.128.0/20
200.115.128.0/19
201.218.192.0/18
IPv6:
2803:600::/32
Signature Algorithm: sha256WithRSAEncryption
81:81:e3:9b:c6:54:13:d9:7c:ce:dc:e6:61:2a:47:13:92:38:
61:fb:32:2f:9c:60:10:49:f1:91:45:bd:50:7d:26:02:8c:64:
0b:b4:d9:8e:60:cc:57:16:92:4a:e1:df:9a:7b:e5:cb:c1:05:
d1:33:1c:11:4c:a1:bb:01:94:9a:76:c2:e7:76:2b:73:4d:66:
18:60:a7:a6:fb:48:c8:76:40:09:bc:52:12:82:d2:27:a0:ad:
38:b6:0d:bb:c4:cf:38:91:bb:26:04:4f:d3:be:e4:8b:ed:00:
d8:be:bd:cb:c3:05:a0:4d:af:b9:97:fb:8b:f9:fd:10:29:fd:
0f:38:fd:22:bb:13:90:e4:ca:47:07:1c:6b:bc:8e:e6:f5:5e:
5c:3b:fa:9c:6e:f7:14:4e:29:9c:4c:ea:83:43:f4:62:c7:c1:
f4:6d:99:34:16:23:a4:e2:40:b9:68:16:b2:e0:ba:51:46:cd:
b7:19:c7:2f:55:ce:1e:a0:41:9b:9d:be:5a:41:f8:b4:e9:bf:
02:ae:e0:40:98:18:3f:f7:8e:6e:ff:7b:53:cc:d4:19:36:ac:
ce:35:0f:67:f7:55:92:56:74:69:f5:dc:4a:85:5a:37:ea:ab:
fc:c1:50:99:68:9c:17:36:e7:ff:67:24:5e:43:6f:a0:94:a3:
61:aa:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org