Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/fc2798064e4aca0b2ccca1a047c050868d993ada.roa
File: fc2798064e4aca0b2ccca1a047c050868d993ada.roa (raw, json)
Hash identifier: lkRAShn91/uagOo0fvo8Z5WHbfbR/ltbcXODe4VUTdI=
Subject key identifier: 17:B0:05:2C:42:77:0A:FF:CF:AC:D5:E6:4B:BE:E5:13:F7:7C:24:0B
Certificate issuer: /CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Certificate serial: 21DDD2
Authority key identifier: 2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/fc2798064e4aca0b2ccca1a047c050868d993ada.roa
Signing time: Wed 19 Jul 2023 19:58:10 +0000
ROA not before: Tue 18 Jul 2023 19:58:10 +0000
ROA not after: Sat 19 Jul 2025 19:58:10 +0000
asID: 13489
IP address blocks: 200.75.64.0/19 maxlen: 19
200.114.0.0/18 maxlen: 18
190.240.0.0/16 maxlen: 16
168.0.244.0/22 maxlen: 22
201.236.192.0/18 maxlen: 18
190.70.0.0/15 maxlen: 16
200.58.192.0/19 maxlen: 20
200.116.0.0/16 maxlen: 18
200.122.192.0/18 maxlen: 18
200.6.160.0/19 maxlen: 19
200.30.64.0/19 maxlen: 19
200.58.224.0/20 maxlen: 20
201.190.64.0/18 maxlen: 18
190.165.0.0/16 maxlen: 16
190.9.192.0/18 maxlen: 18
200.31.192.0/19 maxlen: 19
191.98.0.0/17 maxlen: 17
200.13.224.0/19 maxlen: 19
186.0.0.0/17 maxlen: 17
190.0.0.0/18 maxlen: 18
190.128.0.0/17 maxlen: 17
190.151.192.0/18 maxlen: 18
190.7.128.0/19 maxlen: 19
181.128.0.0/12 maxlen: 16
200.24.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2219474 (0x21ddd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Validity
Not Before: Jul 18 19:58:10 2023 GMT
Not After : Jul 19 19:58:10 2025 GMT
Subject: CN=fc2798064e4aca0b2ccca1a047c050868d993ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:12:1f:6b:d9:d0:13:0f:01:1a:46:ab:c1:
73:32:47:85:3d:ef:57:93:8f:44:ea:08:9e:4f:02:
51:80:cd:5a:1d:75:01:8e:39:18:4c:8e:94:68:f7:
55:ab:f4:db:d4:b2:ff:67:cf:38:86:92:5a:2b:75:
a9:7b:4e:1d:b9:d3:b7:39:36:67:50:1d:af:50:3d:
f1:0c:6f:a7:c6:a0:fb:2c:8c:a2:53:62:f5:d2:af:
3e:f4:08:7d:d0:16:de:46:54:91:f3:1b:93:8d:00:
0c:31:91:32:1e:78:f5:2a:ab:c5:27:35:c9:9b:fb:
e9:4a:c7:cc:ba:7c:54:f8:ce:74:27:90:2c:38:6a:
49:65:a0:e7:9b:ae:ce:a2:69:b3:64:4a:09:89:70:
da:77:dd:a6:9f:18:37:6f:09:55:16:b9:4a:1c:34:
32:28:dd:26:9f:93:7e:f2:7d:2a:07:19:8d:24:ca:
62:84:2f:48:5f:bc:a2:7f:fa:30:0f:db:49:f9:20:
7f:7d:a0:e8:aa:08:1e:7b:c7:08:56:fe:c8:3e:c3:
57:2b:d0:2e:ef:ab:2d:ea:43:d5:59:ad:0f:99:91:
dd:a2:54:c0:c7:bc:33:e6:7e:7b:65:6c:69:b2:f8:
cf:2a:3e:d2:4d:aa:7a:10:52:6c:6c:a1:6b:45:b1:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B0:05:2C:42:77:0A:FF:CF:AC:D5:E6:4B:BE:E5:13:F7:7C:24:0B
X509v3 Authority Key Identifier:
keyid:2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/fc2798064e4aca0b2ccca1a047c050868d993ada.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.244.0/22
181.128.0.0/12
186.0.0.0/17
190.0.0.0/18
190.7.128.0/19
190.9.192.0/18
190.70.0.0/15
190.128.0.0/17
190.151.192.0/18
190.165.0.0/16
190.240.0.0/16
191.98.0.0/17
200.6.160.0/19
200.13.224.0/19
200.24.32.0/19
200.30.64.0/19
200.31.192.0/19
200.58.192.0-200.58.239.255
200.75.64.0/19
200.114.0.0/18
200.116.0.0/16
200.122.192.0/18
201.190.64.0/18
201.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
17:1f:82:41:57:8c:f8:97:b2:a5:dc:ed:75:af:35:75:98:fe:
aa:c6:5c:bf:18:d0:d3:78:58:19:84:ed:a2:8a:44:65:98:58:
1d:b4:1e:e7:7b:4c:71:16:93:e5:5e:21:1c:66:74:6d:40:96:
ad:bd:d4:62:ac:c7:5f:f5:36:07:10:cc:8f:8e:2e:59:6c:90:
4a:eb:0f:e1:9b:d2:ca:4a:34:cf:9f:bc:35:16:eb:ec:f9:60:
c3:dc:66:d6:86:e8:35:38:29:e6:b2:9b:47:f0:6a:f5:7e:ad:
5f:6d:bf:44:70:dd:84:c4:63:78:d7:6e:41:31:42:0d:20:e1:
23:8c:af:0e:f6:16:25:38:46:b2:37:7a:da:5f:71:ee:2d:4c:
7d:1f:8c:16:3e:0f:4c:6c:a2:b9:da:d2:74:6b:4a:ea:19:f5:
d4:f9:7f:5b:89:43:37:0c:2c:21:c7:a6:02:7e:e4:c9:e6:34:
e6:3e:ca:c8:41:9b:9c:47:4e:0c:86:78:7c:e8:09:ce:1f:f5:
aa:25:d6:7f:97:aa:da:f6:f8:b1:aa:43:6f:cb:85:a3:a1:7c:
44:8b:4a:f9:f6:de:7a:e8:bf:79:7a:09:a4:83:56:53:86:52:
93:ad:83:36:c7:d4:9e:9c:6e:1b:e4:08:e8:d1:c1:a7:cf:7e:
11:71:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org