Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/d31cf9fd2cc6fd91e261959a1bf9ec0f3986915f.roa
File: d31cf9fd2cc6fd91e261959a1bf9ec0f3986915f.roa (raw, json)
Hash identifier: +f1+Lo6A9nNBPAtTYv1aqDQ6jNPuqF3hDH2vDLixlOs=
Subject key identifier: 00:A5:8E:F7:29:1A:F1:CE:18:A5:83:6D:FD:78:AD:BA:E2:85:87:D4
Certificate issuer: /CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
Certificate serial: 048DCE
Authority key identifier: 07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/d31cf9fd2cc6fd91e261959a1bf9ec0f3986915f.roa
Signing time: Wed 24 Mar 2021 14:32:32 +0000
ROA not before: Wed 24 Mar 2021 14:32:32 +0000
ROA not after: Tue 24 Mar 2026 14:32:32 +0000
asID: 27875
IP address blocks: 179.0.132.0/22 maxlen: 24
179.0.136.0/21 maxlen: 24
200.9.147.0/24 maxlen: 24
200.12.133.0/24 maxlen: 24
200.12.134.0/23 maxlen: 24
200.12.136.0/23 maxlen: 24
200.12.138.0/24 maxlen: 24
2801:1e0::/41 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298446 (0x48dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
Validity
Not Before: Mar 24 14:32:32 2021 GMT
Not After : Mar 24 14:32:32 2026 GMT
Subject: CN=d31cf9fd2cc6fd91e261959a1bf9ec0f3986915f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:e2:6b:f6:4e:07:79:4c:21:4e:61:2d:3e:
04:c7:db:d1:36:ad:d7:f7:2f:67:a8:cc:95:c1:24:
36:2f:83:65:f7:ce:ac:62:f7:38:9f:b6:56:08:c1:
37:42:9d:0a:c1:d2:2f:b0:83:d0:e8:e3:20:3a:bf:
cf:55:5b:46:c5:d7:80:c4:67:1d:c5:ed:51:61:49:
25:93:5f:b7:2f:3f:85:7d:75:94:b3:70:b3:8c:26:
9f:9a:6f:3e:5a:30:09:2e:bb:a4:3c:75:24:95:16:
e9:a7:51:d9:6c:96:21:d6:4e:41:42:9d:9e:b8:6c:
0a:94:cd:99:87:07:bf:2e:80:fc:c4:51:bc:aa:03:
d1:8c:37:01:92:dd:14:59:43:d1:e5:d0:89:e0:a6:
64:6a:d0:e8:ab:ce:5a:20:f2:6c:db:83:c8:63:e8:
15:f1:63:66:98:a0:28:67:d2:d2:15:1c:4e:a6:69:
20:95:89:21:2e:5c:7f:c8:26:32:8d:73:2b:06:b5:
bd:36:3a:29:f8:31:22:f1:b4:8c:31:9f:20:aa:60:
c4:22:22:b1:4f:e7:31:34:72:30:4b:0e:78:cb:bc:
00:6f:03:22:bf:6e:4b:af:53:cd:20:7c:e2:76:d6:
b1:99:f6:81:c3:ac:76:e0:ce:9b:a4:44:41:04:bf:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:8E:F7:29:1A:F1:CE:18:A5:83:6D:FD:78:AD:BA:E2:85:87:D4
X509v3 Authority Key Identifier:
keyid:07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/d31cf9fd2cc6fd91e261959a1bf9ec0f3986915f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.132.0-179.0.143.255
200.9.147.0/24
200.12.133.0-200.12.138.255
IPv6:
2801:1e0::/41
Signature Algorithm: sha256WithRSAEncryption
46:23:50:9e:9a:ae:4d:94:c6:ae:bc:bb:5d:df:69:36:5f:7e:
9d:ca:58:9b:47:72:c5:09:58:6d:23:35:62:fa:0d:bd:5c:9f:
1e:0f:ba:3a:c0:46:18:17:c5:21:5e:33:9b:ec:d9:f1:e7:1e:
f4:04:d3:e5:c8:19:32:46:d9:94:9a:72:4b:74:d9:8e:16:94:
c4:ab:84:73:1d:49:a5:cd:8e:d5:75:0e:d5:7f:50:22:45:bb:
0d:99:ca:94:25:7d:ea:2d:91:da:de:62:bc:50:39:03:ee:4f:
7f:8c:8a:ba:82:ee:f2:af:48:d1:25:78:53:b7:f2:11:2c:ab:
0f:30:44:2a:a0:fe:00:a6:fa:3a:d0:40:27:4e:ae:a7:fe:1a:
7f:2e:9f:52:51:0c:79:c9:aa:6e:c4:41:16:9f:2a:b0:62:2e:
bb:1b:1b:bb:4e:43:b2:85:ad:b3:5a:1e:d6:bc:cc:90:d1:89:
7d:44:cd:ee:d8:54:d5:b6:e9:3a:80:a1:05:8b:ab:17:dd:09:
a5:13:dd:4b:2f:47:62:fc:84:b5:be:dd:b3:b3:f2:42:cd:9b:
45:9a:ab:d4:81:de:07:85:9c:7e:d8:d0:39:b4:57:42:ec:c9:
f3:c9:f6:3e:86:0f:0e:49:49:51:c1:09:9f:7f:4f:8f:3b:ee:
c6:37:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org