Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20D159C1C188C35C9FBDF7AE01F62273CAC56AC8C0900C2A83C9BA904C25DB29/0/3230312e3133312e322e302f32342d3234203d3e20323633313631.roa
File: 3230312e3133312e322e302f32342d3234203d3e20323633313631.roa (raw, json)
Hash identifier: BNDqR0/uoR/yc/wR5j+1hvmO1nUR+DMMomkZezZI0t0=
Subject key identifier: F9:BC:85:CA:2D:CF:D2:DE:FA:D8:7D:19:BB:0E:71:17:E9:60:08:02
Certificate issuer: /CN=13D6391FCB134FC58D7667022B863F28141BC5AF
Certificate serial: 504E853CD819903CA90D62459AAD15E4B016ED83
Authority key identifier: 13:D6:39:1F:CB:13:4F:C5:8D:76:67:02:2B:86:3F:28:14:1B:C5:AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6391FCB134FC58D7667022B863F28141BC5AF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/20D159C1C188C35C9FBDF7AE01F62273CAC56AC8C0900C2A83C9BA904C25DB29/0/3230312e3133312e322e302f32342d3234203d3e20323633313631.roa
Signing time: Tue 05 Mar 2024 18:20:59 +0000
ROA not before: Tue 05 Mar 2024 18:15:59 +0000
ROA not after: Tue 04 Mar 2025 18:20:59 +0000
asID: 263161
IP address blocks: 201.131.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:4e:85:3c:d8:19:90:3c:a9:0d:62:45:9a:ad:15:e4:b0:16:ed:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13D6391FCB134FC58D7667022B863F28141BC5AF
Validity
Not Before: Mar 5 18:15:59 2024 GMT
Not After : Mar 4 18:20:59 2025 GMT
Subject: CN=F9BC85CA2DCFD2DEFAD87D19BB0E7117E9600802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:31:40:70:42:74:6f:18:1b:d1:7e:8c:4e:
d4:a7:63:59:33:08:c7:4a:c2:a2:62:e6:e0:bd:dd:
2b:3c:9a:fe:58:87:e0:d4:9e:12:9a:01:bf:3c:d0:
ca:cd:43:02:40:3d:d2:c2:95:84:18:4c:00:24:13:
7d:05:47:05:6f:51:8e:69:00:7b:c9:79:23:0d:a7:
2b:64:40:ac:c5:55:8c:62:88:e5:41:e7:e5:2e:3a:
ab:c2:28:c9:bd:d6:da:ef:0e:25:38:ad:a6:00:8f:
d0:2c:51:76:6c:ff:0c:bf:c0:4a:4a:8c:38:aa:96:
c3:de:4d:2f:d3:33:e5:1b:c2:ba:e3:07:eb:87:c5:
35:7b:50:88:63:71:ae:16:45:5f:44:fb:84:48:0a:
a4:bb:ef:da:b6:54:91:07:26:97:e2:02:2b:5f:dc:
05:3a:26:bb:fb:6c:5f:13:23:e5:65:94:d3:42:62:
a6:12:f0:1a:9f:81:a0:03:ce:68:a8:2c:28:b3:44:
a3:22:a9:00:31:3e:4a:3d:23:b5:0a:b0:75:27:40:
b9:80:8e:a7:47:ab:32:8c:87:a0:cc:39:6d:9f:39:
c5:21:bc:19:c8:a8:73:10:2f:09:ad:b3:d5:b9:5a:
52:95:73:c1:81:d6:d3:f9:18:35:4f:09:db:2e:d3:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BC:85:CA:2D:CF:D2:DE:FA:D8:7D:19:BB:0E:71:17:E9:60:08:02
X509v3 Authority Key Identifier:
keyid:13:D6:39:1F:CB:13:4F:C5:8D:76:67:02:2B:86:3F:28:14:1B:C5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/20D159C1C188C35C9FBDF7AE01F62273CAC56AC8C0900C2A83C9BA904C25DB29/0/13D6391FCB134FC58D7667022B863F28141BC5AF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6391FCB134FC58D7667022B863F28141BC5AF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20D159C1C188C35C9FBDF7AE01F62273CAC56AC8C0900C2A83C9BA904C25DB29/0/3230312e3133312e322e302f32342d3234203d3e20323633313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.2.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c9:cf:c3:d5:1d:57:01:75:12:ff:c8:2b:56:16:ab:ee:0d:
d4:b2:f5:e3:6f:4a:c4:fc:e5:0a:8e:0e:11:88:2d:05:74:bc:
25:90:c5:58:c1:cf:2b:5c:ad:c7:c2:92:be:24:51:ec:f7:d2:
62:52:74:42:b0:c5:bc:b3:79:2d:0b:33:82:8d:75:98:79:43:
1f:30:22:c9:85:c9:fa:83:54:a8:c7:55:47:73:ca:83:fd:07:
1c:71:25:98:dc:2d:0b:63:70:aa:aa:77:0a:ab:9f:94:77:39:
5c:8a:d1:2f:02:98:85:44:8d:b9:8b:68:61:43:f7:88:f6:7d:
c1:74:5a:ed:0b:5f:5f:5e:6f:72:ee:05:7d:56:5f:31:38:69:
a0:4c:95:a0:5c:f4:14:69:d2:03:06:51:28:b4:f2:bb:b4:f6:
a6:df:83:8a:47:ce:4b:89:3d:80:6b:00:36:bb:6a:03:a2:57:
73:b6:01:9a:b2:99:7c:37:c5:8e:7e:89:a0:70:42:5c:0b:01:
0e:f4:f4:f7:fd:f2:f0:0a:ba:12:ab:e8:2e:21:73:42:d9:e7:
7a:dc:3a:d3:cf:3e:80:5f:94:04:40:83:ac:d0:1e:f3:a8:5d:
d8:a0:a3:a7:a5:5d:3c:d4:47:28:14:d4:29:a0:67:3c:46:5b:
cb:66:5d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org