Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/096ff1f1ad6da63d5f9f5d4321989b06f05d8711.roa
File: 096ff1f1ad6da63d5f9f5d4321989b06f05d8711.roa (raw, json)
Hash identifier: YXDvBzw7Z2y1m89b0ztuO9KVcqQt/iM5I/Xx3F/E4ck=
Subject key identifier: 96:5D:33:99:71:E3:94:F4:C3:52:03:53:DE:82:9E:2D:25:2C:80:1F
Certificate issuer: /CN=7532aa9172d6c90589b8b3a606a5cf88114d35d8
Certificate serial: 060946
Authority key identifier: 15:7B:21:D6:77:35:5E:01:B6:92:84:2D:CD:BE:5D:FC:BC:89:58:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7532aa9172d6c90589b8b3a606a5cf88114d35d8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/096ff1f1ad6da63d5f9f5d4321989b06f05d8711.roa
Signing time: Wed 24 Mar 2021 14:32:09 +0000
ROA not before: Wed 24 Mar 2021 14:32:09 +0000
ROA not after: Tue 24 Mar 2026 14:32:09 +0000
asID: 270002
IP address blocks: 200.59.212.0/22 maxlen: 24
2803:31e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395590 (0x60946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7532aa9172d6c90589b8b3a606a5cf88114d35d8
Validity
Not Before: Mar 24 14:32:09 2021 GMT
Not After : Mar 24 14:32:09 2026 GMT
Subject: CN=096ff1f1ad6da63d5f9f5d4321989b06f05d8711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:19:e5:64:0c:6b:0e:2b:71:63:d5:55:11:
4a:b7:7b:db:a4:04:af:67:3b:8a:9a:a1:24:51:fc:
13:7c:b4:69:78:b3:5d:a6:45:70:8a:30:03:19:2e:
55:89:55:9c:ef:2f:92:dd:69:21:60:35:2b:6a:b1:
d2:ee:a7:ee:7c:67:88:49:de:c1:a0:12:2c:d7:2d:
f7:fc:98:8d:24:dc:50:e7:38:c7:9b:0d:bb:7b:32:
f4:e8:16:8c:39:b5:50:7e:a0:99:f5:39:0f:e5:2c:
3f:80:c6:6f:ee:88:41:42:46:7f:a6:72:43:2d:2e:
f8:f8:fa:8b:66:47:04:25:99:4a:01:4d:67:ea:2a:
b4:95:7f:fd:b4:34:4c:79:e7:a9:a3:2a:72:ad:87:
4e:8a:e2:f1:9c:31:00:4b:50:5b:bb:f9:4d:e3:6c:
45:49:a1:aa:64:f8:0f:08:35:f3:d9:c7:0a:3f:22:
a1:97:95:46:6c:d9:2d:b6:25:07:f2:ff:ab:3e:84:
dd:e3:41:3d:9d:b4:5f:78:e1:db:5e:bb:e8:5b:a1:
14:7d:32:f8:78:ef:5b:bb:3a:df:38:00:81:65:7b:
84:30:2d:fe:57:4c:f0:93:12:c1:e8:2d:81:44:0d:
aa:6b:02:b6:a9:eb:f0:39:54:f7:b4:3e:68:52:44:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5D:33:99:71:E3:94:F4:C3:52:03:53:DE:82:9E:2D:25:2C:80:1F
X509v3 Authority Key Identifier:
keyid:15:7B:21:D6:77:35:5E:01:B6:92:84:2D:CD:BE:5D:FC:BC:89:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7532aa9172d6c90589b8b3a606a5cf88114d35d8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/096ff1f1ad6da63d5f9f5d4321989b06f05d8711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/7532aa9172d6c90589b8b3a606a5cf88114d35d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.59.212.0/22
IPv6:
2803:31e0::/32
Signature Algorithm: sha256WithRSAEncryption
12:b8:21:ae:86:2c:5b:23:0c:f7:f3:84:da:65:63:95:af:7a:
85:da:2d:84:cb:dd:8d:7f:52:75:c5:9a:d9:5e:c4:d8:b9:ea:
f0:e0:f9:3d:2e:c5:d1:cb:b4:37:9e:63:65:18:cf:f2:d3:cd:
93:9a:1a:4d:50:52:56:68:e8:e9:ef:77:81:af:c1:bc:15:95:
99:94:3f:5d:bd:cc:e1:ce:2f:27:8e:80:f9:77:cd:73:54:01:
ff:80:54:65:c3:7c:91:09:6c:8b:90:12:bd:99:45:fc:f5:a8:
1c:25:b5:c5:bd:4d:b0:1c:50:e8:0e:68:40:f7:d7:a1:2f:56:
20:41:31:96:be:8d:3d:c1:be:ac:df:da:6d:74:59:a2:3d:c0:
0d:8e:c4:44:1e:ba:ea:09:bf:8e:b5:6e:cb:0f:86:ca:5b:1f:
cd:0e:23:45:a7:b1:fd:b8:a6:6a:6f:20:3c:46:7c:69:7c:03:
1f:f9:15:ef:77:41:dc:bd:97:06:38:01:cf:d4:ab:77:c3:95:
12:e0:df:10:d0:da:ee:09:0a:7d:f8:27:00:b1:20:06:a6:13:
06:76:0b:0c:2a:63:e2:bb:35:43:37:77:39:a7:36:33:2e:1c:
78:ef:76:52:71:ca:f7:65:47:9a:97:32:cf:b9:d8:1c:39:0b:
3a:a3:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org