Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1849af7f62ed780f29d2cec1a28ad27564191b16.roa
File: 1849af7f62ed780f29d2cec1a28ad27564191b16.roa (raw, json)
Hash identifier: VjVbQqFqfwqkOYtCA8KMP/Nu5xtKwnd5TEOG4oQgCPc=
Subject key identifier: BE:A3:D6:D6:EC:0D:6A:69:16:99:AC:39:FB:D7:75:56:90:B4:50:F8
Certificate issuer: /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial: 27ADA6
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1849af7f62ed780f29d2cec1a28ad27564191b16.roa
Signing time: Wed 08 Nov 2023 15:00:38 +0000
ROA not before: Wed 08 Nov 2023 15:00:37 +0000
ROA not after: Wed 08 Nov 2028 15:00:37 +0000
asID: 263699
IP address blocks: 190.114.96.0/22 maxlen: 24
190.114.96.0/22 maxlen: 24
190.114.100.0/23 maxlen: 24
200.123.36.0/22 maxlen: 24
200.123.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2600358 (0x27ada6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Validity
Not Before: Nov 8 15:00:37 2023 GMT
Not After : Nov 8 15:00:37 2028 GMT
Subject: CN=1849af7f62ed780f29d2cec1a28ad27564191b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:6d:83:82:6d:7f:72:a7:37:33:16:d3:65:
fe:71:a6:46:54:00:e7:a0:79:5e:2a:f3:28:69:4c:
ec:f0:37:0c:f4:ef:74:8f:30:07:70:20:d8:ef:34:
07:a0:0d:ed:99:ae:fc:c1:fe:b8:49:30:59:25:bd:
e0:37:a3:cd:e2:1a:37:56:46:48:6f:7d:4b:2f:5f:
f7:e1:49:15:10:d0:bc:07:7d:18:47:3f:60:92:cc:
0c:4f:52:77:f6:97:1c:9c:26:58:29:41:62:f5:5a:
85:23:94:09:a1:a2:79:69:37:fc:92:75:99:5e:4e:
f9:8a:ea:30:0e:c8:52:49:ba:fe:2f:f5:2e:a7:1b:
27:98:b9:90:90:2f:51:86:4e:f0:74:25:ac:4d:2a:
6f:1a:7a:b6:83:db:3b:de:ce:bd:29:b7:b4:3b:c4:
88:9a:8a:01:8c:38:a5:75:65:34:51:7e:74:c2:5a:
08:a4:77:5f:13:d4:c6:fc:13:b0:95:70:47:3d:d6:
8f:00:d3:3d:9a:1f:3f:68:a2:ac:11:d9:2b:d3:b3:
cd:bc:ee:cb:f1:95:8d:3d:58:00:de:94:af:46:d8:
e5:85:c0:cf:e0:7c:56:da:45:72:ef:c9:bf:31:5e:
30:82:74:72:3e:45:d8:f1:3a:ea:23:9a:94:c3:31:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A3:D6:D6:EC:0D:6A:69:16:99:AC:39:FB:D7:75:56:90:B4:50:F8
X509v3 Authority Key Identifier:
keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1849af7f62ed780f29d2cec1a28ad27564191b16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.114.96.0-190.114.101.255
200.123.36.0-200.123.47.255
Signature Algorithm: sha256WithRSAEncryption
71:44:fa:34:54:73:be:6d:2a:a1:3e:16:fa:73:99:e0:d6:69:
84:64:5e:89:ac:68:9f:72:01:b6:ca:9f:ec:2d:01:00:1e:a0:
1e:bd:a8:9b:c8:08:bc:ad:62:33:49:12:0d:7b:96:45:cf:0b:
ee:57:60:58:51:31:93:1d:23:f5:27:6c:f5:55:2c:06:fc:15:
ee:62:12:c2:52:a3:06:2e:67:21:c9:f0:50:be:94:93:ab:9f:
29:35:23:43:b1:47:f1:54:b3:3a:e0:5c:99:76:84:53:e1:5f:
83:22:93:e9:e9:1c:74:26:5d:c0:4e:5a:67:d9:e1:fa:27:21:
62:08:52:8a:0d:a9:02:23:28:70:95:19:01:5e:bb:09:47:d4:
6a:7b:63:13:20:37:5d:98:c1:f5:ec:0a:a3:b6:ad:2b:7f:1c:
3d:f5:30:1d:6d:05:93:79:45:60:c1:90:16:88:ec:03:a9:8e:
f3:b0:f4:d2:80:62:0a:90:d2:ac:17:b7:7d:ef:c7:68:09:b3:
84:f6:06:6c:0b:ec:69:a3:9c:a8:c2:94:09:ea:a2:c5:06:ac:
33:cc:bd:5c:b4:e7:15:a0:dd:67:00:3f:06:26:47:67:53:e7:
ed:16:37:1b:83:f2:2d:c1:3f:f7:74:65:6f:7c:c7:fb:ce:a5:
5a:93:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:51 2024 by rpki-client on console-fra.rpki-client.org