Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1ac02107368366e9c4f1e0f9eb134a6749e2c370.roa
File: 1ac02107368366e9c4f1e0f9eb134a6749e2c370.roa (raw, json)
Hash identifier: ys2uSjUVzu95mJ374GAYi3dMycVD6qkRq6BtWWJVBdg=
Subject key identifier: F2:03:E4:8D:D3:47:18:BB:7C:D3:44:06:20:CF:46:2F:FA:50:2A:BD
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 14398B
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1ac02107368366e9c4f1e0f9eb134a6749e2c370.roa
Signing time: Tue 16 Nov 2021 17:49:52 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 10697
IP address blocks: 200.50.160.0/23 maxlen: 23
200.50.160.0/24 maxlen: 24
200.50.161.0/24 maxlen: 24
200.50.164.0/24 maxlen: 24
200.50.168.0/24 maxlen: 24
200.50.173.0/24 maxlen: 24
200.123.34.0/23 maxlen: 23
200.123.34.0/24 maxlen: 24
200.123.35.0/24 maxlen: 24
2800:820::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1325451 (0x14398b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=1ac02107368366e9c4f1e0f9eb134a6749e2c370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:2d:3c:83:48:6d:56:77:0d:f6:89:a1:c5:
e1:bf:29:15:9b:e1:c0:6f:5c:3c:c4:4f:62:5c:42:
ae:8c:9f:79:63:96:9a:58:68:5c:2b:02:5e:89:ca:
a2:f2:88:1a:52:30:16:83:71:32:2e:b4:7a:63:36:
f2:82:d3:5b:f5:51:e6:05:4d:bd:f9:c3:05:bf:d2:
d5:03:14:70:ea:ae:f3:a7:72:83:c0:af:3e:96:15:
f5:bd:6d:77:e1:1e:e4:4b:36:d9:11:c1:9c:14:c7:
12:ae:4f:01:ed:b1:5b:b8:fc:ef:42:72:45:ad:f8:
af:bb:ab:b5:e5:23:df:1f:20:14:dc:63:92:3d:be:
8f:b0:0d:83:e9:66:73:32:33:00:c5:ee:ad:eb:65:
69:b2:31:97:c3:0f:9e:8d:9c:2f:ea:f5:92:c1:18:
50:f1:c6:19:04:6c:25:de:93:04:12:11:82:36:29:
d7:a7:94:e2:0c:7d:23:8a:19:2b:56:66:d8:8d:16:
d4:db:5a:39:1e:d5:56:0e:d4:18:6f:ee:b0:5f:91:
b5:20:eb:69:df:b9:c4:9e:d7:db:5e:e7:71:d9:c3:
22:e9:72:71:86:5a:01:28:7d:dd:ed:a0:80:c6:9f:
52:73:37:79:30:4b:48:dd:cc:13:01:01:22:35:dd:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:03:E4:8D:D3:47:18:BB:7C:D3:44:06:20:CF:46:2F:FA:50:2A:BD
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1ac02107368366e9c4f1e0f9eb134a6749e2c370.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.160.0/23
200.50.164.0/24
200.50.168.0/24
200.50.173.0/24
200.123.34.0/23
IPv6:
2800:820::/32
Signature Algorithm: sha256WithRSAEncryption
22:ea:28:be:f6:23:85:46:ad:e0:10:e5:77:32:86:78:d9:6b:
96:2f:db:e9:4a:d0:4c:21:0a:7b:ae:b4:b3:48:36:55:48:99:
4b:ea:9b:61:77:4f:fa:8e:7f:b3:d9:48:0a:7a:ee:8e:e9:0c:
63:cc:2a:71:f9:56:e8:5c:dc:9d:f3:8f:3a:06:18:90:f2:59:
ce:66:8a:e6:9f:1b:8b:71:24:ed:7b:9b:b6:1f:da:7f:ff:28:
ad:25:1b:8f:ef:b7:69:70:fd:32:47:3d:a2:68:72:8c:d5:94:
86:f7:36:81:39:e5:17:91:23:bc:c7:39:bf:9e:9d:2f:dd:cc:
2c:13:b0:01:55:11:9c:e9:95:15:0e:24:14:d6:a1:62:aa:d2:
c6:fe:7b:2f:df:20:07:4d:54:e5:d7:91:0f:80:3f:e0:13:69:
30:42:9b:4b:d6:e6:78:d2:f2:4f:be:a5:e1:c0:8f:31:ca:79:
dc:04:fc:46:c4:18:20:45:24:b5:0f:d2:6b:a8:05:8e:41:8c:
f2:68:b0:56:09:e8:2c:28:9b:37:5b:f6:e2:9f:99:a5:23:d9:
89:85:50:b4:e5:1d:34:b9:a7:5f:b1:0c:c4:7c:b5:2f:75:71:
8e:c8:bb:94:30:54:9d:a5:dc:75:1f:2e:38:81:05:76:00:0f:
06:9a:d6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org