Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/23c9d0a54b5c9e1e060db9988ee5b1de1815c5ff.roa
File: 23c9d0a54b5c9e1e060db9988ee5b1de1815c5ff.roa (raw, json)
Hash identifier: QXz9mNvhGfCli235MQnnDAaiiDdlIHvASFwK/4w2z/w=
Subject key identifier: CF:87:6A:16:C7:27:E1:41:36:3E:4E:5B:89:A2:8F:FB:88:A8:64:B9
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 1E2096
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/23c9d0a54b5c9e1e060db9988ee5b1de1815c5ff.roa
Signing time: Wed 30 Nov 2022 14:26:22 +0000
ROA not before: Tue 23 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 10697
IP address blocks: 200.50.160.0/23 maxlen: 23
200.50.160.0/24 maxlen: 24
200.50.161.0/24 maxlen: 24
200.50.164.0/24 maxlen: 24
200.50.168.0/24 maxlen: 24
200.50.173.0/24 maxlen: 24
200.123.48.0/24 maxlen: 24
2800:820::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974422 (0x1e2096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Mar 23 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=23c9d0a54b5c9e1e060db9988ee5b1de1815c5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:db:84:d7:64:6e:ca:6f:92:c5:52:3e:d3:
e2:22:3c:01:bd:f5:2e:f8:ce:96:3e:d5:bf:6b:bc:
55:16:50:ca:f3:c6:c8:1a:29:61:a5:f1:43:bf:b5:
78:7d:99:e6:18:e2:1c:f7:40:cb:e3:27:f3:0f:5d:
26:9b:2b:9c:dc:17:44:92:07:a3:00:cb:33:7f:53:
f6:4b:53:84:0a:4e:78:de:53:23:9b:ec:38:f1:88:
87:78:40:bb:c8:cb:c4:34:9f:d2:8a:0a:34:b2:c4:
93:d9:4b:63:b6:50:e2:d1:f4:cd:d0:2e:0b:fc:6c:
f1:65:b5:a3:82:b9:d5:92:f1:3e:82:55:5f:e3:67:
6a:2c:82:5c:58:82:cc:10:2e:45:99:05:00:61:a4:
2a:9a:fd:79:95:33:d1:e3:e4:d3:9f:3b:91:fd:2a:
e7:1b:93:bc:ae:4c:d8:f4:e0:f5:e8:9f:c5:28:68:
83:32:13:20:ad:53:72:1e:19:81:21:b2:8d:cd:d7:
3c:fb:47:8d:b2:d4:e0:88:54:7f:f9:fd:f8:b2:be:
50:60:80:4a:5e:96:c6:fd:c4:0e:ab:0d:7b:bd:50:
13:20:c1:ea:36:e8:5d:a8:d7:f7:3d:2d:9e:de:31:
d1:03:4c:ea:f7:12:0f:62:26:c0:36:52:4b:fa:45:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:87:6A:16:C7:27:E1:41:36:3E:4E:5B:89:A2:8F:FB:88:A8:64:B9
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/23c9d0a54b5c9e1e060db9988ee5b1de1815c5ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.160.0/23
200.50.164.0/24
200.50.168.0/24
200.50.173.0/24
200.123.48.0/24
IPv6:
2800:820::/32
Signature Algorithm: sha256WithRSAEncryption
62:cd:2a:44:a6:73:cc:4a:88:8c:e4:fb:f7:6e:07:37:58:8c:
36:8d:a6:0c:dc:18:16:88:75:03:d1:7f:e3:21:15:c5:e4:13:
be:50:dc:c5:c1:25:e8:40:fe:41:31:20:0a:a5:2f:4a:1a:c2:
a1:e8:12:17:75:b8:22:bd:7d:b1:0f:3c:e4:25:1e:e8:5a:1c:
41:92:fe:d3:16:d2:e9:d3:f0:cf:39:76:84:f6:95:df:1a:01:
90:36:2c:24:dc:3a:34:e5:38:f4:2d:a2:39:f9:23:df:f8:12:
51:a5:5e:6c:5d:38:4e:8c:ee:97:5c:4b:04:c7:d2:16:e2:84:
40:e5:66:ee:86:af:e2:ac:51:5b:1f:9d:77:39:93:b7:7a:61:
43:97:3a:6e:74:75:ab:64:9a:aa:7f:02:2a:8c:eb:59:b1:12:
78:7e:a3:fe:ef:80:8e:ed:bf:66:2e:8c:33:d6:d9:6e:30:82:
15:cd:dd:d4:19:5e:cb:07:ce:9b:59:c5:c4:8a:01:26:c1:61:
de:ef:06:f3:c8:fe:a8:b7:f1:81:8e:7e:19:cc:4f:7a:f3:53:
9f:68:6a:38:fa:99:7f:c0:1a:0f:3d:69:0a:cb:86:1b:a4:1e:
9e:10:5d:1e:95:1d:5f:db:42:fd:70:15:b5:d1:c2:be:59:27:
bc:dc:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org