Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3d6217d364aefd5214291aafa73be8c1c2f298a3.roa
File: 3d6217d364aefd5214291aafa73be8c1c2f298a3.roa (raw, json)
Hash identifier: I0FTXN1zkQDXzu4hqWiOmfjOHfhyJbZ/TFQ8qR7+fVY=
Subject key identifier: 0E:FE:F7:A2:25:A6:9C:F3:02:18:1E:54:A9:FD:53:C4:19:0F:5F:87
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 24375E
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3d6217d364aefd5214291aafa73be8c1c2f298a3.roa
Signing time: Mon 17 Jul 2023 16:09:34 +0000
ROA not before: Sun 16 Jul 2023 16:08:49 +0000
ROA not after: Thu 17 Jul 2025 16:08:49 +0000
asID: 265689
IP address blocks: 200.123.59.0/24 maxlen: 24
200.123.60.0/23 maxlen: 24
200.50.162.0/23 maxlen: 24
200.50.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373470 (0x24375e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Jul 16 16:08:49 2023 GMT
Not After : Jul 17 16:08:49 2025 GMT
Subject: CN=3d6217d364aefd5214291aafa73be8c1c2f298a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:c6:90:6b:72:c7:4a:c4:62:75:bc:54:90:
db:39:d3:13:6f:0c:3f:c1:f7:7b:0f:ec:e7:e2:d8:
8c:ca:f4:33:ec:75:71:03:fc:fc:ca:94:ae:8b:8f:
21:69:d7:33:dd:1e:39:f3:dc:fd:ee:ec:8a:81:9c:
00:d7:97:f7:3c:ae:3d:ee:69:86:47:6c:0f:47:92:
2d:fd:cf:63:c6:2a:f9:e2:c1:88:8c:61:75:09:40:
a4:98:25:82:ab:90:26:2b:82:81:87:81:83:95:b4:
2d:10:0f:f7:2e:ad:b1:74:80:74:80:69:9a:6c:9f:
ca:cf:38:3c:64:d7:56:5f:4d:35:b2:7f:2c:31:7f:
e1:dc:62:be:04:bd:6e:b3:b8:c2:b0:96:47:d4:98:
72:ac:ef:8c:6e:f1:af:f3:02:49:de:fa:fa:10:b1:
3c:0c:26:70:ae:44:7c:d6:a8:7e:96:24:55:b4:77:
fd:9f:93:d2:b8:eb:d1:4f:0a:ee:20:d6:a1:31:19:
9e:15:dc:9e:0c:7b:9f:15:74:c8:d7:66:78:2d:c2:
79:5f:10:3f:7b:dd:9b:1b:69:e4:9e:39:74:f9:83:
aa:ca:e3:c0:2c:ff:c8:ca:b5:4f:46:fb:62:e1:d0:
42:d8:96:49:da:fb:c5:d0:48:0b:96:34:7c:6c:91:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FE:F7:A2:25:A6:9C:F3:02:18:1E:54:A9:FD:53:C4:19:0F:5F:87
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3d6217d364aefd5214291aafa73be8c1c2f298a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.162.0/23
200.50.165.0/24
200.123.59.0-200.123.61.255
Signature Algorithm: sha256WithRSAEncryption
0a:8d:c9:b1:e6:83:a6:2a:36:5a:58:e6:04:ad:1e:76:3c:a7:
a8:31:98:16:c3:bf:8f:2e:9d:2e:df:8f:6b:e2:fc:e0:67:06:
d5:3f:07:da:9c:f4:b8:22:70:73:f3:ea:6f:5f:5d:85:37:ed:
bd:e3:fe:9f:fb:1f:5f:44:0f:94:75:d3:44:b4:c6:30:35:6c:
a9:50:e5:6b:62:3f:02:6d:a7:c4:47:1f:83:83:49:52:17:d0:
60:45:77:09:25:ea:d4:e0:7e:fb:e6:07:74:df:77:ce:93:20:
05:75:c8:5d:15:4f:b6:d4:38:f8:c8:9a:35:9d:99:b9:6d:dd:
71:1c:3c:1e:b0:2d:ed:21:37:2f:b0:ae:3d:3d:9e:67:e3:59:
60:88:c5:81:82:c7:d8:31:d7:21:42:93:41:d6:77:56:f7:ff:
8c:d9:29:67:1c:a2:b4:fa:b0:72:d8:e1:36:dc:00:01:95:47:
9a:c4:11:b0:53:b9:38:1b:51:e5:bf:e3:16:b8:4a:b1:a5:b4:
89:2f:2a:ae:dd:2c:ed:5f:a8:05:18:dc:fe:ac:3c:f2:f2:d8:
51:94:67:a9:c0:10:53:9f:fe:3b:3d:12:78:f7:88:26:da:fc:
ba:39:c2:cf:5d:ea:3c:66:88:cd:d3:fe:75:1f:d3:a2:80:49:
18:eb:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:21:06 2023 by rpki-client on console-fra.rpki-client.org