Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/49ff27f7a724dd0ec85b879c55d21c0424caaca8.roa
File: 49ff27f7a724dd0ec85b879c55d21c0424caaca8.roa (raw, json)
Hash identifier: w+oG6JwrJFGZE0TSZjjqBST+F+REjnI/rfbb0S0OgAQ=
Subject key identifier: 0E:E4:9E:C9:EF:0E:FC:E2:52:77:FF:FC:D7:47:F8:10:4D:01:90:BD
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 242A31
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/49ff27f7a724dd0ec85b879c55d21c0424caaca8.roa
Signing time: Mon 17 Jul 2023 16:09:26 +0000
ROA not before: Sun 16 Jul 2023 16:08:49 +0000
ROA not after: Thu 17 Jul 2025 16:08:49 +0000
asID: 264797
IP address blocks: 190.110.248.0/23 maxlen: 24
190.110.252.0/24 maxlen: 24
200.123.49.0/24 maxlen: 24
200.123.51.0/24 maxlen: 24
200.123.54.0/23 maxlen: 24
200.50.166.0/24 maxlen: 24
200.50.169.0/24 maxlen: 24
200.50.171.0/24 maxlen: 24
200.50.172.0/24 maxlen: 24
200.50.174.0/23 maxlen: 24
200.50.174.0/23 maxlen: 24
200.50.176.0/21 maxlen: 24
200.50.184.0/22 maxlen: 24
200.50.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2370097 (0x242a31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Jul 16 16:08:49 2023 GMT
Not After : Jul 17 16:08:49 2025 GMT
Subject: CN=49ff27f7a724dd0ec85b879c55d21c0424caaca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:91:f9:65:3e:de:93:2c:c5:92:71:43:f0:
eb:45:1a:49:29:3d:f2:85:2d:98:3f:fd:88:66:58:
a0:0c:fd:6b:18:d2:f2:de:e0:90:0e:53:ca:ae:6d:
cd:dc:e9:86:01:8c:54:e5:55:4f:ef:30:55:24:28:
68:7f:cb:6d:1f:a4:32:17:62:e8:f9:f5:1f:87:47:
2a:af:be:67:76:53:d7:59:bb:a0:b6:f5:82:7d:bf:
23:88:64:f2:8f:62:c7:c3:14:28:3d:47:53:0a:51:
2c:c8:eb:44:b4:ae:3c:6e:ae:91:13:65:24:95:b7:
19:0b:fa:b1:ab:ba:cd:26:52:78:69:69:d4:bf:ed:
7f:9b:2f:46:7e:31:5d:26:5b:67:29:ed:fe:90:63:
93:2e:7a:07:a1:1f:df:38:09:63:20:d1:d4:f1:13:
b2:90:f9:f0:05:53:c0:10:69:db:f8:ed:05:e9:d2:
07:ed:9d:e7:29:7c:f6:10:c2:aa:bf:2a:93:e1:43:
66:c0:3b:aa:58:86:78:e6:f5:57:7c:0b:32:e4:55:
95:13:30:d1:c1:3f:dd:ab:11:82:cc:0e:14:d9:06:
58:f6:b1:b0:05:2e:d4:d5:10:98:05:13:a6:90:f7:
c9:67:b2:05:87:d6:10:6f:81:c2:52:ad:71:f6:ea:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E4:9E:C9:EF:0E:FC:E2:52:77:FF:FC:D7:47:F8:10:4D:01:90:BD
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/49ff27f7a724dd0ec85b879c55d21c0424caaca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.248.0/23
190.110.252.0/24
200.50.166.0/24
200.50.169.0/24
200.50.171.0-200.50.172.255
200.50.174.0-200.50.189.255
200.123.49.0/24
200.123.51.0/24
200.123.54.0/23
Signature Algorithm: sha256WithRSAEncryption
05:08:5a:1d:20:96:13:b1:08:46:e1:38:70:41:d2:73:8a:dd:
d8:35:06:03:4b:21:e5:92:f7:a3:d1:f7:4a:71:11:70:6d:fc:
24:0f:70:b8:e4:dd:84:76:14:b2:e7:ac:cd:28:40:cf:61:ea:
34:3b:86:e8:53:d3:e4:8f:3d:f2:2f:b4:35:ae:fd:d4:cf:71:
91:82:f5:54:c7:39:04:4d:22:01:a2:78:de:91:e3:00:cc:f7:
bf:7f:76:fe:33:0e:00:8c:49:84:47:a6:16:95:df:9f:c5:b3:
a6:67:f4:23:9b:51:c1:0c:fc:2e:a1:cc:e1:ce:12:5a:54:51:
88:c7:ce:f8:c1:cc:42:2f:84:c6:b2:fd:db:39:d3:c8:15:f6:
58:04:1f:1e:ff:12:ca:60:31:85:a0:b1:73:3f:1b:b7:83:f3:
e7:4c:0f:cb:6a:0a:9e:13:a7:30:a8:2d:cd:5f:4e:3a:d9:0a:
40:fc:86:b5:09:ac:c0:44:2d:fe:f9:38:9f:cd:de:bb:3a:ea:
42:11:2c:99:d2:cf:eb:1c:61:e1:df:b5:6c:ab:55:90:4d:6e:
76:d3:f9:39:e2:e4:d6:b2:e7:12:95:28:11:b4:aa:5b:b8:7f:
c4:52:9a:53:9d:3f:4e:2d:9b:54:a5:4c:b5:f9:f2:15:95:06:
02:06:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:21:06 2023 by rpki-client on console-fra.rpki-client.org