Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/70810bd41c2c97614731e0c0d672753deabe6113.roa
File: 70810bd41c2c97614731e0c0d672753deabe6113.roa (raw, json)
Hash identifier: LjvTc5+ypsaBsOoNlcdSw9j3VGK/ErFPS07cLOzmFyE=
Subject key identifier: 74:19:E5:F7:34:BB:DE:F8:07:10:40:D3:86:1F:39:AF:01:3B:7B:27
Certificate issuer: /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial: 278959
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/70810bd41c2c97614731e0c0d672753deabe6113.roa
Signing time: Tue 07 Nov 2023 16:00:52 +0000
ROA not before: Tue 07 Nov 2023 16:00:38 +0000
ROA not after: Tue 07 Nov 2028 16:00:38 +0000
asID: 264797
IP address blocks: 190.110.248.0/23 maxlen: 24
190.110.252.0/24 maxlen: 24
200.123.49.0/24 maxlen: 24
200.123.51.0/24 maxlen: 24
200.123.54.0/23 maxlen: 24
200.50.166.0/24 maxlen: 24
200.50.169.0/24 maxlen: 24
200.50.171.0/24 maxlen: 24
200.50.172.0/24 maxlen: 24
200.50.174.0/23 maxlen: 24
200.50.174.0/23 maxlen: 24
200.50.176.0/21 maxlen: 24
200.50.184.0/22 maxlen: 24
200.50.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2591065 (0x278959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Validity
Not Before: Nov 7 16:00:38 2023 GMT
Not After : Nov 7 16:00:38 2028 GMT
Subject: CN=70810bd41c2c97614731e0c0d672753deabe6113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:b5:c0:16:ba:e9:a4:61:62:c8:55:9e:9d:
9e:83:9b:c2:0a:af:11:7c:58:8e:38:2d:57:ca:4d:
f8:63:50:42:15:ea:22:cd:37:82:34:07:c9:e0:e7:
ae:44:cf:ab:29:0a:64:a6:35:1b:df:2d:2a:e5:f6:
ee:ab:db:df:0a:f3:90:02:b1:dd:ac:3b:1b:bb:0b:
f0:98:ba:ac:f6:18:32:74:bc:de:c3:be:e2:aa:76:
58:3c:6e:85:90:41:af:d1:5a:fa:fa:aa:8a:e0:0b:
95:f4:f4:82:95:ee:25:bf:07:4d:32:fd:18:d0:08:
42:78:0c:c3:50:28:21:16:d2:64:97:cf:d8:ae:f6:
f5:b5:bd:a1:d0:46:28:24:0a:e6:b9:e9:d4:64:7b:
9b:f2:84:e4:de:a8:5b:45:81:be:1b:2b:21:1e:18:
96:30:02:46:a5:fe:82:20:30:96:be:db:bb:b9:98:
cb:db:ed:de:92:4c:56:0e:c2:cf:2c:d3:63:11:f0:
0d:5a:91:78:2e:3e:86:c8:dc:b2:33:7a:a3:0a:75:
6b:b3:3c:c9:55:c9:6a:03:d5:e5:34:59:d4:2f:f8:
01:d3:76:aa:03:72:26:e6:bb:12:76:6c:81:86:ae:
6a:59:9c:a3:80:33:fd:a4:05:fb:71:aa:b4:28:70:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:19:E5:F7:34:BB:DE:F8:07:10:40:D3:86:1F:39:AF:01:3B:7B:27
X509v3 Authority Key Identifier:
keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/70810bd41c2c97614731e0c0d672753deabe6113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.248.0/23
190.110.252.0/24
200.50.166.0/24
200.50.169.0/24
200.50.171.0-200.50.172.255
200.50.174.0-200.50.189.255
200.123.49.0/24
200.123.51.0/24
200.123.54.0/23
Signature Algorithm: sha256WithRSAEncryption
25:1a:c9:86:96:94:c1:1f:de:9e:fc:fe:91:5b:9d:2e:85:33:
24:89:31:41:ab:40:43:4a:f4:0b:e4:54:fc:1f:38:a4:50:15:
83:0e:69:4f:fb:4a:09:d0:49:f2:9d:55:52:0e:54:fb:63:36:
07:5a:94:ba:5d:b5:6a:0d:7b:79:7a:49:5f:74:22:74:62:ac:
ed:1e:78:82:98:87:99:ba:c2:92:9e:f1:43:2e:1f:59:6b:99:
c1:d9:ab:8c:5c:78:30:88:95:29:0d:90:18:af:70:4c:ce:c7:
fc:48:46:41:17:6e:b7:e0:c0:63:ee:d2:5b:e6:67:3e:21:d2:
93:b9:db:bd:92:c0:aa:47:46:22:d9:b4:6c:10:9d:1e:fb:53:
f3:c6:a2:1e:65:ad:ec:11:9f:00:d3:6f:50:56:ea:98:be:7c:
b3:e8:77:20:39:67:d4:7a:68:85:98:21:5e:98:dc:e5:f3:de:
11:ca:6f:31:8e:61:9f:63:0d:79:8a:7a:0b:d9:79:26:f4:f6:
91:9a:0b:16:91:e3:98:52:d1:3b:80:88:5f:0c:fd:33:d4:2a:
06:6f:5a:7d:75:db:33:57:c8:23:59:86:60:87:1a:8c:07:89:
d1:ed:bd:6e:52:83:d3:16:70:e2:4a:dd:17:17:65:3e:12:81:
d9:47:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 15:45:01 2023 by rpki-client on console-ams.rpki-client.org