Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a0437ff603cc5d30285121355ebb44afdf1d4b4f.roa
File: a0437ff603cc5d30285121355ebb44afdf1d4b4f.roa (raw, json)
Hash identifier: jkd8+z4aIbIPbYbj2PGvvdiZBpFNw/bjWWCuM00Fp5w=
Subject key identifier: A3:07:2D:70:56:E4:F6:1B:A1:8E:14:C3:1C:AC:8D:FE:99:AC:EB:1E
Certificate issuer: /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial: 27ECF3
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a0437ff603cc5d30285121355ebb44afdf1d4b4f.roa
Signing time: Wed 08 Nov 2023 15:01:00 +0000
ROA not before: Wed 08 Nov 2023 15:00:37 +0000
ROA not after: Wed 08 Nov 2028 15:00:37 +0000
asID: 52399
IP address blocks: 200.50.191.0/24 maxlen: 24
190.110.250.0/23 maxlen: 24
190.114.102.0/24 maxlen: 24
190.110.224.0/24 maxlen: 24
190.110.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2616563 (0x27ecf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Validity
Not Before: Nov 8 15:00:37 2023 GMT
Not After : Nov 8 15:00:37 2028 GMT
Subject: CN=a0437ff603cc5d30285121355ebb44afdf1d4b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:7c:f8:d5:d0:05:ef:37:18:8f:8f:dd:41:
81:e9:c8:34:d9:02:0f:95:66:01:a8:a3:d1:3c:f6:
61:35:c3:01:71:bb:04:44:02:0c:92:71:c0:ee:2d:
dc:06:3f:53:b9:54:bb:f8:20:a6:30:80:51:7b:a5:
87:3f:5f:b1:4a:12:47:1f:c5:b4:a5:3b:74:d8:24:
87:6b:6c:d8:32:f0:5c:6c:73:16:02:68:f5:51:9d:
17:2c:ee:6d:91:9a:97:05:c9:61:0a:32:02:b6:06:
ff:41:ae:2a:d1:15:79:d3:cc:4f:e2:97:8d:ec:00:
4c:1c:c0:ab:44:5c:6e:c8:b3:45:5c:fb:23:3b:a8:
ee:d2:8e:a0:ea:e9:ed:f9:96:67:86:4e:11:70:48:
70:5e:e3:1e:e4:b9:69:39:cc:4a:4b:ac:36:37:93:
22:aa:af:a8:4e:c7:f1:82:f2:26:02:ba:0f:75:be:
aa:0a:3c:1d:ae:ee:ef:47:85:45:42:7a:0f:2d:9f:
0d:d0:70:20:11:d3:f5:cc:3f:8d:65:f7:1b:42:e6:
e3:f2:91:23:35:4b:8d:2f:8e:0e:ca:4a:07:dc:b1:
b5:eb:c7:82:b2:71:c1:82:ec:d2:bb:5c:f4:47:84:
16:7a:b4:7b:3c:cd:85:78:6b:2d:bb:9f:57:1e:77:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:07:2D:70:56:E4:F6:1B:A1:8E:14:C3:1C:AC:8D:FE:99:AC:EB:1E
X509v3 Authority Key Identifier:
keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a0437ff603cc5d30285121355ebb44afdf1d4b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.224.0/24
190.110.232.0/22
190.110.250.0/23
190.114.102.0/24
200.50.191.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3d:cd:b2:19:bb:3a:f8:d7:96:e8:02:d3:31:fb:5a:b5:82:
a0:f3:7d:99:3b:19:07:b1:d2:b2:e1:91:61:21:f7:37:7c:b3:
ae:e7:59:f1:38:71:b9:ec:10:f5:0c:2b:99:7a:6a:6e:51:07:
1e:a6:ad:12:c7:5d:14:4b:42:33:01:28:6a:95:47:4c:74:32:
9d:a7:08:bb:d2:47:26:9a:72:09:6a:00:8d:37:b3:76:2a:9b:
20:1d:9c:5f:37:92:98:b4:6d:78:8a:37:9a:9b:d2:9e:4c:d5:
43:06:7d:5a:38:a1:94:b3:db:27:e1:ee:61:73:44:53:91:88:
2b:ed:f7:9a:22:e8:a7:76:25:1e:8e:dd:c2:b2:34:51:7d:44:
e4:31:63:fd:80:4f:2d:6c:6b:e6:f1:bc:1f:9a:1a:34:0c:14:
69:87:6a:ef:aa:8e:5d:c2:b7:7a:b6:72:e6:de:c5:94:1f:11:
67:f4:d5:ce:d0:1a:9e:5f:02:94:a6:6c:83:7d:ac:78:e8:eb:
e4:5c:a3:dd:66:5a:85:09:cf:33:ee:47:aa:b0:1d:2b:32:39:
5a:c7:80:c0:55:60:36:61:65:d0:1b:9f:6d:13:bc:9d:32:1e:
c6:6d:63:ad:ec:29:fa:f0:18:70:a9:98:8c:6e:b7:c0:b6:b8:
f3:f2:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:51 2024 by rpki-client on console-fra.rpki-client.org