Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c8f0e90e68846f47a7062ed372db61535851becb.roa
File: c8f0e90e68846f47a7062ed372db61535851becb.roa (raw, json)
Hash identifier: xS/N8SYm9xnDdDETa2mHNJsMijOWm6yJuqtqfkiZQp0=
Subject key identifier: 1F:D2:D0:28:D0:02:03:C7:92:F1:5F:0F:98:EC:54:90:B4:85:16:D1
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 24228D
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c8f0e90e68846f47a7062ed372db61535851becb.roa
Signing time: Mon 17 Jul 2023 16:09:23 +0000
ROA not before: Sun 16 Jul 2023 16:08:49 +0000
ROA not after: Thu 17 Jul 2025 16:08:49 +0000
asID: 263699
IP address blocks: 190.114.96.0/22 maxlen: 24
190.114.96.0/22 maxlen: 24
190.114.100.0/23 maxlen: 24
200.123.36.0/22 maxlen: 24
200.123.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368141 (0x24228d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Jul 16 16:08:49 2023 GMT
Not After : Jul 17 16:08:49 2025 GMT
Subject: CN=c8f0e90e68846f47a7062ed372db61535851becb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cd:6d:5f:ef:92:27:69:26:ed:e6:05:2c:dd:
2a:4e:99:93:23:c5:1e:68:7c:44:06:10:27:75:83:
4a:c5:87:f1:de:da:34:46:ce:46:aa:dc:5c:f8:da:
3f:fc:b3:2b:e2:36:3e:65:8e:2b:27:b9:d8:52:6d:
4c:27:87:92:8b:8f:83:bf:9f:2b:3b:b5:79:03:34:
b9:e9:4a:63:ae:96:22:3b:a4:5e:d3:02:68:16:b0:
fc:b1:95:05:bc:bb:1e:42:d7:76:c7:a9:16:7d:e6:
2c:b7:5c:e2:d8:23:19:54:42:f6:39:b9:5f:7e:00:
87:69:a1:1d:f6:a9:02:c2:b0:a6:e5:88:6c:bc:5a:
73:b5:4c:6e:44:76:36:fb:fc:ad:fe:23:72:2d:26:
12:c3:12:76:07:b7:41:07:05:74:a9:27:a4:ab:e5:
44:3c:71:4d:b9:34:4a:f9:f4:fb:0b:03:d0:58:1d:
8c:84:8f:da:d1:21:05:69:c1:43:a1:2e:a5:30:26:
9a:7c:77:56:b1:65:12:f0:e1:34:9c:14:95:12:40:
16:69:82:15:c9:b9:20:bc:af:c8:86:12:5b:97:4f:
82:d8:1e:4c:fe:84:38:b6:4b:5e:ae:57:6c:48:e6:
6a:b0:9a:8a:57:b4:41:b6:f1:ea:b1:61:e4:d0:a2:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:D0:28:D0:02:03:C7:92:F1:5F:0F:98:EC:54:90:B4:85:16:D1
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c8f0e90e68846f47a7062ed372db61535851becb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.114.96.0-190.114.101.255
200.123.36.0-200.123.47.255
Signature Algorithm: sha256WithRSAEncryption
06:ea:28:bc:f4:25:f1:50:48:bc:1f:27:1a:fd:ed:69:64:37:
2c:d9:88:fd:10:af:8f:36:f5:4c:ef:2d:bb:b5:f3:3e:ad:32:
89:ee:24:be:1b:3c:f5:2b:9c:18:da:67:4f:b4:22:15:9a:40:
66:47:45:2e:3c:4d:d1:74:a2:bd:3e:68:6a:51:81:cc:bb:10:
d4:7d:47:65:2d:41:ed:04:8c:66:73:27:a4:d6:12:3b:a2:b6:
79:9b:0e:d3:74:ca:41:e1:e9:50:88:86:11:c4:29:88:71:8d:
19:c5:11:24:bf:25:4f:2d:4c:84:55:13:2f:b4:15:f4:d4:1b:
fc:aa:f4:4b:9d:f9:e1:33:3b:f7:f0:d4:48:0d:60:55:ca:ca:
03:65:d8:6c:12:df:17:e4:57:95:54:80:1c:9c:dc:82:45:bb:
14:32:fc:9c:04:6d:4d:06:ad:d8:e9:92:bb:99:1a:4c:d5:9c:
aa:fa:a8:da:d4:71:f0:3f:77:40:a9:9d:9d:e4:7e:40:15:70:
29:f9:ea:7b:88:76:1a:9c:c9:b2:3c:dc:46:78:84:3b:68:a5:
11:f1:3b:66:b3:aa:39:7a:e7:f4:3b:09:56:37:74:29:3a:cb:
db:22:35:a0:76:4c:e4:f7:0f:59:47:0b:95:66:48:64:ed:8f:
95:ee:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:46:42 2023 by rpki-client on console-ams.rpki-client.org