Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/467588060826bde286befc532e1036abbf9c7581.roa
File: 467588060826bde286befc532e1036abbf9c7581.roa (raw, json)
Hash identifier: V9qxuBem2rvXmFc4ikglmBKxIcA6UY0nMVzl8L53zNc=
Subject key identifier: 8F:BE:F5:70:E1:2B:5F:39:63:0E:9E:9A:8F:33:CE:86:88:56:40:17
Certificate issuer: /CN=3f0c9202d1972a5deab032862dbcc1d9d5c5e87f
Certificate serial: 1DB7DA
Authority key identifier: D6:B8:B5:8E:04:3A:41:7E:2B:D9:31:F2:B7:7D:CC:06:F1:82:60:E1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/467588060826bde286befc532e1036abbf9c7581.roa
Signing time: Wed 28 Jun 2023 21:03:42 +0000
ROA not before: Tue 27 Jun 2023 21:03:42 +0000
ROA not after: Sat 28 Jun 2025 21:03:42 +0000
asID: 27895
IP address blocks: 190.104.128.0/18 maxlen: 24
200.3.248.0/21 maxlen: 24
2803:2a00::/31 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947610 (0x1db7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0c9202d1972a5deab032862dbcc1d9d5c5e87f
Validity
Not Before: Jun 27 21:03:42 2023 GMT
Not After : Jun 28 21:03:42 2025 GMT
Subject: CN=467588060826bde286befc532e1036abbf9c7581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:30:aa:cd:e5:86:18:e2:37:d5:78:62:c2:
ee:4d:a9:b3:30:3a:92:3d:c6:b2:ac:2b:67:e2:c1:
55:f1:db:9e:7b:d8:d4:cd:db:27:2c:ab:47:db:7b:
16:c4:bd:9f:fb:d2:25:00:da:25:30:b3:84:7f:ee:
12:1f:a9:0f:86:74:ef:24:8d:3e:89:88:2a:29:24:
4d:d2:01:e9:94:97:2b:a2:31:3f:60:7b:8b:87:5b:
e1:99:06:d4:86:dd:ee:77:a6:3a:17:7c:66:68:c8:
3f:47:13:aa:2b:e1:19:9d:1c:ed:5a:db:18:79:37:
21:50:fc:3f:8d:46:62:9e:5d:e1:e4:c9:73:88:74:
2b:c9:88:f1:49:bb:30:99:1e:7a:0d:fb:f1:b5:42:
87:36:7d:49:0d:e6:75:c1:2e:ab:de:ea:71:1d:94:
46:2b:39:ff:27:52:86:b0:9b:66:44:06:b3:8a:43:
ae:7b:2c:f5:cf:0e:4c:ff:3a:1a:f0:9e:77:69:ae:
00:2c:81:ce:de:5a:59:e5:b8:0a:0b:8e:94:5c:14:
42:a6:5b:45:c6:46:1c:d9:9a:18:28:f7:91:79:4c:
83:2d:a6:23:e5:eb:81:30:3d:83:d4:c1:80:9c:4d:
8c:00:19:26:6c:dc:e3:67:43:e4:b3:4c:07:be:a5:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BE:F5:70:E1:2B:5F:39:63:0E:9E:9A:8F:33:CE:86:88:56:40:17
X509v3 Authority Key Identifier:
keyid:D6:B8:B5:8E:04:3A:41:7E:2B:D9:31:F2:B7:7D:CC:06:F1:82:60:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/467588060826bde286befc532e1036abbf9c7581.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.128.0/18
200.3.248.0/21
IPv6:
2803:2a00::/31
Signature Algorithm: sha256WithRSAEncryption
6f:7b:a6:f9:52:9c:78:b3:4b:b2:9b:d3:14:af:6e:1f:b3:51:
75:bd:7b:be:f4:ff:f6:8c:7f:86:cd:39:b1:53:70:b5:a5:b6:
ee:b9:1e:c3:d2:bb:f2:7c:a6:e5:a3:8c:34:55:86:27:7f:50:
5d:d7:31:ae:c3:86:ec:61:e9:39:3f:c9:08:f7:73:4b:1e:a8:
c1:a5:94:ab:9c:34:ca:ab:f0:32:72:8c:8d:e4:fc:24:f9:1b:
94:6d:ca:13:33:e1:e3:16:8b:31:cc:bb:0e:ce:f2:4a:90:43:
44:df:a4:da:13:11:c5:21:5b:8d:b6:f8:a2:51:49:f3:bd:b2:
31:8c:84:78:ae:e5:06:04:8a:30:5a:99:db:7f:e5:7e:cb:e0:
0d:70:27:f4:37:11:8e:45:e0:3c:ff:c9:d9:26:88:b3:b0:e1:
75:c2:04:e7:cd:f1:f3:5d:ff:33:fa:b7:16:89:0f:be:b5:ca:
d6:45:c2:7f:e1:8f:45:7d:28:69:09:85:2b:f8:6d:9a:15:67:
05:82:99:20:ea:1d:c6:a7:c9:4e:60:4b:b8:f8:f0:56:32:fc:
e5:99:65:85:05:d3:3e:c5:5c:a8:a9:65:8c:ab:08:11:f8:d1:
30:e8:4d:01:55:63:b5:72:24:38:b6:c2:3d:56:bd:b4:dc:85:
73:32:8a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org