Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/236780d948a9960172afb36c93c752d19af77e92.roa
File: 236780d948a9960172afb36c93c752d19af77e92.roa (raw, json)
Hash identifier: 9hrjMxknbis2FjKXRBZ3F31lKAfsjzRloKePJftKlNg=
Subject key identifier: 3D:45:35:49:5F:F8:B9:D5:5F:CE:E6:FC:D2:FA:13:19:B1:81:B2:F0
Certificate issuer: /CN=e023bb317eecb014b8f7048b5b30535732897c94
Certificate serial: 0784CC
Authority key identifier: B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/236780d948a9960172afb36c93c752d19af77e92.roa
Signing time: Wed 07 Feb 2024 01:09:59 +0000
ROA not before: Wed 07 Feb 2024 01:09:59 +0000
ROA not after: Sat 07 Feb 2026 01:09:59 +0000
asID: 6503
IP address blocks: 189.205.0.0/17 maxlen: 24
200.36.96.0/19 maxlen: 24
189.205.128.0/17 maxlen: 24
207.249.128.0/19 maxlen: 24
189.213.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492748 (0x784cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e023bb317eecb014b8f7048b5b30535732897c94
Validity
Not Before: Feb 7 01:09:59 2024 GMT
Not After : Feb 7 01:09:59 2026 GMT
Subject: CN=236780d948a9960172afb36c93c752d19af77e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d8:4a:02:a1:a6:0f:fe:8f:c1:ef:ba:c7:f9:
66:2f:cc:60:a3:c3:4a:36:f5:aa:e2:64:55:a1:d7:
a4:b2:12:ea:85:9e:82:cc:2e:73:81:45:2a:59:4f:
7d:6c:f8:c6:73:85:cc:25:60:85:52:59:31:2b:27:
22:f6:2e:21:a4:d0:e6:5d:bc:8f:9d:e1:62:d3:82:
25:77:1e:04:3f:90:37:ae:65:80:13:bf:47:f7:94:
e0:08:40:a9:6a:d0:02:00:f4:2a:e5:3f:1a:be:f1:
a4:3c:6a:35:d0:b8:5c:4e:21:f6:bb:ab:e1:de:33:
3f:c5:7b:b2:55:f4:96:aa:7e:7f:ca:b0:b8:01:5c:
8a:62:84:bb:4f:f2:6e:b4:e5:d3:6a:f0:f8:fa:80:
43:e7:79:3c:5c:7f:ee:02:7b:52:db:9f:2c:55:3a:
28:6e:79:17:5f:31:63:0d:25:8f:53:5b:ae:2f:5a:
06:a5:f6:27:e5:1c:71:4b:2a:11:f2:5c:0f:d4:49:
e9:07:b4:f5:ca:ca:ef:18:d9:9b:fa:af:2b:f8:26:
0b:fa:fc:38:ed:e9:d0:9a:19:90:86:c0:88:b8:e4:
4c:f6:e6:72:17:7a:4e:bd:81:d7:eb:29:57:65:10:
c4:5e:13:ae:e9:7d:81:2a:96:d5:90:16:83:7a:15:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:45:35:49:5F:F8:B9:D5:5F:CE:E6:FC:D2:FA:13:19:B1:81:B2:F0
X509v3 Authority Key Identifier:
keyid:B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/236780d948a9960172afb36c93c752d19af77e92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e023bb317eecb014b8f7048b5b30535732897c94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.205.0.0/16
189.213.0.0/17
200.36.96.0/19
207.249.128.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:bd:d4:96:63:ea:d3:98:b6:9a:89:c4:d1:45:8f:14:b1:b3:
af:c2:d7:26:d4:87:1e:a4:38:a5:28:3c:ab:18:9e:16:a3:9f:
08:a5:7c:b2:45:9b:74:00:08:85:57:48:fb:fb:53:5c:f8:2a:
e8:d8:d6:00:73:39:b6:cf:9a:84:04:2d:26:a6:7b:2e:e5:22:
66:3d:d9:2c:b5:2d:39:d4:82:0e:e7:0d:49:37:75:2a:50:5c:
5c:cc:59:b0:d6:b9:33:c2:9c:e7:07:74:96:8d:d9:33:52:20:
90:8b:27:97:a6:60:e5:fc:da:0f:1f:78:38:05:e9:20:2b:d8:
eb:ff:ff:99:dd:2c:97:41:85:3a:46:1b:82:d2:f0:8e:f3:28:
a5:f6:5e:8a:b3:e4:9b:4e:92:b9:ce:97:62:b0:de:33:09:82:
f8:7f:b1:b8:ea:05:42:4b:cb:5c:aa:5c:85:39:b3:10:63:98:
98:b0:73:9b:ee:7d:d6:12:07:79:fe:b0:81:7e:67:ef:f3:37:
41:75:23:be:99:1a:ec:cd:67:db:2a:7d:0b:76:83:03:74:a9:
bf:05:a4:04:18:ad:85:63:a9:98:f8:df:c2:2c:2d:c0:d2:a9:
45:a8:69:5e:7a:27:75:56:86:d0:70:f5:ec:83:c9:59:9c:c9:
3e:af:03:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 04:44:17 2024 by rpki-client on console-ams.rpki-client.org