Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/67022e53ca97e435a6a2189a03aecf2854d01bb7.roa
File: 67022e53ca97e435a6a2189a03aecf2854d01bb7.roa (raw, json)
Hash identifier: pEY/8ryW8gwjv/rcw+KoivPTxSqpk4RiPpcNLG2YzDM=
Subject key identifier: 3C:26:C3:E8:32:31:C0:FE:8A:31:0A:25:DD:A0:46:0F:2C:3C:6F:1D
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 27B6D1
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/67022e53ca97e435a6a2189a03aecf2854d01bb7.roa
Signing time: Mon 17 Apr 2023 13:02:29 +0000
ROA not before: Sun 16 Apr 2023 13:00:28 +0000
ROA not after: Thu 17 Apr 2025 13:00:28 +0000
asID: 264691
IP address blocks: 200.43.55.0/24 maxlen: 24
190.226.240.0/21 maxlen: 24
190.226.248.0/24 maxlen: 24
200.43.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2602705 (0x27b6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Apr 16 13:00:28 2023 GMT
Not After : Apr 17 13:00:28 2025 GMT
Subject: CN=67022e53ca97e435a6a2189a03aecf2854d01bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:8a:a6:55:c9:2d:11:cc:ce:20:c5:33:48:
ad:bb:09:6a:60:70:b5:b5:a1:e1:0e:ab:b8:a9:a6:
31:3d:73:39:60:66:27:c9:c1:d4:5d:3e:93:28:87:
7d:35:d5:3c:6f:6b:74:cf:25:4a:df:45:a8:95:80:
cf:be:14:81:fe:41:7c:1c:d3:18:af:68:62:87:72:
f4:85:39:e5:ec:a8:bc:11:43:b0:8c:6f:e3:98:c3:
53:7e:0f:a2:3d:b9:d9:fd:92:c0:4a:4c:d4:28:d2:
3e:b3:31:de:09:3b:88:44:f3:e9:58:71:30:35:85:
2b:ce:7b:ca:9c:25:56:5a:eb:18:85:90:86:41:41:
ed:dc:b8:21:84:9b:49:55:93:1c:d2:56:83:b6:b5:
48:cc:b1:d6:9f:4a:a5:95:f2:27:39:02:93:a1:f7:
d6:c0:95:7b:2d:bc:7f:e9:a5:93:7a:85:11:3d:23:
7e:04:2c:9c:ed:13:cd:02:49:ca:7c:d4:64:bc:c7:
6f:a3:7c:07:be:b6:f0:a5:90:00:27:7a:f1:8e:d3:
00:58:5f:3d:5d:f1:82:b9:bd:d5:50:24:f9:bf:29:
9e:07:73:a4:f5:ed:67:10:7c:b9:c6:96:82:2d:31:
a2:86:a8:e7:91:1b:63:c3:4a:16:75:1b:e6:ee:a5:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:26:C3:E8:32:31:C0:FE:8A:31:0A:25:DD:A0:46:0F:2C:3C:6F:1D
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/67022e53ca97e435a6a2189a03aecf2854d01bb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.226.240.0-190.226.248.255
200.43.55.0/24
200.43.140.0/24
Signature Algorithm: sha256WithRSAEncryption
28:35:21:de:0b:f0:73:d0:e1:48:65:50:ee:ef:30:63:c0:75:
fe:a0:7f:6c:f6:35:4e:3b:16:b4:47:4d:f8:d8:e2:8e:d7:67:
63:43:8c:14:b1:d4:9c:a7:8f:f2:64:57:0d:08:90:54:1f:35:
a2:88:e8:eb:d1:73:9d:d0:32:6c:53:3c:38:3f:0c:76:5a:e6:
a3:15:a3:cb:d4:48:af:97:74:85:f9:71:72:75:49:82:d4:34:
ae:21:6d:8a:76:9e:fb:7b:5b:2b:12:95:d2:53:fa:e7:55:a0:
50:8a:5a:f9:8f:88:f7:e1:ea:3d:54:7f:0c:1a:f6:4f:1c:77:
76:dd:46:7c:f9:ef:71:e9:86:19:b8:20:dd:0a:db:fe:b7:94:
98:bc:d6:e4:1f:13:8d:1d:df:21:83:b9:af:a9:ed:a0:e8:a1:
fd:b6:9a:5b:dc:f9:5f:dd:48:d9:f7:cc:dc:14:e9:ec:d0:08:
f4:cb:d9:9d:82:0a:07:1b:c5:41:8e:cf:6b:a9:4a:9e:ca:a0:
22:33:f8:a1:9e:68:ed:82:c3:9f:dc:8b:19:46:61:58:9f:57:
aa:34:40:f2:d2:89:73:e4:4f:cf:e2:4d:f0:ee:87:10:40:19:
93:0a:53:91:5e:ae:fb:3e:77:a6:98:84:bc:04:f9:5d:65:fd:
64:8a:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org