Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/6a99704de6ef3767ee64e29ded614beefeb166a3.roa
File: 6a99704de6ef3767ee64e29ded614beefeb166a3.roa (raw, json)
Hash identifier: bDW726SAmTuFfJqRzzlQJTFbdNyc03rihWGTo07dp4U=
Subject key identifier: 65:8C:4A:B3:77:0F:EF:BF:E8:90:9B:2C:74:57:15:EC:F2:3E:F0:A8
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DA639
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/6a99704de6ef3767ee64e29ded614beefeb166a3.roa
Signing time: Thu 07 Dec 2023 12:42:16 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 52371
IP address blocks: 201.252.229.0/24 maxlen: 24
190.226.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991673 (0x2da639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=6a99704de6ef3767ee64e29ded614beefeb166a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:d8:10:65:5f:f8:d0:ed:5e:bc:e9:02:12:
94:4e:94:71:7b:37:fd:e6:d5:a8:8e:78:3f:4f:ee:
c1:97:d0:58:5d:54:fb:aa:ec:80:80:f0:52:7e:84:
6e:fc:36:24:05:50:cf:0d:4e:be:38:42:52:2a:bf:
67:87:a4:02:d5:a2:ca:dc:a8:a9:b5:bd:41:8c:f6:
5e:83:55:d0:10:c9:73:64:a2:0c:38:9f:47:d1:32:
c3:52:aa:e0:db:71:64:bd:66:a9:bb:18:4e:ae:3a:
99:15:d1:b9:1b:3f:ae:ff:3c:68:b1:1a:ae:3c:0c:
0f:78:25:f7:bb:d4:b8:3e:eb:09:59:ab:0f:88:c4:
5b:ff:83:52:72:31:05:46:6e:bb:da:67:87:75:6e:
ab:85:3c:c4:e0:9a:c5:6d:ff:58:06:f7:16:dc:07:
74:54:1e:c5:c1:7b:4b:07:8d:e7:56:91:50:66:7e:
60:be:7b:80:f1:48:33:dd:10:97:b7:73:77:6f:3f:
db:37:fa:59:ce:9e:5f:8c:74:2a:dc:97:44:75:67:
38:d4:4b:83:e7:f5:63:d5:65:35:7a:a3:58:63:94:
8a:36:d2:8f:79:e2:d5:0f:67:a2:fa:a2:43:e0:c7:
74:8f:66:e1:3b:72:4b:54:04:1a:b5:f9:92:f9:31:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8C:4A:B3:77:0F:EF:BF:E8:90:9B:2C:74:57:15:EC:F2:3E:F0:A8
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/6a99704de6ef3767ee64e29ded614beefeb166a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.226.32.0/24
201.252.229.0/24
Signature Algorithm: sha256WithRSAEncryption
16:eb:7e:2b:b7:f4:b7:6d:9c:86:95:e6:15:0d:77:24:66:2c:
f9:8d:a7:1b:2a:35:dc:52:67:e2:ff:38:ab:c9:91:91:50:40:
b7:8c:30:31:e9:e9:8d:dc:89:83:b8:b5:c2:81:46:5e:19:a7:
ca:56:6e:20:3d:40:ae:f8:af:3a:83:0d:43:82:59:fa:b8:95:
5b:f7:c1:d5:1f:93:ab:12:d1:a3:46:f5:4e:01:4c:05:b4:47:
cf:77:f9:16:40:a6:55:c2:43:df:cc:32:31:89:09:e1:64:34:
71:78:f0:62:8d:a3:50:97:fe:53:d1:1b:90:7a:40:dc:8b:31:
0e:3f:3d:df:41:c6:02:79:d5:63:a1:21:6e:a5:e0:9e:41:ac:
8c:30:24:b7:a6:e8:23:dc:a5:a6:42:1c:99:e7:cf:7c:f9:1b:
17:2c:99:4b:21:ec:bd:6b:d7:4d:1f:38:ef:3a:9c:2f:59:f2:
8b:92:7b:31:e5:46:de:8c:76:02:3b:ad:76:33:0c:0d:f6:b9:
28:ad:80:f2:17:5b:81:a9:8b:93:46:2b:5d:d3:e2:48:db:f6:
65:b2:6a:80:ae:51:23:7e:6b:c0:32:99:6e:4a:d5:bd:16:7c:
0e:09:ea:2f:30:ca:76:0e:7d:4b:12:9d:77:a3:b1:ca:95:cd:
94:f2:eb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org