Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7776ddc285b8fb3191b06edaf1e77008008dd39e.roa
File: 7776ddc285b8fb3191b06edaf1e77008008dd39e.roa (raw, json)
Hash identifier: 7t0qWjDdK+j7ulHUb80XIPda2GkoOyRrFbiTAlZ4k3w=
Subject key identifier: 6C:28:70:F5:12:09:93:C1:3F:D3:86:17:2F:20:7B:F5:0B:83:80:3D
Certificate issuer: /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial: 2E5B8D
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7776ddc285b8fb3191b06edaf1e77008008dd39e.roa
Signing time: Thu 07 Dec 2023 13:01:15 +0000
ROA not before: Thu 07 Dec 2023 13:00:46 +0000
ROA not after: Thu 07 Dec 2028 13:00:46 +0000
asID: 264691
IP address blocks: 200.43.55.0/24 maxlen: 24
190.226.240.0/21 maxlen: 24
190.226.248.0/24 maxlen: 24
200.43.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3038093 (0x2e5b8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Validity
Not Before: Dec 7 13:00:46 2023 GMT
Not After : Dec 7 13:00:46 2028 GMT
Subject: CN=7776ddc285b8fb3191b06edaf1e77008008dd39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:79:fa:47:10:98:da:9c:f8:b8:ab:ca:ae:
c1:92:f2:3c:e6:ae:a8:cb:f4:5b:39:82:98:40:27:
dc:56:43:01:36:3f:f0:11:e0:c7:31:f7:f5:07:59:
b8:4c:0d:93:ef:54:7c:74:bf:43:77:bd:c6:4d:ef:
9c:99:68:61:1f:8d:ce:b3:59:6d:c7:37:9b:f3:5e:
e6:9b:be:15:2e:5d:cd:26:fc:08:79:dd:3f:b3:76:
c6:a0:f0:b5:1c:c6:2b:29:e4:38:1d:4f:f9:27:e4:
be:7d:d2:15:9a:a2:36:15:af:1e:a7:3e:9f:62:7b:
4d:4d:5a:b5:15:fd:4a:af:cf:da:53:38:24:4a:d4:
b6:5c:18:fc:36:3a:7b:9d:d6:22:a6:8e:9d:ec:eb:
95:27:87:19:28:aa:b2:b7:1a:f1:ac:fc:32:ac:bb:
ef:33:ba:34:2d:57:d5:5b:25:cc:38:e2:4f:2b:4f:
21:e7:fd:ea:8b:d4:ad:37:90:25:e4:9a:bc:b7:a6:
e4:57:f6:2c:30:06:74:7a:42:4a:32:d7:99:fc:db:
66:c9:fb:19:43:a9:3f:17:c6:16:64:7d:43:c6:2a:
e6:1b:2f:65:1c:ea:f7:99:8c:90:4b:07:50:55:30:
35:4e:33:39:e9:dc:6d:6d:d2:6b:4f:64:a6:35:bd:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:28:70:F5:12:09:93:C1:3F:D3:86:17:2F:20:7B:F5:0B:83:80:3D
X509v3 Authority Key Identifier:
keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7776ddc285b8fb3191b06edaf1e77008008dd39e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.226.240.0-190.226.248.255
200.43.55.0/24
200.43.140.0/24
Signature Algorithm: sha256WithRSAEncryption
23:47:ce:74:f5:c3:42:3d:fa:ab:b9:d2:25:2e:ff:44:51:27:
99:a6:cf:3a:36:10:47:8c:db:71:8e:96:98:91:04:79:37:98:
15:dd:dd:eb:a8:8f:52:a9:8a:ed:99:31:06:62:25:90:89:ba:
c8:a2:a6:16:f6:2c:5c:11:e9:26:af:18:2f:46:21:ed:87:89:
0d:5d:cf:1f:76:29:e1:af:a7:8b:c8:56:df:8c:1e:e4:da:b1:
8d:14:3b:ed:1e:f6:12:11:1d:24:7f:a3:a7:ee:c7:4a:26:3a:
c9:fb:35:17:76:2c:6d:d2:b9:02:75:c3:7d:1f:aa:92:3b:31:
4d:b5:6f:a0:0f:f8:2b:63:9b:05:38:64:ed:4e:fc:1f:ed:cc:
ba:4b:a7:cd:b6:22:63:6d:df:8e:81:46:f0:52:25:03:9b:4d:
4f:00:18:1c:4a:3e:da:89:e4:86:39:d0:75:42:8d:4b:68:e8:
5f:32:5d:c1:89:aa:40:06:74:97:20:42:bd:b6:40:3c:57:e0:
72:8e:ea:13:f9:ff:d7:db:86:9e:b9:94:44:9d:49:62:48:7e:
97:d6:7f:ab:8d:32:e7:36:f9:a1:a8:e1:bc:b0:ab:da:52:07:
a3:c6:4e:48:f2:ac:a2:73:9b:fc:9c:b7:a5:ae:53:af:09:44:
0c:0c:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org