Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/dd270fccfb70a48f25ae8e54f1f1d172d5864f97.roa
File: dd270fccfb70a48f25ae8e54f1f1d172d5864f97.roa (raw, json)
Hash identifier: tNNfsle/1i/dd3NMXcXArzZbpODDHlEjg3ZaU+sM07A=
Subject key identifier: BA:F0:6A:8B:92:99:1F:38:9F:61:D0:02:72:9D:39:F0:C8:59:5E:6D
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DFEFC
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/dd270fccfb70a48f25ae8e54f1f1d172d5864f97.roa
Signing time: Thu 07 Dec 2023 12:43:16 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 10481
IP address blocks: 190.194.205.0/24 maxlen: 24
201.213.24.0/24 maxlen: 24
181.167.167.0/24 maxlen: 24
201.212.182.0/24 maxlen: 24
201.212.205.0/24 maxlen: 24
201.212.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3014396 (0x2dfefc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=dd270fccfb70a48f25ae8e54f1f1d172d5864f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:d6:bb:78:4c:16:5f:ef:83:b4:c0:41:58:
07:0c:b5:24:ed:4c:57:9c:e2:b3:d6:6d:6d:ce:1a:
dd:f6:9d:cf:23:9f:e3:fb:13:62:35:6b:39:a1:55:
09:9b:67:c6:60:8e:ef:b2:18:2a:fb:b9:d9:a0:e4:
ed:fd:cb:ee:1d:c6:a7:8d:40:6f:22:16:a8:aa:77:
7e:7a:de:ce:64:87:4e:cd:3e:7f:47:84:a7:1d:af:
94:67:66:eb:86:9e:cb:c2:c8:e8:e3:a6:49:34:3a:
75:d6:0f:0a:10:71:ea:6e:9d:7a:06:ef:af:9f:81:
e0:ff:0a:bd:b2:9a:6d:83:79:9c:1b:bb:fe:e5:d4:
21:60:52:03:c3:61:f2:05:c9:12:75:81:6b:2b:31:
a4:2e:66:73:5c:b1:d3:a7:86:3c:a8:e6:a6:d4:f7:
22:38:3f:61:72:3d:7f:aa:04:e9:56:4d:24:a9:d0:
a3:51:ec:3c:eb:17:42:64:97:5b:ad:b4:a7:21:9f:
f4:4b:0f:2b:7c:e6:8d:23:d8:3c:12:9e:5c:e0:4c:
3b:0b:75:3e:2e:7f:16:40:3b:f6:90:02:86:b3:73:
fd:85:85:b3:cf:98:12:17:e7:03:cf:76:c7:ad:33:
ac:87:9e:c1:95:54:cf:00:09:1c:3a:3e:d1:49:f6:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F0:6A:8B:92:99:1F:38:9F:61:D0:02:72:9D:39:F0:C8:59:5E:6D
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/dd270fccfb70a48f25ae8e54f1f1d172d5864f97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.167.167.0/24
190.194.205.0/24
201.212.182.0/24
201.212.205.0-201.212.207.255
201.213.24.0/24
Signature Algorithm: sha256WithRSAEncryption
18:69:d0:5a:65:a1:a8:b4:a7:a3:2f:9b:0c:4c:45:dd:ed:9f:
e8:84:a9:46:cd:c3:cb:37:51:29:08:bd:d4:62:66:ab:86:96:
ee:7c:6c:a1:38:a1:6e:76:86:02:d9:39:83:0d:72:cd:f5:d4:
a2:2b:e8:b1:11:5f:da:ed:35:43:55:f3:d4:f7:df:cc:1b:1e:
e3:f1:12:ee:1a:d6:93:0e:32:54:1b:1f:6b:6a:fe:49:ea:61:
cc:c6:d8:10:8b:f5:18:78:ba:4b:1e:d7:9d:0a:4b:9a:58:14:
32:00:cf:31:d6:0e:0d:55:6b:a8:f6:02:90:d4:6f:30:19:60:
c5:9d:00:94:c5:50:fc:55:b2:ca:ef:19:b5:7b:db:a0:70:5a:
30:b1:07:f6:6a:4e:17:91:e5:e1:fb:c0:5f:58:dd:b6:15:cc:
da:35:b4:b1:b1:8e:29:4e:2f:2a:cd:79:d6:c9:13:c0:04:8e:
e3:02:26:4c:a2:00:ec:b0:2e:13:e1:f4:db:74:d8:ed:b0:4a:
8e:06:da:4e:6a:f8:df:3e:8e:a8:87:38:dc:69:12:e0:bd:c6:
bd:3b:dd:7b:2a:4c:19:01:7c:53:20:57:07:1b:d8:f6:3f:dc:
f6:97:c7:e9:02:51:04:b4:d2:0e:71:48:4d:49:d8:fa:9e:6f:
f4:20:cc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:41:12 2025 by rpki-client