Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e3660e29279f72958de513d1e1fc25bfb2a6452c.roa
File: e3660e29279f72958de513d1e1fc25bfb2a6452c.roa (raw, json)
Hash identifier: om6AvwolQInM4F4EABIwU+95OSJSM85bMUt34mmQmTw=
Subject key identifier: 49:05:FA:BE:FA:37:F0:70:C2:0D:FD:12:23:47:56:C8:3A:2C:1C:58
Certificate issuer: /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial: 2E7151
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e3660e29279f72958de513d1e1fc25bfb2a6452c.roa
Signing time: Thu 07 Dec 2023 13:01:29 +0000
ROA not before: Thu 07 Dec 2023 13:00:46 +0000
ROA not after: Thu 07 Dec 2028 13:00:46 +0000
asID: 52279
IP address blocks: 200.45.120.0/24 maxlen: 24
200.43.105.0/24 maxlen: 24
200.43.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3043665 (0x2e7151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Validity
Not Before: Dec 7 13:00:46 2023 GMT
Not After : Dec 7 13:00:46 2028 GMT
Subject: CN=e3660e29279f72958de513d1e1fc25bfb2a6452c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:c8:31:3f:3c:4f:89:3e:73:a8:72:0c:1d:
00:7a:3d:1d:89:f7:ee:e0:d0:2a:7c:cd:b3:70:1b:
05:84:d5:c3:4f:6b:85:92:62:c0:f8:e1:5d:55:83:
07:3b:ab:7e:7e:c0:b1:ae:12:34:90:fc:29:ee:25:
c8:ca:5d:9e:ba:c4:69:c3:66:ea:14:c1:ac:05:fc:
ee:27:b5:33:ac:f3:b4:22:95:d7:3d:9f:88:65:50:
22:15:00:cd:e6:0d:8c:00:51:f8:c4:1b:2e:e5:87:
94:f5:6d:5c:22:34:b7:b6:19:7b:b7:93:80:3f:3b:
54:31:33:74:9c:5c:25:ed:5e:fa:00:ae:db:f4:09:
d5:68:14:04:79:06:53:0d:55:ea:b9:09:da:08:6d:
93:ab:89:f5:dc:e8:24:84:be:9c:ca:09:26:77:2b:
20:56:0c:fe:a0:25:d7:1a:f9:ef:d7:fe:35:ad:fb:
00:df:6e:ae:a5:c2:c1:f5:40:31:11:aa:5f:8b:63:
0d:06:fb:4c:46:67:f8:b6:96:b2:1b:c1:68:00:74:
8d:b1:a7:f2:ca:c1:3c:e0:1b:5a:b2:70:bc:c1:05:
92:b7:f3:94:4e:62:c2:a5:3c:87:12:79:88:7f:58:
7c:ad:e0:f9:80:2d:58:22:82:65:00:fd:08:de:b7:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:05:FA:BE:FA:37:F0:70:C2:0D:FD:12:23:47:56:C8:3A:2C:1C:58
X509v3 Authority Key Identifier:
keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e3660e29279f72958de513d1e1fc25bfb2a6452c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.43.105.0-200.43.107.255
200.45.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d1:1e:da:51:76:9a:6a:7b:d9:e1:1d:e3:a3:38:2b:dd:be:
74:02:28:29:2c:54:48:da:e5:d5:a0:60:81:09:9e:71:8a:46:
65:43:f7:ad:3e:f7:9e:58:33:4b:25:54:17:85:65:46:00:91:
38:d3:b0:a7:d8:92:7d:64:6d:37:02:dc:3e:81:bc:5a:e7:c2:
a8:66:2d:81:23:8d:bb:a0:bd:3a:d0:ae:b1:f9:3c:d3:73:fe:
7c:bc:e5:66:12:91:53:51:c3:a6:5b:ac:d6:22:28:96:53:24:
f6:25:95:c6:f3:d1:e8:95:d6:9d:7d:32:4a:f3:9c:ae:fc:f7:
a3:b3:1d:73:5d:a1:51:ed:f3:39:5c:c8:22:7b:9a:ed:1c:0a:
9d:ca:5c:cc:ad:56:aa:cd:71:e0:3f:cc:b4:43:01:cb:54:e4:
be:fb:b6:74:d6:b1:f1:db:3b:26:e6:02:cf:06:f6:8f:23:92:
ad:66:05:b2:aa:04:a6:e6:bc:ae:de:9b:b0:b4:90:60:67:f6:
99:20:59:9b:97:41:21:35:52:20:e8:0f:4c:bf:52:d0:cb:95:
0c:94:9b:b4:75:99:95:a3:73:f9:eb:5f:90:39:17:0f:5a:b7:
37:8f:cc:ff:e6:b9:3e:d2:5a:78:c7:4d:31:06:9e:52:2a:5e:
81:b0:92:30
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDLnFRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
NzQ0MDlkMGMyYTcwYzkyMWRkNjg1ZTg2M2U5ZjAwY2IxZTI2MmEwHhcNMjMxMjA3
MTMwMDQ2WhcNMjgxMjA3MTMwMDQ2WjAzMTEwLwYDVQQDEyhlMzY2MGUyOTI3OWY3
Mjk1OGRlNTEzZDFlMWZjMjViZmIyYTY0NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm9jIMT88T4k+c6hyDB0Aej0diffu4NAqfM2zcBsFhNXDT2uF
kmLA+OFdVYMHO6t+fsCxrhI0kPwp7iXIyl2eusRpw2bqFMGsBfzuJ7UzrPO0IpXX
PZ+IZVAiFQDN5g2MAFH4xBsu5YeU9W1cIjS3thl7t5OAPztUMTN0nFwl7V76AK7b
9AnVaBQEeQZTDVXquQnaCG2Tq4n13OgkhL6cygkmdysgVgz+oCXXGvnv1/41rfsA
326upcLB9UAxEapfi2MNBvtMRmf4tpayG8FoAHSNsafyysE84BtasnC8wQWSt/OU
TmLCpTyHEnmIf1h8reD5gC1YIoJlAP0I3rfcLQIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFEkF+r76N/Bwwg39EiNHVsg6LBxYMB8GA1UdIwQYMBaAFPuO/GhWAKtj6gJP
ow0fFdW1sMGxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzk3NDQw
OWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2UzNjYwZTI5Mjc5ZjcyOTU4ZGU1MTNkMWUxZmMyNWJmYjJhNjQ1MmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvYzk3NDQwOWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFDAMAwQAyCtpAwQCyCtoAwQAyC14MA0GCSqGSIb3DQEBCwUAA4IB
AQAa0R7aUXaaanvZ4R3jozgr3b50AigpLFRI2uXVoGCBCZ5xikZlQ/etPveeWDNL
JVQXhWVGAJE407Cn2JJ9ZG03Atw+gbxa58KoZi2BI427oL060K6x+TzTc/58vOVm
EpFTUcOmW6zWIiiWUyT2JZXG89HoldadfTJK85yu/Pejsx1zXaFR7fM5XMgie5rt
HAqdylzMrVaqzXHgP8y0QwHLVOS++7Z01rHx2zsm5gLPBvaPI5KtZgWyqgSm5ryu
3puwtJBgZ/aZIFmbl0EhNVIg6A9Mv1LQy5UMlJu0dZmVo3P561+QORcPWrc3j8z/
5rk+0lp4x00xBp5SKl6BsJIw
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org