Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/7fa60541a78058c148359af695450a4106c00374.roa
File: 7fa60541a78058c148359af695450a4106c00374.roa (raw, json)
Hash identifier: YkKPzowxxVck5devzAkMkqSJej2rGov4tEsmCNc3jWM=
Subject key identifier: FE:EE:DB:AB:3B:B6:27:22:64:08:2F:1C:A6:ED:85:1F:81:85:C7:BC
Certificate issuer: /CN=cc3aa122dfd9e78c282ee13cf25302c07b4c605f
Certificate serial: 217411
Authority key identifier: D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/7fa60541a78058c148359af695450a4106c00374.roa
Signing time: Tue 27 Jun 2023 14:29:53 +0000
ROA not before: Mon 26 Jun 2023 14:29:53 +0000
ROA not after: Fri 27 Jun 2025 14:29:53 +0000
asID: 27754
IP address blocks: 190.3.22.0/25 maxlen: 25
190.3.22.128/25 maxlen: 25
200.61.46.0/24 maxlen: 24
200.80.224.0/24 maxlen: 24
200.80.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192401 (0x217411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3aa122dfd9e78c282ee13cf25302c07b4c605f
Validity
Not Before: Jun 26 14:29:53 2023 GMT
Not After : Jun 27 14:29:53 2025 GMT
Subject: CN=7fa60541a78058c148359af695450a4106c00374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:18:e7:a8:30:2b:51:fb:54:f5:20:93:5d:
bb:38:40:19:71:88:81:11:99:5a:30:d6:93:0f:6b:
2b:82:2e:58:23:9c:55:e3:e7:c6:51:70:a4:a1:79:
85:95:60:a2:8d:dc:27:36:af:ff:9b:bf:51:06:bc:
72:67:6e:78:ba:bb:36:78:25:04:ac:20:40:ec:30:
77:74:81:14:f8:ad:e7:58:ed:ff:31:c7:cc:19:94:
97:70:d1:47:52:98:7e:38:7f:2c:79:b9:98:17:f6:
b8:ba:51:f1:1e:39:bd:06:28:b2:25:3b:db:18:68:
d2:12:89:8e:57:23:5f:e7:fd:7c:32:55:0e:b0:13:
42:95:22:5f:14:f1:a7:00:0b:69:2e:96:40:bf:ec:
29:22:20:cd:ce:55:00:c6:ee:e9:00:d0:e7:84:1f:
bd:09:0e:e9:70:8b:b7:29:a3:e9:dd:fd:52:5d:13:
b3:eb:b6:0c:bc:45:95:10:a7:2b:1e:0b:49:0a:a8:
ef:da:de:59:15:83:c4:19:56:9b:97:07:c9:91:a9:
26:c2:d7:c6:fc:39:16:b0:ca:18:d6:b8:56:54:77:
b0:eb:51:ed:c4:90:a1:40:fb:2f:8c:6e:34:ec:2d:
96:58:0a:17:e4:c7:ad:90:10:b9:a2:4d:07:04:3e:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EE:DB:AB:3B:B6:27:22:64:08:2F:1C:A6:ED:85:1F:81:85:C7:BC
X509v3 Authority Key Identifier:
keyid:D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/7fa60541a78058c148359af695450a4106c00374.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.3.22.0/24
200.61.46.0/24
200.80.224.0/24
200.80.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:dc:e7:16:e0:53:3a:13:90:ad:1c:41:de:5b:1d:43:cd:01:
a2:d8:76:3e:08:f5:5a:d7:10:60:f4:77:fa:2e:b9:ce:f7:41:
d6:f2:37:5e:24:b1:b1:16:e7:98:b1:05:d4:5b:7c:9d:e7:65:
d0:25:8c:2b:fc:24:1c:fe:05:ea:31:99:21:fb:6d:21:85:41:
6a:14:03:3d:4a:93:69:0e:1c:c1:2f:40:40:bb:ef:c1:2f:9e:
94:92:4e:71:0e:63:df:c8:42:1f:27:8c:24:40:d3:ae:7d:21:
52:27:f7:15:2f:26:e6:73:b3:ff:54:5c:13:2f:0e:0f:4b:c6:
04:c4:01:54:b9:f2:9d:f9:21:f9:0b:f7:0b:c8:72:e9:49:03:
17:37:2e:bb:a4:4a:fd:d8:6f:89:e1:44:1f:1e:a7:29:f5:38:
1d:ce:e3:f3:2d:f1:36:4c:7e:0c:28:81:96:5a:fd:0a:51:d5:
0c:54:32:77:ca:54:44:1b:02:0a:84:ae:0b:53:b5:ca:10:6e:
dc:c1:31:a5:28:04:8e:d8:b0:af:64:7a:b9:37:d5:c0:4d:90:
0a:68:c1:2f:5b:ad:b1:55:23:e9:d8:37:4c:68:d6:5b:79:b0:
5d:c1:7a:be:68:75:f9:7e:8f:75:19:cf:6d:c6:8a:60:8b:83:
0b:81:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org