Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/1b25e224d27277ba1ef6d1155d9c157e870444e1.roa
File: 1b25e224d27277ba1ef6d1155d9c157e870444e1.roa (raw, json)
Hash identifier: /DSz/XQwFdQdFlKbxIMlqO+2QY5BTJwe/szjbUeNCx8=
Subject key identifier: 3D:B3:87:53:3F:D0:99:3A:38:5D:6D:BC:22:83:29:9D:78:AE:56:08
Certificate issuer: /CN=30d20bef67088f83626615a8accfbafffad06334
Certificate serial: 090E4C
Authority key identifier: 93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/1b25e224d27277ba1ef6d1155d9c157e870444e1.roa
Signing time: Fri 28 Oct 2022 16:39:05 +0000
ROA not before: Thu 27 Oct 2022 16:37:57 +0000
ROA not after: Mon 28 Oct 2024 16:37:57 +0000
asID: 27932
IP address blocks: 143.202.196.0/22 maxlen: 24
190.124.160.0/21 maxlen: 24
190.185.112.0/20 maxlen: 24
200.52.144.0/20 maxlen: 24
200.107.232.0/21 maxlen: 24
2800:6a0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593484 (0x90e4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d20bef67088f83626615a8accfbafffad06334
Validity
Not Before: Oct 27 16:37:57 2022 GMT
Not After : Oct 28 16:37:57 2024 GMT
Subject: CN=1b25e224d27277ba1ef6d1155d9c157e870444e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:5f:bc:ea:b5:e0:22:e5:9e:2e:98:cf:07:
95:47:62:73:f9:a1:7e:24:f3:e6:aa:c4:5e:2b:37:
eb:5c:b2:62:70:f6:46:e0:b3:ad:45:0e:83:ca:b1:
f1:29:51:10:37:6c:3a:57:0a:da:17:51:49:b8:9c:
77:8c:42:7d:ba:d0:2c:63:be:5f:72:e6:07:0b:a9:
4d:a6:71:95:df:f1:9a:12:04:3e:38:25:79:b2:25:
72:e3:c9:2b:11:0d:ba:40:b7:cf:86:20:0e:39:53:
39:a4:c4:e8:3e:7b:4b:16:ac:a4:69:d9:bd:72:6b:
00:a7:90:08:ed:5f:d4:9d:28:5e:3c:6b:70:54:10:
75:15:64:07:41:43:9e:d7:bc:78:56:7a:0f:e4:42:
f7:ab:2d:f0:67:9c:58:87:50:55:4d:c9:d5:67:3e:
4d:29:f9:d5:c6:81:70:ec:b3:67:6b:c2:16:1e:0e:
df:21:03:66:d1:c5:8a:f8:85:08:9e:04:65:7e:4b:
79:da:97:99:6d:f7:63:8f:af:0f:35:20:79:40:a5:
be:20:bb:73:4a:c1:b5:3f:60:ca:80:4d:6f:aa:9e:
47:1d:23:0a:ac:58:27:5a:33:8a:db:da:7a:7c:dc:
c0:93:23:7b:e5:a8:a2:52:19:8b:f8:9d:1c:be:db:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:87:53:3F:D0:99:3A:38:5D:6D:BC:22:83:29:9D:78:AE:56:08
X509v3 Authority Key Identifier:
keyid:93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/1b25e224d27277ba1ef6d1155d9c157e870444e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/30d20bef67088f83626615a8accfbafffad06334.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.196.0/22
190.124.160.0/21
190.185.112.0/20
200.52.144.0/20
200.107.232.0/21
IPv6:
2800:6a0::/32
Signature Algorithm: sha256WithRSAEncryption
66:86:15:7c:40:5d:59:98:6f:7e:af:63:03:c6:e8:2d:27:09:
e6:00:72:cc:4d:ec:35:87:09:b1:63:9c:3c:9a:b6:f8:e2:81:
75:71:9d:fe:6a:9c:74:28:a4:60:1c:c1:01:bf:fc:d7:f9:d2:
84:48:1d:13:7d:9c:97:f6:7f:bf:c9:c0:27:b4:d4:35:15:ce:
c8:9d:c3:f1:f0:15:59:89:50:9c:ed:45:73:c1:3a:6a:8f:c8:
a9:da:91:b0:e0:e7:8c:ae:7a:29:43:72:e5:75:cb:1a:92:96:
54:ba:df:23:57:fe:0a:0f:79:ca:fe:c8:a6:ed:6f:5a:ff:fb:
a1:1a:1d:d4:a6:c4:f7:c1:89:f3:7d:0a:a6:a0:cf:e3:ce:97:
d3:5f:f7:e9:93:2e:5d:75:4b:65:70:ca:a5:6d:20:b6:7f:34:
46:4f:20:97:53:de:d7:fe:53:59:f9:37:37:41:9f:61:c7:c4:
cf:61:bf:38:a5:bb:55:b4:03:9a:a3:0d:39:7b:ad:33:73:ed:
82:0a:ac:7d:10:f2:73:40:19:79:0e:1c:02:4a:a7:4b:7d:bf:
45:4a:4d:6e:5f:28:97:e3:bb:a8:f6:01:a7:af:3d:25:b7:03:
dc:67:96:33:ae:ec:25:86:c5:83:7b:2b:58:d3:c0:ee:28:1c:
a9:a9:36:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org