Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/9da2d155c324b6e467d043700cd46694c128a7fe.roa
File: 9da2d155c324b6e467d043700cd46694c128a7fe.roa (raw, json)
Hash identifier: sKcXip1pT+15cwbKmmeZkslMFPoHTtrCKTpyehuyxfQ=
Subject key identifier: 5F:91:EA:5C:8C:2B:0F:A7:8A:EF:29:34:3A:2D:7B:56:AB:72:56:D1
Certificate issuer: /CN=790cd68fd041d01c15b1368a3b5f2d42f13ca563
Certificate serial: 24C888
Authority key identifier: 0C:CD:A9:0A:43:B3:74:BC:62:CC:95:26:B5:66:D3:06:D7:48:C6:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790cd68fd041d01c15b1368a3b5f2d42f13ca563.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/9da2d155c324b6e467d043700cd46694c128a7fe.roa
Signing time: Fri 29 Sep 2023 14:57:38 +0000
ROA not before: Thu 28 Sep 2023 14:57:38 +0000
ROA not after: Mon 29 Sep 2025 14:57:38 +0000
asID: 27813
IP address blocks: 200.81.120.0/21 maxlen: 24
190.2.96.0/19 maxlen: 24
181.199.144.0/20 maxlen: 24
190.151.160.0/20 maxlen: 24
200.3.216.0/21 maxlen: 24
170.238.124.0/22 maxlen: 24
2803:9f00:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2410632 (0x24c888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790cd68fd041d01c15b1368a3b5f2d42f13ca563
Validity
Not Before: Sep 28 14:57:38 2023 GMT
Not After : Sep 29 14:57:38 2025 GMT
Subject: CN=9da2d155c324b6e467d043700cd46694c128a7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:b9:41:9b:f3:52:82:05:aa:42:aa:99:2e:
a2:f6:bd:62:7c:54:a1:02:e2:48:a5:0f:d0:7c:eb:
ac:b1:64:9f:19:48:53:23:f3:45:7a:8b:b9:aa:d4:
d3:d2:64:14:cf:ca:a1:ac:03:8e:44:c6:41:a5:ac:
2a:ac:dc:16:a6:57:ff:5f:44:9b:67:be:e0:ec:5b:
5f:58:6a:88:63:36:ea:e8:61:1a:9f:ab:0f:bd:34:
b6:47:4a:48:33:42:db:c7:97:56:b6:3f:30:31:de:
b5:e2:45:0d:d5:5d:59:06:aa:f7:e5:8e:46:ed:44:
23:a5:5a:15:b4:3e:32:6e:8f:e9:35:3a:eb:b6:da:
79:f8:7d:f0:fd:35:bd:1a:50:56:01:af:33:c2:ea:
e6:ad:cf:c6:ff:30:a8:ee:fe:48:73:88:12:82:9d:
9e:16:6e:31:38:90:b2:7b:4b:b9:93:89:98:b2:95:
83:88:b1:64:e0:04:4d:ce:61:88:60:0e:65:fd:59:
2d:da:d8:19:76:ed:b0:d6:dd:7c:8b:89:d0:88:65:
5a:4d:1c:d6:34:98:ea:bb:24:1e:24:64:37:c9:fa:
e5:79:0d:b6:7e:45:c3:88:4e:04:f5:c6:e8:28:a4:
f5:ff:1d:69:b9:7c:c7:71:04:83:66:84:12:db:e9:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:EA:5C:8C:2B:0F:A7:8A:EF:29:34:3A:2D:7B:56:AB:72:56:D1
X509v3 Authority Key Identifier:
keyid:0C:CD:A9:0A:43:B3:74:BC:62:CC:95:26:B5:66:D3:06:D7:48:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790cd68fd041d01c15b1368a3b5f2d42f13ca563.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/9da2d155c324b6e467d043700cd46694c128a7fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/790cd68fd041d01c15b1368a3b5f2d42f13ca563.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.124.0/22
181.199.144.0/20
190.2.96.0/19
190.151.160.0/20
200.3.216.0/21
200.81.120.0/21
IPv6:
2803:9f00:1::/48
Signature Algorithm: sha256WithRSAEncryption
56:53:d8:6f:c2:6e:5d:04:a7:3b:8e:de:d8:7a:87:b7:82:88:
1a:12:da:42:ca:7a:6c:6a:83:71:82:a5:b9:a2:7a:8d:2a:b1:
1c:ce:23:04:ab:97:fb:1c:ff:60:eb:74:da:7b:1a:4e:eb:ef:
6d:35:a2:ad:9e:a7:00:2b:a4:7a:e0:15:46:99:c5:dc:f4:d9:
e7:69:96:5f:b6:39:d6:8b:f5:3e:83:08:fc:f7:d0:55:03:61:
00:1b:76:db:13:6c:98:2b:25:93:00:34:e1:56:54:78:f9:1a:
b4:b9:e2:2a:70:16:b2:21:2c:3e:4f:94:30:88:e7:c6:cd:66:
14:77:cd:35:d3:63:62:be:af:99:62:ff:88:58:33:95:c8:3c:
80:4c:e2:49:03:fb:ca:c2:84:8c:9b:8c:4a:2f:bc:56:8a:0f:
fa:31:fb:75:ba:84:80:9e:ca:19:17:db:16:fd:08:dd:1b:b4:
0c:27:3c:fb:28:ef:64:3a:a2:41:a2:18:39:ef:69:e4:3b:eb:
ba:8c:48:26:25:d7:7f:24:96:10:53:f8:8c:23:13:6f:2a:ab:
ff:5b:95:1d:8f:af:3c:aa:ec:f8:f6:89:43:6a:80:8d:1d:de:
09:ff:af:05:de:15:8d:71:7c:35:69:7a:ce:1b:96:1e:30:bd:
81:c4:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org