Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4f765be9c9d65678ed52dd7a322e12967d083c33.roa
File: 4f765be9c9d65678ed52dd7a322e12967d083c33.roa (raw, json)
Hash identifier: ckVzV2plck175Go9udQFOGXBFjR7IscdZS5Xg1kBRnA=
Subject key identifier: 85:02:60:13:42:01:3D:AA:E0:CA:0D:62:A5:62:07:9A:8F:32:EB:75
Certificate issuer: /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial: 26725B
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4f765be9c9d65678ed52dd7a322e12967d083c33.roa
Signing time: Fri 27 Oct 2023 16:37:48 +0000
ROA not before: Fri 27 Oct 2023 16:37:36 +0000
ROA not after: Fri 27 Oct 2028 16:37:36 +0000
asID: 19114
IP address blocks: 200.7.192.0/20 maxlen: 20
200.7.192.0/24 maxlen: 24
200.7.193.0/24 maxlen: 24
200.7.194.0/24 maxlen: 24
200.7.195.0/24 maxlen: 24
200.7.204.0/24 maxlen: 24
200.7.208.0/20 maxlen: 20
200.7.221.0/24 maxlen: 24
200.7.224.0/21 maxlen: 21
200.7.224.0/23 maxlen: 23
200.7.226.0/23 maxlen: 23
200.7.228.0/23 maxlen: 23
200.7.232.0/22 maxlen: 22
200.7.236.0/24 maxlen: 24
200.7.237.0/24 maxlen: 24
200.7.238.0/24 maxlen: 24
200.7.239.0/24 maxlen: 24
200.7.240.0/23 maxlen: 23
200.7.242.0/24 maxlen: 24
200.7.243.0/24 maxlen: 24
200.7.244.0/22 maxlen: 22
200.7.246.0/24 maxlen: 24
200.7.247.0/24 maxlen: 24
200.7.248.0/23 maxlen: 23
200.7.251.0/24 maxlen: 24
200.7.252.0/23 maxlen: 23
200.7.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2519643 (0x26725b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Validity
Not Before: Oct 27 16:37:36 2023 GMT
Not After : Oct 27 16:37:36 2028 GMT
Subject: CN=4f765be9c9d65678ed52dd7a322e12967d083c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:e5:99:dc:2b:63:b1:40:86:f0:ce:70:b0:
ac:56:bd:e3:02:2c:0c:91:98:02:99:f1:50:c4:63:
93:aa:58:a4:c1:fe:ba:63:e4:1b:73:54:ce:d4:aa:
9d:3e:62:a0:74:1f:e2:98:5f:39:79:13:dc:27:66:
e3:db:59:09:32:ee:d8:1d:3a:97:b3:fa:fa:83:84:
9a:42:4d:3d:45:69:d1:31:6f:2f:55:eb:b3:d5:d7:
00:0c:6e:99:32:bf:ff:14:db:de:f8:90:86:43:d1:
c8:ce:e0:75:b6:24:72:d8:12:5e:82:7a:8a:d4:04:
26:59:4e:7f:06:7a:06:b9:95:c1:e4:ce:f4:c9:08:
f1:ba:88:12:35:b2:1d:f2:56:b5:08:5a:f2:be:08:
8d:22:56:a3:7e:ae:66:8b:ab:1d:8c:af:0e:d3:28:
b4:49:ac:2a:e3:b9:e1:6d:a8:17:79:ef:cf:d1:08:
e1:b4:1c:db:b8:1b:07:75:4d:7d:21:f6:4b:bd:7c:
b3:42:e5:57:aa:54:c9:18:99:5b:a3:e7:e8:57:81:
f3:75:f0:04:16:b1:b4:d6:e5:1f:26:f2:46:ef:7d:
12:37:29:be:f7:59:01:fb:cb:c1:9a:1a:3b:6c:92:
05:db:c8:a6:ed:76:bc:e9:e1:86:10:0f:e5:7e:b0:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:02:60:13:42:01:3D:AA:E0:CA:0D:62:A5:62:07:9A:8F:32:EB:75
X509v3 Authority Key Identifier:
keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4f765be9c9d65678ed52dd7a322e12967d083c33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.192.0-200.7.249.255
200.7.251.0-200.7.255.255
Signature Algorithm: sha256WithRSAEncryption
30:a3:48:25:47:a6:30:aa:2a:ea:45:52:3e:18:6a:bc:74:8f:
41:4f:95:7b:7d:2a:2c:2d:eb:22:ef:ab:99:bc:f5:ac:e0:76:
af:9b:e6:16:3e:17:ba:c6:59:58:8a:cc:ac:5c:af:d6:4a:2e:
57:9a:6c:68:bd:65:e5:0d:d7:26:dc:c8:fb:6d:2f:db:85:64:
af:1d:e4:76:31:dc:f1:fb:29:c7:cd:be:ca:9f:51:a6:86:01:
fa:76:b6:38:92:42:43:41:bd:82:d6:ce:ec:41:bc:03:45:fe:
f2:47:ed:62:e1:68:19:b8:05:40:84:17:24:c2:c2:f7:be:13:
c1:21:15:5e:d1:73:f9:f5:f5:ce:13:20:1b:c5:12:b5:72:e9:
dd:8b:c7:60:58:49:af:79:d6:98:69:b6:b0:91:a2:15:25:3e:
db:86:3a:2a:81:92:eb:6f:58:3e:87:bb:f7:96:97:26:d6:61:
f9:6a:4b:6c:93:ec:41:90:11:fc:32:d9:7f:7c:30:5b:ea:6c:
e6:a0:b6:f4:99:29:e4:49:75:26:61:4d:af:89:ca:3b:68:75:
9f:95:d3:68:66:53:90:fa:3b:31:1b:44:c0:f9:55:6c:81:41:
1b:4a:b6:01:77:37:f3:df:07:97:ce:e1:80:7a:3c:c7:41:85:
b1:2f:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org