Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/cffc42870de0ab3a49483cf383716ce8d2865b60.roa
File: cffc42870de0ab3a49483cf383716ce8d2865b60.roa (raw, json)
Hash identifier: MWuY4/zybbD+X0mqdIprdtYoVzBKSMN+i+awOn4yPvE=
Subject key identifier: 0E:7A:49:0E:E1:DA:83:9F:2B:05:53:8C:1B:7F:7B:54:43:A4:79:BB
Certificate issuer: /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial: 1BE2F2
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/cffc42870de0ab3a49483cf383716ce8d2865b60.roa
Signing time: Wed 28 Sep 2022 02:31:59 +0000
ROA not before: Tue 27 Sep 2022 20:42:16 +0000
ROA not after: Fri 27 Sep 2024 20:42:16 +0000
asID: 19114
IP address blocks: 200.7.192.0/20 maxlen: 20
200.7.192.0/24 maxlen: 24
200.7.193.0/24 maxlen: 24
200.7.194.0/24 maxlen: 24
200.7.195.0/24 maxlen: 24
200.7.204.0/24 maxlen: 24
200.7.208.0/20 maxlen: 20
200.7.221.0/24 maxlen: 24
200.7.224.0/21 maxlen: 21
200.7.224.0/23 maxlen: 23
200.7.226.0/23 maxlen: 23
200.7.228.0/23 maxlen: 23
200.7.232.0/22 maxlen: 22
200.7.236.0/24 maxlen: 24
200.7.237.0/24 maxlen: 24
200.7.238.0/24 maxlen: 24
200.7.239.0/24 maxlen: 24
200.7.240.0/23 maxlen: 23
200.7.242.0/24 maxlen: 24
200.7.243.0/24 maxlen: 24
200.7.244.0/22 maxlen: 22
200.7.246.0/24 maxlen: 24
200.7.247.0/24 maxlen: 24
200.7.248.0/23 maxlen: 23
200.7.251.0/24 maxlen: 24
200.7.252.0/23 maxlen: 23
200.7.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827570 (0x1be2f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Validity
Not Before: Sep 27 20:42:16 2022 GMT
Not After : Sep 27 20:42:16 2024 GMT
Subject: CN=cffc42870de0ab3a49483cf383716ce8d2865b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:a9:4c:81:d5:61:b3:eb:0a:03:89:ab:e6:
1d:aa:c0:dc:29:c1:04:ec:a2:c2:7c:a5:b4:f0:3a:
80:10:f0:6d:01:c1:08:9d:47:f5:b7:81:e8:04:32:
97:ca:5a:a4:c0:69:73:ac:2f:54:7f:a7:de:ec:e9:
00:93:c5:bb:80:4c:17:0e:9f:8a:2a:a7:e8:db:59:
5c:bf:db:1f:9d:56:7b:c6:70:a8:60:4d:09:ac:70:
5a:63:b1:00:ce:3a:21:47:8b:c7:ce:48:b6:a5:f3:
8d:ed:c1:a0:7c:28:34:fb:0a:1d:70:d9:7e:5d:fc:
6d:34:5a:d1:ab:f0:32:8e:dc:d5:64:7c:16:67:35:
bd:5e:78:98:47:88:52:de:dd:90:23:db:80:49:e3:
8e:80:08:26:22:bc:74:39:18:86:d5:e9:eb:83:ef:
c1:d5:21:b2:13:5e:07:30:50:a3:4e:b8:77:f4:83:
4a:b1:ab:3d:d3:15:f6:76:1f:73:df:51:06:fe:cb:
12:0b:a7:16:10:cf:05:0a:d6:88:63:59:71:d6:89:
9f:e6:1e:b4:08:23:2f:e6:d5:2f:4b:f1:40:b6:4a:
db:59:f9:14:0e:da:ef:13:7e:04:50:7a:cc:b8:f8:
04:2c:20:49:ac:cc:cc:61:4d:da:01:4e:14:c8:c4:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7A:49:0E:E1:DA:83:9F:2B:05:53:8C:1B:7F:7B:54:43:A4:79:BB
X509v3 Authority Key Identifier:
keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/cffc42870de0ab3a49483cf383716ce8d2865b60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.192.0-200.7.249.255
200.7.251.0-200.7.255.255
Signature Algorithm: sha256WithRSAEncryption
45:56:0b:67:91:a1:d0:1b:60:60:51:d4:fc:30:2a:c7:a8:51:
b2:06:91:d4:8f:91:f8:43:39:a8:e3:62:7a:86:b6:27:f8:a3:
0b:c5:28:36:35:5e:98:1e:61:94:bf:ef:90:1f:8a:38:1f:1a:
e6:55:05:be:00:51:f8:8c:27:14:e2:d0:5c:b6:f9:cd:28:c1:
25:ba:12:5a:5e:36:1d:20:ba:3a:75:ee:37:92:82:98:ad:d2:
5a:16:da:77:2e:57:59:fc:f2:b9:6b:79:9c:86:3e:90:08:fa:
26:df:79:c3:46:43:b2:63:ef:83:74:bf:02:e3:2f:45:23:16:
68:81:b1:7f:c6:12:bc:ca:89:8e:ac:27:ce:07:d3:ad:ca:b5:
28:6c:1c:d0:30:72:3b:52:35:31:d4:4f:3c:a0:5b:8a:61:20:
7b:f1:ec:fd:a8:ca:32:31:83:42:99:43:4f:8a:ba:21:9b:6a:
e9:e3:9e:03:f8:a0:9f:e4:97:81:72:7b:e7:c4:a3:7a:b9:c2:
fd:46:ab:cb:33:ea:18:26:15:da:3d:bf:cc:8e:06:a7:6c:23:
ea:44:c4:98:c6:c4:f9:74:56:cc:28:95:84:5c:c0:ab:e4:91:
33:73:ce:97:6a:e7:78:86:69:98:dc:10:e5:9b:49:2a:fd:95:
f5:6e:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org