Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59bdca4b-3678-4701-9515-c2e847ba6937/3e28c7f63f198158d6d34bd7bd3b01d010ec871e.roa
File: 3e28c7f63f198158d6d34bd7bd3b01d010ec871e.roa (raw, json)
Hash identifier: meyKMnDfXhTyCOMYHmzkB9VR/got2KjsAQImSx7LBaE=
Subject key identifier: 4D:9B:7E:D3:6F:53:48:14:A8:26:D3:31:39:24:7F:33:91:B8:E6:CA
Certificate issuer: /CN=4ab582071e3015e9e5bc1c27f02a7057783eff5e
Certificate serial: 016755
Authority key identifier: 17:9A:78:AF:E5:AA:47:52:AF:FC:F0:41:7A:68:80:AB:F9:43:58:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ab582071e3015e9e5bc1c27f02a7057783eff5e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/59bdca4b-3678-4701-9515-c2e847ba6937/3e28c7f63f198158d6d34bd7bd3b01d010ec871e.roa
Signing time: Thu 04 Aug 2022 16:10:35 +0000
ROA not before: Thu 04 Aug 2022 03:00:00 +0000
ROA not after: Sun 04 Aug 2024 03:00:00 +0000
asID: 27976
IP address blocks: 168.121.116.0/22 maxlen: 24
168.196.252.0/22 maxlen: 24
179.63.208.0/21 maxlen: 24
200.63.120.0/21 maxlen: 24
2803:700::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91989 (0x16755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab582071e3015e9e5bc1c27f02a7057783eff5e
Validity
Not Before: Aug 4 03:00:00 2022 GMT
Not After : Aug 4 03:00:00 2024 GMT
Subject: CN=3e28c7f63f198158d6d34bd7bd3b01d010ec871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6e:dc:b3:df:88:1d:ba:a7:3a:30:fb:e9:56:
b1:27:f2:f5:7c:01:f3:3b:d3:26:da:de:e2:92:17:
dd:90:b5:3c:ca:30:d8:ed:e9:4d:36:c8:11:66:d0:
1f:19:39:2f:95:75:6c:81:47:72:8c:7f:75:a5:2b:
ec:b7:00:b5:64:75:96:9d:1a:f1:31:1d:44:7c:a5:
f8:58:1b:6a:4f:da:22:b6:9a:6c:32:c4:20:ff:cb:
bd:d3:1e:7d:6f:15:fc:a1:f3:d8:9f:d9:76:31:64:
f9:d5:b7:d8:b2:40:8f:9a:cb:e4:56:ab:0f:a7:68:
f5:c8:bc:30:c3:2a:61:c8:65:6b:09:0a:33:09:46:
d7:3d:fb:08:16:fa:cb:fc:dc:86:59:de:be:ac:a3:
69:82:97:43:a1:5c:20:ca:c0:27:3c:de:40:0f:b2:
bf:95:79:f4:0a:af:72:c3:d1:d8:4d:d2:d4:ca:69:
16:61:24:d3:12:3f:96:6d:cd:81:1c:7a:08:82:03:
9d:fa:e1:64:dc:4c:4b:58:4d:f3:61:f9:c0:cf:c5:
b7:15:49:df:4d:90:33:88:08:86:f1:47:0f:dc:3f:
38:08:eb:6e:18:49:66:b7:d7:b4:ec:b7:73:04:e9:
dc:e6:2b:de:ac:83:5a:bf:c5:89:93:b6:ec:f8:23:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9B:7E:D3:6F:53:48:14:A8:26:D3:31:39:24:7F:33:91:B8:E6:CA
X509v3 Authority Key Identifier:
keyid:17:9A:78:AF:E5:AA:47:52:AF:FC:F0:41:7A:68:80:AB:F9:43:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ab582071e3015e9e5bc1c27f02a7057783eff5e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59bdca4b-3678-4701-9515-c2e847ba6937/3e28c7f63f198158d6d34bd7bd3b01d010ec871e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/59bdca4b-3678-4701-9515-c2e847ba6937/4ab582071e3015e9e5bc1c27f02a7057783eff5e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.116.0/22
168.196.252.0/22
179.63.208.0/21
200.63.120.0/21
IPv6:
2803:700::/32
Signature Algorithm: sha256WithRSAEncryption
14:86:cb:02:f2:5c:48:a6:04:f6:70:17:83:e0:0e:27:96:97:
28:89:1d:f2:3c:80:9d:08:7b:da:a6:77:59:04:9b:b9:08:0f:
68:1a:0d:36:31:46:36:b3:6a:8c:2b:bf:96:d1:7f:b5:06:8b:
45:75:54:ab:de:8f:89:bc:a8:fd:68:12:55:91:af:0e:6d:5d:
f4:a0:b9:b5:12:3c:5b:f5:0b:18:c4:ab:aa:b7:f2:4a:a6:3e:
70:76:22:8d:87:08:d2:10:32:91:57:3a:49:f4:2d:b2:dc:3e:
52:0c:74:35:90:e1:6b:46:bc:ce:16:48:ba:56:13:bf:90:95:
82:27:90:ae:76:35:8c:ea:71:14:82:a2:2c:e0:2c:3d:97:27:
80:71:02:92:73:ef:c9:5c:ab:bd:2b:0f:55:2d:64:8c:b0:c2:
43:5c:2c:fc:64:02:50:cd:20:ae:4c:17:ca:ad:7e:c4:ba:60:
95:2f:0e:c9:42:73:09:82:ab:54:80:72:68:0c:99:e4:3f:ad:
ea:85:a3:6b:8e:cf:85:15:d4:b4:df:cd:7e:74:cd:a9:ea:a0:
92:f3:c3:b4:58:40:5a:81:19:5a:7e:82:7c:e8:c6:39:45:07:
4e:f8:0a:50:6c:2a:9d:e6:b4:8d:bd:32:ca:6f:3d:60:f6:63:
01:e9:14:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org