Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/2d002028038cb0a852fe5e10ed2429d41eb0acd9.roa
File: 2d002028038cb0a852fe5e10ed2429d41eb0acd9.roa (raw, json)
Hash identifier: EOq3GUhdTcumEjQ+c+H6q0CCp1PBUvgpIou+b7qrAsM=
Subject key identifier: 27:03:29:D2:F3:FF:BC:95:3E:73:69:A1:01:83:B4:B1:8C:8B:64:F5
Certificate issuer: /CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
Certificate serial: 1F9C5F
Authority key identifier: 4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/2d002028038cb0a852fe5e10ed2429d41eb0acd9.roa
Signing time: Fri 24 Mar 2023 08:31:36 +0000
ROA not before: Thu 23 Mar 2023 08:31:36 +0000
ROA not after: Sat 22 Mar 2025 08:31:36 +0000
asID: 265804
IP address blocks: 167.250.168.0/24 maxlen: 24
167.250.169.0/24 maxlen: 24
167.250.170.0/24 maxlen: 24
167.250.171.0/24 maxlen: 24
179.60.236.0/24 maxlen: 24
179.60.237.0/24 maxlen: 24
179.60.238.0/24 maxlen: 24
200.63.108.0/24 maxlen: 24
200.63.109.0/24 maxlen: 24
200.63.110.0/24 maxlen: 24
200.63.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2071647 (0x1f9c5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
Validity
Not Before: Mar 23 08:31:36 2023 GMT
Not After : Mar 22 08:31:36 2025 GMT
Subject: CN=2d002028038cb0a852fe5e10ed2429d41eb0acd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:f4:35:04:fb:f5:de:92:0a:99:0a:da:c8:
5c:69:b3:08:06:83:0d:cb:73:fa:6b:e3:f6:e0:57:
44:e9:85:85:e7:fe:f6:33:b3:be:df:72:bf:10:15:
cd:20:5c:2e:a9:a5:e3:90:04:4b:da:a8:15:bf:49:
4c:13:2f:9d:27:8e:2e:65:cc:68:7b:60:5c:49:05:
00:28:e3:16:47:3e:48:7a:c7:fa:98:5a:ea:3c:75:
71:56:4b:e2:60:8c:23:05:35:87:7a:75:82:15:23:
34:47:3e:9b:9b:87:57:4c:da:0f:38:7b:cb:d9:0f:
80:4d:aa:3b:02:38:c2:b5:8c:8f:80:d6:51:8d:ae:
9d:44:60:4f:92:2d:d6:4d:39:29:86:54:98:dd:df:
6b:db:e7:2b:de:a7:65:f0:dc:6d:c0:0c:72:3a:79:
ee:86:00:c2:49:b0:ac:b0:4e:62:5f:3a:ea:ca:98:
d2:9a:a7:48:4c:b7:f7:c1:a7:29:b7:56:eb:39:d8:
04:b4:da:ac:ff:dd:11:8e:36:42:07:ab:37:f1:b5:
8d:5c:c5:b4:9a:33:ba:7f:90:94:d5:c1:8d:75:ad:
e1:4c:10:b9:93:2a:8a:bd:de:35:d3:56:d3:ae:43:
63:d6:fa:ef:58:31:51:90:ce:95:44:91:c2:ee:83:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:29:D2:F3:FF:BC:95:3E:73:69:A1:01:83:B4:B1:8C:8B:64:F5
X509v3 Authority Key Identifier:
keyid:4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/2d002028038cb0a852fe5e10ed2429d41eb0acd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/82b667941b9c44cb9ada9b7f66f84f2615467d5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.168.0/22
179.60.236.0-179.60.238.255
200.63.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:37:d1:b1:48:b5:f8:b4:cf:e7:a4:4b:be:3b:6e:ae:a6:b3:
b1:4c:98:d5:7c:44:a3:7a:ff:57:a0:e0:41:5f:ac:01:e2:c3:
1e:a3:d1:2c:0e:f2:ef:03:38:a3:9e:47:a1:4e:41:60:1d:74:
ff:b5:12:0d:b3:42:a7:51:9b:d9:99:96:7c:33:24:e6:c6:c4:
da:02:40:75:f9:80:25:59:c5:ff:32:dd:d5:99:ae:a3:56:c4:
6b:bd:a0:a4:30:e0:01:73:a0:26:98:71:f9:ab:51:05:bf:6a:
33:1a:c8:d9:f0:6f:ad:51:d7:a4:29:0b:a4:e2:0f:48:0d:9d:
c2:23:d5:8d:65:fb:4a:34:0e:ae:e6:51:8f:17:81:7e:e5:f3:
f4:b8:a5:98:6e:d3:ab:9b:1f:e9:b8:25:d3:c9:3f:23:d8:21:
2a:1c:59:01:37:a6:f5:a6:7f:d9:66:06:8d:21:ce:18:88:c4:
b4:68:04:f1:2b:b1:f9:d1:bf:8c:3c:c4:38:81:15:0e:04:fd:
f8:9e:5a:fa:2b:c2:6b:4d:d4:a6:c6:e5:ff:bc:07:21:20:e6:
51:74:03:ab:ba:f4:d4:06:f6:97:3f:8d:3b:6a:2d:0e:50:4e:
20:ee:9a:59:e2:59:95:61:da:d4:07:64:70:a6:2c:b4:7c:3f:
f8:24:e6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org