Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/74858ce0e1d7a9663b529c6832adffb78be1feca.roa
File: 74858ce0e1d7a9663b529c6832adffb78be1feca.roa (raw, json)
Hash identifier: 22ewYeK91K5zdKv1YIEE6fKGcJbUqhPqUrH/4qePPfQ=
Subject key identifier: 29:93:69:DB:3A:20:A5:D2:C0:2D:51:CC:2F:97:40:07:DD:64:EC:E6
Certificate issuer: /CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
Certificate serial: 0DE808
Authority key identifier: 4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/74858ce0e1d7a9663b529c6832adffb78be1feca.roa
Signing time: Wed 24 Mar 2021 22:51:23 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 265804
IP address blocks: 167.250.168.0/24 maxlen: 24
167.250.169.0/24 maxlen: 24
167.250.170.0/24 maxlen: 24
167.250.171.0/24 maxlen: 24
179.60.236.0/24 maxlen: 24
179.60.237.0/24 maxlen: 24
179.60.238.0/24 maxlen: 24
200.63.108.0/24 maxlen: 24
200.63.109.0/24 maxlen: 24
200.63.110.0/24 maxlen: 24
200.63.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911368 (0xde808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=74858ce0e1d7a9663b529c6832adffb78be1feca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e3:f7:3e:58:94:be:36:85:ae:0e:d4:6c:87:
52:f2:ff:6f:c0:63:c3:66:d1:e4:7c:00:58:24:87:
58:e7:da:b0:61:0a:26:34:43:92:6b:f7:43:17:83:
fe:56:8c:01:46:d7:88:81:24:29:06:f9:a4:2d:4f:
dd:c1:82:d1:0f:16:ba:c5:f5:32:0d:d8:ad:b9:45:
0d:ab:aa:08:cd:50:ae:a1:d2:9d:9c:57:0b:df:db:
c7:e8:67:78:11:a2:70:50:9e:05:ed:91:a0:db:61:
86:72:dd:71:e9:64:bb:59:24:7f:5b:67:85:5e:5d:
88:63:ef:4e:72:f4:75:68:fc:af:38:af:7e:07:cb:
7d:99:39:cf:76:58:6e:17:c6:9d:f5:8d:2f:de:3a:
77:cc:6b:6c:fd:13:b0:02:ba:b7:98:1f:f6:b4:61:
ce:0d:f8:b7:7b:94:16:d1:04:5e:a2:b3:05:75:88:
fb:7f:fd:d2:8b:ae:7d:19:33:19:18:45:a4:35:85:
ae:6a:c6:a0:90:02:62:2c:d8:af:14:a7:d2:fe:8f:
fa:c3:1b:64:f8:91:ea:61:51:6d:89:17:6e:d8:75:
52:bd:66:a9:4c:53:e4:c3:bd:59:53:9f:98:fd:fd:
23:96:11:7e:31:88:ab:80:54:d7:08:77:d6:6d:9b:
63:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:93:69:DB:3A:20:A5:D2:C0:2D:51:CC:2F:97:40:07:DD:64:EC:E6
X509v3 Authority Key Identifier:
keyid:4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/74858ce0e1d7a9663b529c6832adffb78be1feca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/82b667941b9c44cb9ada9b7f66f84f2615467d5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.168.0/22
179.60.236.0-179.60.238.255
200.63.108.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:ac:08:7b:14:9a:b0:e9:b6:90:32:57:18:8b:7f:7c:b1:77:
a3:13:69:4e:8d:5e:0d:6b:1e:d9:9b:7a:e7:e1:21:4e:a0:0c:
24:25:08:18:6a:e5:26:cd:1c:11:c4:93:5d:52:2f:de:72:5e:
ba:a2:db:c9:3e:da:01:b8:99:80:ab:98:27:7c:87:d8:66:79:
1e:d6:26:7b:44:cd:dd:89:b9:9c:b6:be:57:50:b8:8e:d5:b2:
89:d6:f8:b0:d8:94:c8:43:4c:e5:93:c8:b4:e7:ff:84:82:af:
21:97:a8:19:58:37:8a:3b:b3:c1:78:34:83:ad:ee:f8:9e:d5:
64:50:ce:6d:91:98:45:00:b1:23:f9:39:54:88:37:78:44:fe:
d8:c8:d4:01:a8:95:dc:e1:fc:b6:3f:21:7b:70:57:8d:8b:95:
2f:ba:94:e5:51:ca:e3:74:80:10:21:1d:00:14:af:a4:13:9e:
b6:e9:6e:c3:44:97:47:46:e6:b9:5b:31:fc:ca:93:43:76:86:
f7:5a:ff:a8:ad:e1:4d:83:f9:42:2d:88:b8:29:c2:8f:09:31:
73:12:c3:9a:d3:d1:6f:52:88:db:9a:18:45:83:e9:17:71:5f:
07:c2:f4:15:d1:b0:34:fd:c8:e0:7e:af:b4:e7:7a:68:c9:06:
4b:f3:72:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org