Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/bee6f94d1df0d5f62f155b3f33c04a92d5723d6f.roa
File: bee6f94d1df0d5f62f155b3f33c04a92d5723d6f.roa (raw, json)
Hash identifier: o7pUln6QIuGqlTdSb+FuRwx75Q4UXME7LElVIsdP3YM=
Subject key identifier: 8D:AE:96:B3:EF:C6:8F:06:33:C8:A1:CB:36:D1:38:B6:1D:F8:51:80
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 218EB2
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/bee6f94d1df0d5f62f155b3f33c04a92d5723d6f.roa
Signing time: Mon 03 Apr 2023 15:59:19 +0000
ROA not before: Sun 02 Apr 2023 15:59:17 +0000
ROA not after: Thu 03 Apr 2025 15:59:17 +0000
asID: 28001
IP address blocks: 200.3.12.0/22 maxlen: 24
200.10.60.0/23 maxlen: 24
200.7.86.0/24 maxlen: 24
2001:13c7:7010::/46 maxlen: 48
2801:1b8::/44 maxlen: 48
2001:13c7:7002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199218 (0x218eb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: Apr 2 15:59:17 2023 GMT
Not After : Apr 3 15:59:17 2025 GMT
Subject: CN=bee6f94d1df0d5f62f155b3f33c04a92d5723d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:97:6d:60:96:74:29:a2:50:20:b2:42:a1:
8d:99:47:3d:7c:ca:da:27:90:0f:28:2b:75:ed:08:
99:5b:70:05:c5:90:68:d4:5c:60:e4:ba:5b:41:42:
c0:09:44:5d:49:1c:2d:6d:f1:e1:a6:74:db:fc:32:
2e:29:8e:16:d6:0b:58:6d:74:af:ee:c1:05:a7:c7:
c8:5b:cb:51:d1:53:25:53:b5:8b:2d:87:c4:08:3f:
c5:03:16:94:53:94:38:c1:46:8d:f6:23:a8:0e:cc:
d8:d8:23:10:c9:70:b0:e0:f1:f2:1a:b3:c4:85:c2:
99:f4:67:98:0a:42:16:20:60:f5:df:8a:36:13:04:
0c:d6:43:62:73:60:30:21:a0:3c:e8:d7:5d:08:07:
11:e2:47:cf:23:a3:30:79:73:87:26:68:97:b2:17:
92:5a:01:7d:6d:6f:59:1e:d2:7c:12:f7:54:5d:2c:
d5:a5:11:8f:e3:50:e8:62:d8:3e:c3:12:36:d5:e3:
77:82:99:15:97:6c:0a:d0:73:d8:b1:7b:9b:4d:b1:
0e:c9:a5:ab:92:02:77:df:3c:12:9d:2d:fa:91:02:
dc:af:47:d9:fe:76:c1:30:25:0f:c3:58:00:ec:da:
9a:87:65:92:6d:d2:9e:1a:62:c1:01:84:29:2f:80:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AE:96:B3:EF:C6:8F:06:33:C8:A1:CB:36:D1:38:B6:1D:F8:51:80
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/bee6f94d1df0d5f62f155b3f33c04a92d5723d6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.12.0/22
200.7.86.0/24
200.10.60.0/23
IPv6:
2001:13c7:7002::/48
2001:13c7:7010::/46
2801:1b8::/44
Signature Algorithm: sha256WithRSAEncryption
16:2d:16:6f:d4:7d:40:1c:7b:0a:49:23:8f:db:41:94:d8:be:
65:50:5f:51:bf:a4:a0:9f:f1:27:d9:6c:ed:3a:b0:62:7e:92:
35:45:9b:75:9c:e6:c1:f1:24:95:c8:38:84:f4:85:3d:12:0f:
7a:64:51:d3:4a:54:c7:04:ee:1b:8b:76:fc:95:9e:b0:d9:22:
32:04:c5:c3:bc:e8:d3:c5:47:98:77:bb:32:3c:e1:96:de:84:
b7:a6:80:34:5c:7d:33:99:2d:7c:8d:6d:9a:26:ef:fa:8b:44:
d9:b1:45:92:95:50:2f:90:fe:91:c4:93:8d:09:bb:70:79:c3:
0c:7e:b6:c6:30:ad:c2:46:6e:15:0c:8d:23:e3:f3:4f:7e:1d:
79:e5:85:4e:7c:89:ac:ca:57:b2:af:9d:c2:c0:6c:7a:3b:2e:
01:c1:97:72:5f:d5:7d:ed:d5:60:98:1b:22:3e:58:cc:46:73:
9e:68:f4:b7:c6:86:e5:da:68:2a:16:b5:17:4f:30:5b:23:74:
d6:f2:85:5d:65:fa:38:a4:64:18:35:4d:46:c7:0e:ce:14:fe:
6c:08:f2:f5:9b:c1:d4:e0:3a:4c:2d:a0:17:ba:0d:27:46:e7:
9c:3e:1a:02:51:a6:d1:39:60:6b:ae:92:7f:16:c4:f9:75:7b:
22:4f:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org