Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/c6f7be279dd15ad2f72444d1b116549b2efb2bff.roa
File: c6f7be279dd15ad2f72444d1b116549b2efb2bff.roa (raw, json)
Hash identifier: vqUi6S99wNTzO6La9DbGJQHDsuCjiK4nXsOEEUe4vJ8=
Subject key identifier: 96:6E:AA:CB:AC:B5:CD:43:C3:0C:94:B2:28:A6:CE:F5:59:59:6F:BE
Certificate issuer: /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial: 2A4135
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/c6f7be279dd15ad2f72444d1b116549b2efb2bff.roa
Signing time: Thu 18 Jan 2024 14:39:36 +0000
ROA not before: Thu 18 Jan 2024 14:39:31 +0000
ROA not after: Thu 18 Jan 2029 14:39:31 +0000
asID: 28001
IP address blocks: 200.3.12.0/22 maxlen: 24
200.10.60.0/23 maxlen: 24
200.7.86.0/24 maxlen: 24
2001:13c7:7010::/46 maxlen: 48
2801:1b8::/44 maxlen: 48
2001:13c7:7002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2769205 (0x2a4135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Validity
Not Before: Jan 18 14:39:31 2024 GMT
Not After : Jan 18 14:39:31 2029 GMT
Subject: CN=c6f7be279dd15ad2f72444d1b116549b2efb2bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:c8:e5:3f:9e:c6:15:a0:9f:92:6a:0d:14:
53:16:d4:31:61:2d:8f:2d:73:9c:82:30:21:84:fe:
56:db:6f:78:45:ec:2c:33:f0:21:dc:b0:98:e7:7d:
43:6c:4e:24:cd:89:e1:80:06:7a:31:02:3d:58:46:
7e:5f:91:fd:6d:e9:36:b7:09:57:16:ea:7b:3c:45:
68:35:39:46:60:36:1c:f1:c9:fd:70:8b:51:c3:e2:
3e:18:d4:93:b0:f8:e8:9c:1c:9f:98:0e:ac:34:cf:
3f:72:05:36:32:dc:c7:ad:ed:f6:a7:33:b0:27:5b:
91:66:d9:03:fc:ad:6d:11:16:9f:03:bc:4a:d7:49:
67:fc:cb:45:39:c9:24:79:91:a6:22:94:75:11:f1:
e4:e6:e4:5a:76:a8:ee:a6:44:63:dc:d9:6b:a3:41:
09:53:a2:2c:e7:e1:d1:df:26:d5:26:8a:4f:9a:e2:
bd:55:54:04:fd:50:69:e0:03:1d:e9:54:ff:eb:7b:
5a:5d:c8:5e:f6:37:4e:a8:4d:86:95:52:69:f8:0e:
54:49:d6:c9:0f:85:b1:d3:50:6b:cc:6f:91:50:ae:
53:73:e1:30:b0:cc:45:a5:71:57:ee:31:5a:08:b4:
b7:8f:95:5f:57:d2:e0:a0:43:a3:35:c6:7b:74:77:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6E:AA:CB:AC:B5:CD:43:C3:0C:94:B2:28:A6:CE:F5:59:59:6F:BE
X509v3 Authority Key Identifier:
keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/c6f7be279dd15ad2f72444d1b116549b2efb2bff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.12.0/22
200.7.86.0/24
200.10.60.0/23
IPv6:
2001:13c7:7002::/48
2001:13c7:7010::/46
2801:1b8::/44
Signature Algorithm: sha256WithRSAEncryption
4a:22:ce:bd:b2:03:54:4a:7f:93:ae:20:56:ef:07:3c:5b:63:
3f:c9:c8:00:03:2e:14:a2:e6:b5:0c:43:2f:da:20:93:8f:d5:
1e:4d:3b:bd:a7:c7:52:25:1b:38:53:d9:b9:1e:cf:89:9a:56:
16:cd:df:21:af:4f:74:00:0b:35:e8:82:2f:a6:e7:e3:9e:a1:
16:d7:7b:ec:55:05:d6:fe:92:af:83:1b:d0:11:b3:7f:0f:11:
39:bf:e4:e8:2f:29:de:38:5b:ef:88:ff:4b:cc:63:3c:41:34:
59:9b:2b:fb:3e:ae:b7:8e:3d:f8:59:3d:13:82:3e:96:3d:87:
eb:5a:bd:e8:16:3f:29:20:65:c3:34:08:5e:f3:21:6b:b2:cf:
1e:32:ec:82:ea:bf:31:c6:d0:80:1b:4f:de:28:db:f5:d6:99:
59:32:5d:e3:b2:70:f1:ad:e6:cf:26:98:84:77:bb:c8:9f:cf:
f8:9d:f9:d0:c7:1e:0d:a8:fa:5d:81:bd:af:7f:e3:ad:38:a1:
bd:a3:23:13:42:86:c0:c1:41:b1:9e:61:f0:b8:c3:8f:42:48:
5d:89:99:b3:a0:a2:80:e9:d1:61:42:3a:d6:a7:62:4e:38:d7:
f1:ad:39:31:d0:d7:41:d7:41:8d:4c:9c:a4:8b:6e:c2:77:3e:
92:0f:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 02:55:53 2024 by rpki-client on console-fra.rpki-client.org