Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/69398f4c3c79fdda96d7acfe955bec90d04ecc13.roa
File: 69398f4c3c79fdda96d7acfe955bec90d04ecc13.roa (raw, json)
Hash identifier: ffqG1VRiaOVTu8xuec+qsvKRsnpYsTwCWpHTzSAXnIM=
Subject key identifier: F3:E0:A5:A2:2A:D6:DF:21:AC:21:F3:F8:D3:75:6F:0B:9B:AE:6C:FA
Certificate issuer: /CN=2992018c1338674cb760d954bf606483b9b3a7d8
Certificate serial: 0322ED
Authority key identifier: 5A:CB:88:0A:8F:D2:85:1B:74:EB:F9:7D:46:04:8E:1A:CF:B7:06:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2992018c1338674cb760d954bf606483b9b3a7d8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/69398f4c3c79fdda96d7acfe955bec90d04ecc13.roa
Signing time: Mon 27 Dec 2021 14:04:31 +0000
ROA not before: Mon 27 Dec 2021 03:00:00 +0000
ROA not after: Wed 27 Dec 2023 03:00:00 +0000
asID: 271896
IP address blocks: 201.94.148.0/24 maxlen: 24
201.94.149.0/24 maxlen: 24
201.94.150.0/24 maxlen: 24
201.94.151.0/24 maxlen: 24
201.94.148.0/22 maxlen: 22
2803:2210::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205549 (0x322ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2992018c1338674cb760d954bf606483b9b3a7d8
Validity
Not Before: Dec 27 03:00:00 2021 GMT
Not After : Dec 27 03:00:00 2023 GMT
Subject: CN=69398f4c3c79fdda96d7acfe955bec90d04ecc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b2:58:f6:4e:83:88:b2:6e:97:77:a0:d8:8b:
86:72:aa:0a:83:2e:6f:a5:30:4f:10:5a:2a:b9:72:
f6:19:75:a3:9e:9a:de:ca:46:68:de:26:74:8e:bf:
10:ea:37:8d:72:ee:15:94:b1:3d:f4:fc:86:0c:f0:
3b:29:25:4c:cb:e8:a9:df:95:22:d0:11:3b:b8:5b:
cf:90:9f:90:b7:ff:4a:96:cf:87:8b:eb:54:f6:f2:
58:47:ed:7e:c9:92:1c:a8:fa:96:86:71:23:91:3b:
67:7d:06:c9:4c:73:31:06:42:4d:45:e5:e2:74:a6:
5c:75:a6:0f:61:86:8b:63:b9:56:0a:9c:08:4b:37:
a9:99:5a:8a:9f:36:1f:9a:66:9f:93:a9:21:8c:de:
b8:5b:d7:34:5e:27:4e:ae:15:71:6d:cb:49:8b:c8:
31:32:6f:f4:5d:9c:56:4a:52:d8:db:85:29:37:bb:
c5:b8:23:a8:93:09:e8:7d:b6:40:4c:cc:c6:5f:3a:
7b:55:7c:55:02:ea:21:62:55:4c:9e:5a:b6:49:66:
8a:71:61:21:a7:69:73:29:62:dc:99:f3:e5:0e:77:
e4:7e:31:45:0c:03:00:38:28:a7:ff:4b:3c:41:fb:
01:49:d8:ae:a8:cb:f8:3c:fa:23:db:c4:50:bb:cc:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E0:A5:A2:2A:D6:DF:21:AC:21:F3:F8:D3:75:6F:0B:9B:AE:6C:FA
X509v3 Authority Key Identifier:
keyid:5A:CB:88:0A:8F:D2:85:1B:74:EB:F9:7D:46:04:8E:1A:CF:B7:06:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2992018c1338674cb760d954bf606483b9b3a7d8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/69398f4c3c79fdda96d7acfe955bec90d04ecc13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/2992018c1338674cb760d954bf606483b9b3a7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.94.148.0/22
IPv6:
2803:2210::/36
Signature Algorithm: sha256WithRSAEncryption
7c:57:e1:35:df:84:dc:24:25:39:fc:98:00:cd:8a:30:b7:80:
97:0b:5f:0f:c4:d5:29:38:13:9f:ee:7c:c7:21:21:8b:06:4b:
aa:4f:1c:ef:53:be:78:07:c9:fa:41:8a:3d:0a:cd:25:7b:61:
04:04:18:24:87:46:29:9c:ae:66:21:ca:76:f6:51:7d:21:9a:
d9:e1:fb:99:3d:43:09:f8:83:ec:cc:5c:9a:63:2c:0c:be:4b:
b7:48:eb:e0:2d:34:05:ef:9e:06:b2:49:b1:7d:29:e7:2a:73:
2e:7d:94:fe:f4:53:0a:e2:69:95:62:ba:49:ab:ae:cd:f0:2e:
45:e0:5d:99:b2:90:e9:9e:f8:74:60:5a:81:87:75:6d:07:65:
e7:03:c8:44:77:c5:6e:cd:eb:27:64:fc:59:a3:9d:58:47:6f:
81:a9:be:a8:9b:50:a6:58:90:ae:44:cf:f4:0b:ab:1d:7b:88:
38:98:36:1f:e0:4b:c7:89:7b:a9:3b:a1:8a:e3:d9:26:4f:1c:
cf:f1:48:97:92:a9:4f:49:0c:4f:23:56:e8:33:ef:17:48:46:
c0:ca:79:00:4f:23:e3:db:e7:cc:77:ae:e0:90:c4:66:63:e0:
8b:c1:74:df:82:bb:57:1f:4c:1b:ac:1e:d3:ad:17:51:af:b8:
e7:95:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org