Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/4309a76a63ccef0fc03d778f006a1c7a426bdf25.roa
File: 4309a76a63ccef0fc03d778f006a1c7a426bdf25.roa (raw, json)
Hash identifier: mgY7PXIDRUQifpQ+0vxJjT+JtaGEEZAeDTJ7e1F9OEg=
Subject key identifier: 52:02:A7:DB:1B:FD:F5:34:A3:9D:85:D2:1A:80:51:79:9F:07:5A:AF
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 24ED8D
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/4309a76a63ccef0fc03d778f006a1c7a426bdf25.roa
Signing time: Mon 30 Oct 2023 12:07:27 +0000
ROA not before: Mon 30 Oct 2023 12:06:35 +0000
ROA not after: Thu 30 Oct 2025 12:06:35 +0000
asID: 61495
IP address blocks: 200.115.80.0/24 maxlen: 24
138.219.0.0/24 maxlen: 24
2001:13c7:6010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2420109 (0x24ed8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Oct 30 12:06:35 2023 GMT
Not After : Oct 30 12:06:35 2025 GMT
Subject: CN=4309a76a63ccef0fc03d778f006a1c7a426bdf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:eb:ad:f4:b2:e6:f4:53:ba:f9:77:23:b5:06:
ac:22:5b:ec:64:3b:be:30:b7:b1:1b:a0:bb:2f:c4:
23:12:a6:4c:1a:10:98:38:9c:b4:af:2b:67:7d:f8:
a8:71:6c:d9:da:14:ba:da:8e:23:c7:c3:75:bd:1d:
61:52:f7:ca:bf:89:2e:44:3b:3e:fd:b4:e7:a2:df:
31:64:6e:80:2d:96:a7:cc:37:23:a7:21:b7:f2:b4:
f8:ef:cb:10:83:2c:10:d2:11:31:7d:be:54:03:6c:
af:1d:1e:c4:8f:11:6a:56:79:11:cc:ea:38:f2:ab:
86:11:b9:c4:9f:f1:3e:ce:a8:b4:78:6e:b2:3f:3b:
b3:d8:04:c4:0f:94:9d:8b:b4:21:85:ac:8b:46:de:
ac:ec:f5:5d:5f:25:b6:09:b1:ef:c5:94:b5:14:01:
1a:50:c6:ba:d6:ff:36:16:95:c6:81:09:9b:e4:1f:
0f:26:d2:d3:ad:18:0a:3a:9f:32:ff:5e:d6:d5:e7:
27:cf:d6:97:d3:6d:9a:17:b8:77:50:3d:bc:f5:1f:
ec:69:d0:2a:51:81:30:00:c6:fe:d8:ad:cf:1c:0a:
8c:c2:f9:02:65:e1:35:41:72:bf:41:24:a5:00:f7:
45:9a:59:33:07:6c:9c:94:0e:15:a0:e4:62:02:b5:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:02:A7:DB:1B:FD:F5:34:A3:9D:85:D2:1A:80:51:79:9F:07:5A:AF
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/4309a76a63ccef0fc03d778f006a1c7a426bdf25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.0.0/24
200.115.80.0/24
IPv6:
2001:13c7:6010::/48
Signature Algorithm: sha256WithRSAEncryption
0f:10:04:0b:89:90:f8:7e:02:57:77:2d:fb:36:8c:b8:b5:82:
71:37:72:70:bd:9f:d5:45:ef:03:39:2d:53:e3:b7:c8:65:c5:
ef:ad:0b:31:ad:ef:a7:a9:20:fe:f5:e1:ba:e9:28:ad:49:46:
10:68:9d:de:b5:65:7c:15:59:5c:ef:9d:41:b0:16:f5:3d:8a:
48:96:7d:a8:5d:05:0f:5c:bb:e8:e7:7b:5e:0e:cc:ca:9f:de:
26:88:75:74:22:c7:9f:2c:33:21:e9:ba:b1:b6:fb:01:39:26:
2c:bc:6f:72:03:09:2c:40:bd:f9:d4:6a:72:47:f0:cb:31:cb:
81:05:be:a2:23:15:d5:0a:0e:07:a0:5a:16:60:b9:12:82:45:
49:44:c7:26:f8:4d:a2:54:cf:e1:44:bb:ad:d9:23:74:1e:db:
f6:96:d0:fc:cc:e0:aa:6a:22:2c:a1:48:49:1b:87:7b:08:ed:
e1:09:7c:14:44:40:a5:ba:97:58:27:4d:da:bd:4d:91:c2:16:
7d:a4:7e:f0:d7:62:9a:47:86:99:e0:45:94:a8:e2:cf:ac:bb:
13:9d:c5:90:bf:2a:e1:c1:16:be:73:8f:d5:34:59:92:5f:fc:
0a:7f:c1:df:2f:02:15:d8:47:db:e0:85:07:47:fe:c8:28:88:
ef:f5:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org