Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/ef1cb492abea8b4da1cb42e44e42721680d63315.roa
File: ef1cb492abea8b4da1cb42e44e42721680d63315.roa (raw, json)
Hash identifier: 4q3RPxROxjFoqnyPXIDscB5r2hiav7gF3MSX03Rlpdw=
Subject key identifier: B3:CB:86:1C:71:FB:58:0B:FF:D0:52:71:39:35:66:7B:02:6B:A1:0A
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 2492AF
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/ef1cb492abea8b4da1cb42e44e42721680d63315.roa
Signing time: Mon 30 Oct 2023 12:06:43 +0000
ROA not before: Mon 30 Oct 2023 12:06:35 +0000
ROA not after: Thu 30 Oct 2025 12:06:35 +0000
asID: 61521
IP address blocks: 138.204.250.0/24 maxlen: 24
201.182.130.0/24 maxlen: 24
2001:13c7:601c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2396847 (0x2492af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Oct 30 12:06:35 2023 GMT
Not After : Oct 30 12:06:35 2025 GMT
Subject: CN=ef1cb492abea8b4da1cb42e44e42721680d63315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:0a:9b:7a:7c:70:9c:6a:86:65:ee:c4:22:
85:0d:ca:83:a6:04:02:9d:dc:7e:fd:42:ae:67:b4:
84:7f:98:75:9b:10:ef:5a:23:82:64:73:56:9b:7e:
67:b2:62:45:7b:36:ab:2b:f0:57:e8:42:c0:ed:fe:
89:93:00:b4:b3:bd:fa:ef:7e:41:ef:d5:dd:75:3b:
29:f7:ea:5e:a0:6a:c6:96:9c:9f:04:89:5a:b1:68:
3f:8d:68:25:b9:dd:20:2c:61:b4:33:fe:a8:f5:82:
28:5d:47:b8:a3:28:7a:df:fa:04:6f:56:ac:52:db:
5b:be:67:c5:c4:07:b5:fa:f8:dc:c2:93:83:c8:ce:
b9:40:5f:80:00:ee:c9:3e:fa:b9:0a:b3:93:6c:8a:
b1:f0:b7:41:c9:31:0f:88:ee:6c:b7:58:e0:be:42:
22:fa:55:97:f1:96:0f:62:90:15:ba:2f:24:f4:54:
e4:14:03:de:64:2e:43:6c:de:d4:ac:6e:91:2a:17:
52:91:79:22:5d:35:c3:22:3c:5c:53:f5:6d:f6:8a:
b3:74:bb:90:76:d4:73:4b:8d:7b:f5:c3:3a:e1:1f:
51:14:2a:67:f0:1f:09:74:36:f8:99:d3:79:e9:2b:
29:ed:cc:e9:57:94:66:4a:01:33:ba:8b:e3:52:5b:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CB:86:1C:71:FB:58:0B:FF:D0:52:71:39:35:66:7B:02:6B:A1:0A
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/ef1cb492abea8b4da1cb42e44e42721680d63315.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.250.0/24
201.182.130.0/24
IPv6:
2001:13c7:601c::/48
Signature Algorithm: sha256WithRSAEncryption
4c:ad:7b:9f:2e:f1:df:b1:34:bf:80:bc:1d:1d:53:b5:70:1b:
45:7f:ec:e1:be:61:41:91:cd:45:8d:72:bb:1a:4a:09:43:2f:
ea:0d:80:36:c2:fd:8b:19:c8:33:8a:5f:19:48:65:4b:ad:91:
3a:c9:41:ec:f4:6e:83:c9:6b:cb:b1:ee:d8:6e:6d:58:84:e3:
35:53:13:4a:3a:c0:fb:be:48:75:d8:47:95:eb:63:7c:f5:47:
85:08:aa:9e:b5:ed:0b:a0:31:ff:ad:96:1f:16:92:0a:34:b4:
10:31:94:ba:47:24:40:dc:b3:a6:5d:36:42:a5:f2:eb:50:bb:
b1:a0:cf:c8:ed:e0:98:c4:46:f0:4c:81:ac:84:47:ab:f1:c4:
06:51:25:29:f4:ab:14:14:bb:a0:34:68:59:e6:f3:04:b5:25:
ed:17:b4:09:3f:74:50:6e:b6:91:ef:51:06:2e:cc:d3:1e:cf:
79:f7:d6:79:37:4f:6f:3f:53:a4:c1:88:39:6c:e7:62:82:26:
73:e7:c6:4a:26:2b:f0:fd:21:72:74:24:a9:4c:4d:12:a5:a1:
ea:26:67:9a:90:c0:da:ea:8e:0f:95:ff:9a:01:98:d1:47:2c:
71:88:77:59:5a:e1:f6:4b:c7:35:ee:eb:16:39:9d:30:84:b3:
63:27:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-ams.rpki-client.org