Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/efd19d33ac5a1b8604910d12c19c6cd1c0f489d1.roa
File: efd19d33ac5a1b8604910d12c19c6cd1c0f489d1.roa (raw, json)
Hash identifier: KlSeQKCT5FmhFHTbky08GSS++TBry00HHNMk/KRNJLk=
Subject key identifier: 65:43:E7:8E:3B:F0:C1:18:BB:32:35:44:7D:56:F8:1C:DB:62:01:4B
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 0CEC97
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/efd19d33ac5a1b8604910d12c19c6cd1c0f489d1.roa
Signing time: Wed 24 Mar 2021 14:29:19 +0000
ROA not before: Wed 24 Mar 2021 14:29:18 +0000
ROA not after: Tue 24 Mar 2026 14:29:18 +0000
asID: 52376
IP address blocks: 200.9.157.0/24 maxlen: 24
200.115.94.0/24 maxlen: 24
200.115.95.0/24 maxlen: 24
2001:13c7:600a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846999 (0xcec97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Mar 24 14:29:18 2021 GMT
Not After : Mar 24 14:29:18 2026 GMT
Subject: CN=efd19d33ac5a1b8604910d12c19c6cd1c0f489d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:77:23:23:4c:2d:0c:a0:df:4e:45:87:bc:
ef:f0:d0:87:2e:40:26:a5:af:1b:27:62:c3:47:ac:
67:66:3c:c2:90:9b:e8:f2:aa:83:28:b8:49:76:40:
fb:80:cd:18:91:e7:4c:c2:8e:23:f3:0a:11:bb:7c:
6b:e5:25:7f:5f:c5:e4:e3:cd:fa:0c:87:62:f6:b3:
77:98:ac:f2:3f:81:c8:33:5b:e4:73:a6:e2:88:60:
fd:96:4c:f0:e5:f5:58:31:81:1d:73:62:9b:96:45:
b8:fe:ec:bf:75:de:c7:eb:91:de:7c:33:a6:a4:8e:
8e:eb:0b:55:7f:18:cd:ab:91:a6:03:f5:d6:28:f6:
46:0a:10:1b:f7:b2:ea:26:3e:5d:88:0f:dc:3c:89:
b2:ea:b1:17:6a:12:8f:ef:ab:f1:6f:de:52:7d:12:
ec:65:39:61:93:96:b4:2c:b9:b3:bc:8e:77:d1:23:
5a:2f:73:ef:44:13:e7:4e:a2:14:0c:42:6b:26:da:
eb:8f:03:fc:c6:cf:a7:94:05:65:64:43:44:1b:0f:
2c:ae:ca:82:45:0c:72:c6:25:aa:f2:46:09:89:5b:
96:74:48:43:d4:02:c9:08:af:2c:4e:d1:9c:46:03:
08:88:26:20:2e:2d:cf:5d:3c:9e:9c:41:53:50:45:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:43:E7:8E:3B:F0:C1:18:BB:32:35:44:7D:56:F8:1C:DB:62:01:4B
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/efd19d33ac5a1b8604910d12c19c6cd1c0f489d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.157.0/24
200.115.94.0/23
IPv6:
2001:13c7:600a::/48
Signature Algorithm: sha256WithRSAEncryption
52:5a:20:23:00:49:04:86:23:e6:48:32:fc:be:32:bd:b4:99:
51:51:5c:ab:b6:81:8a:70:11:4a:5a:8e:1b:80:65:65:ee:7c:
9f:c7:05:56:38:77:47:bc:33:10:eb:79:f3:b1:31:de:c3:7d:
71:bc:ed:67:a7:7f:69:63:6b:88:9c:5b:47:c3:82:30:0e:b4:
f4:c1:3a:17:05:fb:2f:d5:7b:52:d6:d1:a9:14:50:41:cc:9b:
e5:83:71:94:1a:6f:0f:9e:d0:4e:bd:9e:51:c9:f7:08:ac:05:
3f:04:57:24:b2:1e:f7:34:ac:a5:3a:c8:e8:d0:f8:c8:43:f6:
fe:64:12:ff:1b:20:06:b0:0f:02:5c:9b:45:d7:d0:a9:a0:44:
7b:9b:43:0b:c3:8e:f9:18:39:52:f5:ba:37:f3:3b:24:07:ec:
5f:08:f3:4a:f2:6b:32:96:56:18:0c:c5:c9:0a:ca:35:b6:31:
7f:ca:df:d2:27:c7:e1:14:dd:7b:10:f9:97:f8:5f:d6:c4:cb:
f8:4c:a6:33:19:08:8a:fd:50:a6:a2:04:33:ac:f0:a5:69:a6:
2f:9e:ee:27:64:fa:c1:26:54:5a:86:fa:1c:4c:16:08:18:9d:
d3:b7:fc:15:07:c9:9b:05:81:3b:5b:5a:cb:f1:f9:04:46:a7:
7e:75:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-ams.rpki-client.org