Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/0ca7c33a7424a4d14794c918b30bbd2ece93a273.roa
File: 0ca7c33a7424a4d14794c918b30bbd2ece93a273.roa (raw, json)
Hash identifier: nQhEUD9DtjBrfUV5Lhy9iQSC4rvFkweDNgth/pvfLZY=
Subject key identifier: 15:18:F6:ED:55:47:4F:23:6D:8C:5D:84:8D:8B:1B:E3:51:B4:BB:CD
Certificate issuer: /CN=70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287
Certificate serial: 1EB7B5
Authority key identifier: 80:14:79:54:5E:0A:B4:F5:6E:58:C3:EA:7A:D6:4E:DB:A8:5A:A6:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/0ca7c33a7424a4d14794c918b30bbd2ece93a273.roa
Signing time: Thu 29 Feb 2024 19:51:00 +0000
ROA not before: Thu 29 Feb 2024 19:51:00 +0000
ROA not after: Sat 28 Feb 2026 19:51:00 +0000
asID: 27964
IP address blocks: 201.49.132.0/22 maxlen: 22
201.49.132.0/24 maxlen: 24
201.49.133.0/24 maxlen: 24
201.49.134.0/24 maxlen: 24
201.49.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013109 (0x1eb7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287
Validity
Not Before: Feb 29 19:51:00 2024 GMT
Not After : Feb 28 19:51:00 2026 GMT
Subject: CN=0ca7c33a7424a4d14794c918b30bbd2ece93a273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:c3:fe:94:91:e7:e3:0c:2c:6e:f0:13:46:
06:09:cf:ba:e0:6d:55:91:3e:6f:e8:e2:88:6e:01:
8c:fe:7c:3f:db:04:fb:38:7f:86:bc:c5:46:e7:a9:
a7:86:dc:ce:19:e4:98:a0:13:f3:a5:f6:dd:29:c8:
f0:3d:71:e3:0e:b8:1b:12:68:07:b9:c6:73:02:a2:
8a:75:46:5b:ec:52:2f:2b:72:4a:68:2e:2e:58:9d:
78:ae:cf:03:83:9b:3b:0e:ef:01:25:6a:bf:65:8e:
fd:6a:28:4b:cf:bc:2d:4d:e9:6a:3a:c2:e5:3c:5a:
55:a2:06:6d:1e:d7:50:17:f2:35:8b:6d:00:8e:ba:
33:66:07:09:02:cd:10:d6:f3:c0:cc:d4:61:27:8f:
07:2c:2e:b1:e4:fe:67:be:41:9e:db:21:1d:d4:b8:
ec:4a:ea:3c:03:c7:d4:9b:87:ff:f3:19:33:eb:8e:
2f:2c:fa:08:0a:20:fc:ce:cd:ae:95:fa:13:2b:07:
cc:09:75:8b:67:f8:2f:bd:de:5e:d9:81:f8:66:46:
02:27:c8:bd:76:15:cd:32:38:3b:09:eb:07:5f:17:
5a:11:93:3d:97:ae:4e:ab:13:44:0f:3b:f0:b9:ae:
a6:6b:0a:00:a8:82:4f:1f:c4:ef:92:74:5c:59:1b:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:18:F6:ED:55:47:4F:23:6D:8C:5D:84:8D:8B:1B:E3:51:B4:BB:CD
X509v3 Authority Key Identifier:
keyid:80:14:79:54:5E:0A:B4:F5:6E:58:C3:EA:7A:D6:4E:DB:A8:5A:A6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/0ca7c33a7424a4d14794c918b30bbd2ece93a273.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.132.0/22
Signature Algorithm: sha256WithRSAEncryption
79:65:60:6b:22:f4:fd:0e:f8:53:d8:61:53:f9:52:b5:fb:6e:
39:35:40:b0:2a:c9:2a:df:b1:64:49:e1:48:72:52:82:b1:d6:
b5:e8:77:2d:f1:47:c6:3f:59:a1:c5:cb:29:4d:6b:f3:de:fa:
6f:40:3f:76:e7:e9:f7:e3:d2:8e:84:5a:46:7f:5d:4e:2b:cd:
2e:69:2a:03:26:f6:a6:e2:3f:ed:d0:cc:bb:96:3d:c9:7f:8d:
22:ec:7c:1a:25:46:87:28:ea:31:39:5e:f8:85:38:bb:6a:74:
67:e5:02:ed:68:b5:d1:d1:57:98:0d:ce:17:21:f7:88:11:c9:
be:be:19:82:3a:c6:87:46:d2:57:47:db:5f:9f:e3:2d:54:2b:
3c:ec:a9:47:29:02:03:6a:4d:3d:e0:21:67:a7:ce:dc:63:25:
85:b3:46:88:a1:2e:c5:2c:73:ed:0c:04:f0:17:c3:35:50:76:
03:74:96:2d:b6:b4:d8:8e:b2:99:54:6c:e1:0d:14:14:78:59:
ce:27:5c:24:04:41:60:c9:ef:97:2a:54:05:f0:89:b1:91:89:
c8:27:72:27:3c:79:0e:90:f7:42:49:94:3b:44:a5:60:2b:58:
20:a8:64:20:44:47:9f:fc:a8:60:51:f1:1d:84:03:cc:b1:6e:
ee:50:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org