Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/0aa3afb2aae5494cc9baebe783687885e9b38d0c.roa
File: 0aa3afb2aae5494cc9baebe783687885e9b38d0c.roa (raw, json)
Hash identifier: yMY3aLcTE5VOIonvFHOuGx7bo66Qok1FwywHUia/qp4=
Subject key identifier: D1:E6:9A:FC:05:41:EE:57:DF:08:05:68:E9:AC:73:37:50:5F:47:4C
Certificate issuer: /CN=048f7ccf5bff2d8c4761bd7702a6985bca4ed931
Certificate serial: 0DE8C0
Authority key identifier: 01:7D:D9:A1:92:A3:91:08:70:71:12:1E:10:53:10:0A:5E:4A:FA:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/0aa3afb2aae5494cc9baebe783687885e9b38d0c.roa
Signing time: Fri 10 Jun 2022 15:18:10 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 28080
IP address blocks: 143.0.168.0/22 maxlen: 24
200.114.96.0/21 maxlen: 24
200.114.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911552 (0xde8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048f7ccf5bff2d8c4761bd7702a6985bca4ed931
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=0aa3afb2aae5494cc9baebe783687885e9b38d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:c6:1f:87:93:31:28:9e:85:70:19:41:2f:
39:68:04:64:4a:7d:3c:af:21:dc:45:9b:ba:f6:2d:
c2:b8:2d:e7:f0:04:0a:18:94:e5:66:14:c2:33:1e:
37:bc:2a:12:7f:e4:e6:95:a3:0d:bc:f7:18:c6:c0:
c1:01:61:d8:20:07:ca:9b:4b:53:49:bb:4d:02:9d:
00:d5:a0:26:b3:31:f5:4d:81:b4:f5:c8:c9:66:a4:
fe:22:b6:55:14:63:7b:05:43:c4:31:ed:0d:c6:28:
0a:82:28:f5:e8:81:2a:5d:e3:3e:d7:6d:ab:74:89:
5c:9c:cc:f7:59:31:a9:cf:2e:f7:f2:ca:7a:5f:12:
e2:46:43:bb:73:6b:3a:dc:fa:70:86:ca:52:b4:a0:
96:8e:17:e8:df:c1:af:f8:10:1c:0a:e0:65:e2:b9:
08:0a:49:bf:33:df:06:e0:2f:2d:aa:7d:02:db:25:
35:b3:0b:e6:7a:fe:fe:bd:5a:95:0f:e4:90:8b:2d:
73:4f:34:df:07:d6:f3:78:6f:53:d2:be:62:52:99:
06:bb:ff:e2:d6:7b:bd:25:ad:bb:12:79:cb:fb:d7:
89:19:d4:ec:4f:76:05:66:6c:a2:24:5a:4b:00:c5:
77:1e:d7:fd:5b:17:11:41:12:8f:57:3d:49:16:e5:
b5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:9A:FC:05:41:EE:57:DF:08:05:68:E9:AC:73:37:50:5F:47:4C
X509v3 Authority Key Identifier:
keyid:01:7D:D9:A1:92:A3:91:08:70:71:12:1E:10:53:10:0A:5E:4A:FA:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/0aa3afb2aae5494cc9baebe783687885e9b38d0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.168.0/22
200.114.96.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:dd:63:d1:81:8e:78:f5:49:84:07:bd:8e:89:d8:fb:e5:92:
34:eb:58:e3:9f:9a:16:d4:4a:ca:f7:57:58:76:7d:c8:2c:94:
31:54:1f:4c:17:16:bb:ab:b1:c1:06:17:97:fa:e2:a3:92:8d:
b9:bf:00:2c:ec:3c:f5:71:a6:6a:23:19:68:ec:65:04:59:a7:
cc:ba:e8:e8:ca:5c:b7:c7:b0:f0:85:45:14:23:a3:73:d8:02:
47:94:4b:2a:55:68:93:44:74:9f:03:6c:c7:80:d0:27:d9:f5:
5c:6c:ce:f7:bb:5a:19:df:6c:e3:b5:7e:ad:4e:84:ce:85:01:
ac:12:fc:53:7b:19:1b:1b:46:53:d9:6d:6e:ee:16:07:d4:b5:
83:f6:b4:cb:d7:65:51:d1:65:cc:58:8b:83:4a:d2:79:4c:18:
63:70:9a:f4:39:48:13:2d:0f:73:88:24:ce:df:7b:33:00:c7:
07:f9:5b:d8:d9:2e:b8:1f:fc:2d:1c:32:78:56:c8:47:80:60:
47:ca:32:02:7e:99:bb:4d:4a:bb:6e:2a:75:dc:6f:36:77:ee:
2d:5d:32:1d:f6:94:87:12:48:4c:e6:b0:58:39:3c:f3:2d:ad:
15:6b:1f:e3:37:a0:ce:a6:0e:df:3c:bc:f7:04:aa:8a:53:05:
38:18:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org