Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/68a241c40ba3d2cb580906f4d00aace10ecd6475.roa
File: 68a241c40ba3d2cb580906f4d00aace10ecd6475.roa (raw, json)
Hash identifier: xkpAeIx76+7CcG54zR+W+DuGQtF+6qdCOIqcWl6zTqo=
Subject key identifier: CC:D6:15:58:0E:07:B9:8B:76:07:EC:B3:E2:A9:A4:13:58:D1:9C:03
Certificate issuer: /CN=cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b
Certificate serial: 0CEBF6
Authority key identifier: B0:DC:AD:E6:7B:75:6C:49:04:1C:82:B6:0D:1A:4B:17:2C:69:7C:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/68a241c40ba3d2cb580906f4d00aace10ecd6475.roa
Signing time: Wed 24 Mar 2021 14:34:10 +0000
ROA not before: Wed 24 Mar 2021 14:34:10 +0000
ROA not after: Tue 24 Mar 2026 14:34:10 +0000
asID: 263237
IP address blocks: 200.73.112.0/21 maxlen: 24
201.217.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846838 (0xcebf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b
Validity
Not Before: Mar 24 14:34:10 2021 GMT
Not After : Mar 24 14:34:10 2026 GMT
Subject: CN=68a241c40ba3d2cb580906f4d00aace10ecd6475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:7f:31:b8:aa:ad:1b:55:0a:b5:52:5c:72:
f8:c0:e5:52:d4:98:32:a8:98:24:fb:5f:f7:6a:15:
3c:ba:0e:8e:5b:84:43:b5:2c:9e:3a:f9:58:76:1a:
c3:e5:80:54:da:9c:06:7f:6b:eb:79:68:60:7d:01:
2e:db:8a:2a:c5:fd:9b:23:1a:80:a3:a6:11:e9:98:
e5:32:05:58:cf:ab:37:a5:ac:4c:71:01:8f:73:85:
3a:e7:8c:a6:11:1e:8d:57:96:92:97:90:b9:67:7f:
fb:57:03:29:75:4a:e1:8c:53:03:a1:01:34:1f:46:
8c:59:63:e5:1d:2a:55:03:7a:ba:c0:bd:39:8e:9d:
b8:d3:ea:c3:f2:60:7a:7c:4a:2c:ef:76:08:8b:6f:
28:7d:d3:b2:89:cd:1e:c8:3c:e1:05:8f:bc:4f:4d:
21:22:7f:77:2b:b0:59:7f:38:b5:cf:17:a0:7e:61:
35:bc:f3:58:aa:66:ba:84:1f:65:b4:5f:43:2f:ef:
a3:1d:00:1c:66:da:8e:02:9b:62:d3:68:65:41:98:
da:e0:c9:6a:09:51:40:56:9d:d9:58:bd:3a:f8:f8:
87:51:ae:96:c0:19:1f:f5:95:76:4c:4c:a7:e0:6d:
9b:ae:2c:e4:02:d3:68:f2:3a:c6:7e:35:14:f5:11:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D6:15:58:0E:07:B9:8B:76:07:EC:B3:E2:A9:A4:13:58:D1:9C:03
X509v3 Authority Key Identifier:
keyid:B0:DC:AD:E6:7B:75:6C:49:04:1C:82:B6:0D:1A:4B:17:2C:69:7C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/68a241c40ba3d2cb580906f4d00aace10ecd6475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.73.112.0/21
201.217.240.0/22
Signature Algorithm: sha256WithRSAEncryption
27:20:c5:58:88:e7:db:93:6c:80:1a:fd:f1:af:bf:15:e7:33:
28:4a:fb:80:ae:79:ee:a1:6b:ff:87:92:8c:ba:8c:cb:e9:e3:
37:51:49:2d:c1:2a:9c:a5:1f:d3:8a:ed:fb:3c:fa:21:d7:5f:
7b:de:24:f3:1c:06:77:ed:4b:75:2e:f4:5b:8f:03:b2:1b:a3:
62:8a:f5:13:4b:f6:58:76:d9:32:04:39:21:d3:8a:da:5d:b5:
cb:64:e2:17:47:eb:ea:8a:da:a7:c6:1d:39:fd:22:fd:87:96:
13:db:15:10:e6:84:c0:a9:a6:d0:e1:a5:2f:35:7e:2b:65:96:
63:87:90:a9:43:33:dd:eb:dc:d6:37:74:6c:0f:93:92:41:7c:
ac:de:9b:bd:04:f9:8c:24:91:4c:ba:7b:fd:a5:0a:79:d6:ef:
d0:a2:f6:b8:61:72:ca:e8:f1:29:ac:2a:e2:1a:92:e5:c3:9f:
fe:9f:62:b8:c4:aa:76:6d:d1:27:c7:fe:7c:ac:06:c4:c2:e7:
d0:05:b0:47:83:01:48:6a:62:90:18:9d:13:15:b0:dd:d8:cd:
9f:51:0d:f1:78:e4:90:78:97:3b:ed:bd:83:01:10:30:31:1b:
38:79:67:59:87:4b:0a:60:8f:8c:98:e0:f3:8d:d3:f0:1c:17:
ad:da:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org