Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/f89e7307c3c9e9baa1150ebeb2c06be39c107c7a.roa
File: f89e7307c3c9e9baa1150ebeb2c06be39c107c7a.roa (raw, json)
Hash identifier: ylFVZTDV6DuYF5eNuRt8yfJErcnnAky3+b19qrGgmCI=
Subject key identifier: F6:E1:56:49:E6:63:D8:BF:DA:FA:0C:16:00:67:45:64:23:5D:C1:44
Certificate issuer: /CN=cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b
Certificate serial: 0CE5EF
Authority key identifier: B0:DC:AD:E6:7B:75:6C:49:04:1C:82:B6:0D:1A:4B:17:2C:69:7C:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/f89e7307c3c9e9baa1150ebeb2c06be39c107c7a.roa
Signing time: Wed 24 Mar 2021 14:34:10 +0000
ROA not before: Wed 24 Mar 2021 14:34:10 +0000
ROA not after: Tue 24 Mar 2026 14:34:10 +0000
asID: 263237
IP address blocks: 200.73.112.0/21 maxlen: 24
201.217.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845295 (0xce5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b
Validity
Not Before: Mar 24 14:34:10 2021 GMT
Not After : Mar 24 14:34:10 2026 GMT
Subject: CN=f89e7307c3c9e9baa1150ebeb2c06be39c107c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:f1:49:30:14:63:fa:7e:21:e5:57:b3:9b:
5f:bd:4b:36:26:e1:94:6c:ec:6a:1f:a3:a1:75:cb:
46:50:60:db:39:05:b1:aa:5e:09:e8:63:cc:32:04:
a8:71:70:e5:7f:65:23:f8:c0:8e:99:2c:b8:79:65:
6a:85:7a:eb:7a:c4:b2:59:c3:78:bf:df:94:d4:3e:
ce:b0:d2:6d:41:bc:ef:b7:1b:97:82:ab:c2:39:e9:
ad:fc:17:e4:7e:a0:3a:e4:3e:40:55:dd:07:5c:fa:
5c:4e:0a:8f:3b:c1:72:3a:88:4a:43:dd:e5:e9:d2:
e6:1a:10:0f:cb:ee:03:9b:55:55:57:3f:73:de:62:
f4:53:aa:27:c9:c6:ab:7e:05:5b:d2:82:18:74:5a:
83:29:71:c2:4a:7b:df:86:c3:b1:05:34:e8:85:33:
98:e7:84:e5:77:71:39:16:86:09:20:44:64:d9:45:
8c:3d:0a:ca:66:8d:47:9f:94:48:67:23:00:96:dc:
a6:34:07:e2:dc:1b:10:8c:b6:e4:52:04:e7:91:cb:
8b:85:30:fd:d3:28:24:ed:cb:ba:c1:1f:77:4b:0b:
f4:ff:2d:b9:a1:3e:86:a0:f3:1a:40:b9:58:45:d8:
0b:02:21:5f:ed:25:e7:1d:e9:f7:63:f7:e1:ae:bf:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:56:49:E6:63:D8:BF:DA:FA:0C:16:00:67:45:64:23:5D:C1:44
X509v3 Authority Key Identifier:
keyid:B0:DC:AD:E6:7B:75:6C:49:04:1C:82:B6:0D:1A:4B:17:2C:69:7C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/f89e7307c3c9e9baa1150ebeb2c06be39c107c7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.73.112.0/21
201.217.240.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:d8:27:5a:ab:9b:94:73:b5:53:06:20:89:81:ee:2d:fa:d2:
3b:c3:bf:f6:3d:ae:88:7e:64:f8:6a:25:77:4b:9d:3b:74:7d:
18:7b:ae:61:6a:18:d5:c2:00:d7:d5:24:33:bb:f3:09:2d:6e:
d6:09:8b:cc:d6:39:62:da:2d:a0:cd:cd:cd:73:47:99:92:92:
12:5b:1e:1f:c3:f0:6a:69:a1:a2:7a:86:61:b5:fd:99:c9:9e:
ab:b9:e2:91:01:d4:c6:0d:72:a4:d2:8b:04:02:7b:e4:09:31:
11:aa:0e:b9:60:e8:b5:cb:3d:c0:74:8c:43:45:7e:9e:fd:1c:
72:b9:d7:92:e6:6b:ec:6f:ef:f2:4f:5f:a6:75:fe:b9:1a:c3:
08:65:ce:22:97:a7:82:e0:9e:08:5c:14:80:c5:79:45:f5:4e:
0d:59:df:aa:84:d8:31:1a:6c:e9:0a:a3:92:31:20:88:67:9f:
0a:cf:7a:de:56:34:d0:d6:ad:93:c5:2b:5e:28:9c:5f:bf:d8:
bb:41:41:ce:3a:7c:f3:dd:dc:10:57:22:c5:b1:0c:a1:f6:ca:
d6:c5:68:22:e7:28:8b:39:0a:90:64:1d:00:96:47:4b:99:a0:
45:60:3a:d1:3e:02:ce:96:9c:9d:0a:65:cb:12:dd:aa:0a:34:
47:0c:e4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org