Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/04f18bbfce7cdbc7fc8c5cd092676079e2de9506.roa
File: 04f18bbfce7cdbc7fc8c5cd092676079e2de9506.roa (raw, json)
Hash identifier: Q1fVCHUaX4AvJkCfuIE3sadCwbjzcgpNUAvB6WG+OfA=
Subject key identifier: DA:B1:5E:6A:6E:8D:C8:BD:FF:40:8C:19:29:8D:C6:60:24:36:E6:0F
Certificate issuer: /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial: 0D4497
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/04f18bbfce7cdbc7fc8c5cd092676079e2de9506.roa
Signing time: Wed 24 Mar 2021 14:34:08 +0000
ROA not before: Wed 24 Mar 2021 14:34:07 +0000
ROA not after: Tue 24 Mar 2026 14:34:07 +0000
asID: 27901
IP address blocks: 179.60.64.0/19 maxlen: 19
190.5.32.0/19 maxlen: 19
190.102.224.0/20 maxlen: 20
190.102.240.0/20 maxlen: 20
190.110.160.0/20 maxlen: 20
190.114.32.0/19 maxlen: 19
200.73.120.0/21 maxlen: 21
2803:c600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869527 (0xd4497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Validity
Not Before: Mar 24 14:34:07 2021 GMT
Not After : Mar 24 14:34:07 2026 GMT
Subject: CN=04f18bbfce7cdbc7fc8c5cd092676079e2de9506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:7f:d4:24:35:0f:1c:4d:08:d0:41:20:87:
a5:e1:ff:0a:9b:85:a2:c1:eb:09:a8:79:d8:96:a2:
03:75:5d:af:89:c5:1f:f5:4c:c0:4a:9c:3f:6c:a3:
87:9d:fe:a0:b2:b0:fd:b5:44:48:f4:cc:5b:40:e5:
38:4a:42:09:85:86:21:2c:24:27:d1:7f:b1:27:1d:
92:0e:72:79:fd:e4:09:84:39:1e:7b:f4:88:02:75:
54:8b:0c:d6:8c:99:5b:0a:93:ec:3f:72:03:d6:a4:
bb:a9:84:28:e4:f3:2f:ff:e2:84:46:a6:32:40:93:
75:a7:09:8e:e6:bf:a1:53:0b:ac:e3:91:d3:c4:67:
fe:f0:c6:36:b2:fa:c4:4c:5e:05:66:92:44:23:4f:
5c:4c:4d:70:5d:c9:da:51:44:a3:14:4c:11:3c:68:
78:6e:3c:e6:ab:58:f0:af:60:01:fa:45:50:5e:99:
a3:6d:1c:62:68:c3:ca:b0:06:66:46:9f:de:9f:06:
2e:65:8a:ac:f6:a7:6e:24:aa:cc:dd:67:8f:ae:a8:
45:e8:c9:19:eb:0b:97:0b:5b:5f:5c:92:30:b7:df:
10:9c:8d:46:21:79:13:d9:f7:ac:d9:47:c6:7c:5d:
cb:09:1c:07:aa:37:fc:6f:96:a3:fd:3a:c8:83:1f:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B1:5E:6A:6E:8D:C8:BD:FF:40:8C:19:29:8D:C6:60:24:36:E6:0F
X509v3 Authority Key Identifier:
keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/04f18bbfce7cdbc7fc8c5cd092676079e2de9506.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.64.0/19
190.5.32.0/19
190.102.224.0/19
190.110.160.0/20
190.114.32.0/19
200.73.120.0/21
IPv6:
2803:c600::/32
Signature Algorithm: sha256WithRSAEncryption
27:c5:c7:5b:d9:be:8e:09:96:f9:f1:8c:7e:a4:0c:77:ad:5d:
8c:bc:f8:db:19:ba:f7:44:66:09:04:40:8e:b8:95:10:35:dd:
d5:68:04:c5:48:2c:45:9f:96:3c:31:89:15:d3:64:b6:49:b6:
20:0b:14:4e:05:25:93:77:de:39:83:b3:20:94:15:8e:93:61:
1c:d2:88:ed:de:d2:28:14:73:82:d3:96:e2:5d:60:2f:a8:68:
4a:3e:b0:b8:6c:fe:1a:6b:23:f8:ee:26:fd:e7:ab:65:4e:b5:
9f:a0:9b:07:e7:ce:db:83:54:f3:1c:37:29:a8:a0:64:da:ea:
45:37:f3:52:ae:ff:25:77:e1:b2:06:ad:4b:f1:4b:bb:76:3f:
1d:5d:15:d1:70:09:f0:d3:63:21:a5:e7:3d:ae:07:a7:ef:e9:
48:ea:73:bb:84:ea:26:b3:5a:76:e8:d1:a8:7a:ed:4e:dc:e0:
fc:c7:34:98:db:29:b4:85:47:e9:7c:b8:19:97:7d:d6:3f:e4:
ac:5b:3e:45:26:b9:04:7a:49:92:de:59:f4:fe:4a:16:85:2c:
48:93:a1:21:20:65:c8:28:f7:fd:1f:70:f6:50:b9:83:00:9f:
00:85:d1:5a:da:1f:08:46:34:29:a0:84:a9:11:e8:a7:9a:21:
78:94:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org