Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90417d20-1997-420b-ba86-286d1ef490a9/8f6fc12ebe18e4dc382720e23042c3feded518c4.roa
File: 8f6fc12ebe18e4dc382720e23042c3feded518c4.roa (raw, json)
Hash identifier: 91r4fYCquaFFOH3oKnjHJEJT1WYGiSsNPvIV/2RkoDM=
Subject key identifier: 43:43:13:49:A0:AD:CC:31:3E:02:84:4B:98:04:22:C4:87:05:58:70
Certificate issuer: /CN=9406f9de2cc36563c979a4e153dcfbff00ffd679
Certificate serial: 0C4E28
Authority key identifier: AB:B1:EC:F6:2E:F1:62:1B:37:0A:A9:22:33:D6:41:7B:54:37:74:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9406f9de2cc36563c979a4e153dcfbff00ffd679.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/90417d20-1997-420b-ba86-286d1ef490a9/8f6fc12ebe18e4dc382720e23042c3feded518c4.roa
Signing time: Wed 24 Mar 2021 14:28:35 +0000
ROA not before: Wed 24 Mar 2021 14:28:35 +0000
ROA not after: Tue 24 Mar 2026 14:28:35 +0000
asID: 27694
IP address blocks: 143.0.32.0/22 maxlen: 22
200.71.248.0/21 maxlen: 21
200.107.84.0/22 maxlen: 22
2803:f640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806440 (0xc4e28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9406f9de2cc36563c979a4e153dcfbff00ffd679
Validity
Not Before: Mar 24 14:28:35 2021 GMT
Not After : Mar 24 14:28:35 2026 GMT
Subject: CN=8f6fc12ebe18e4dc382720e23042c3feded518c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:b5:e6:f5:56:1b:8f:a3:62:b9:b8:5d:82:
db:20:75:92:23:2e:8a:2d:fe:49:cd:6b:2d:91:ed:
6b:a7:3a:f3:20:5c:66:b9:4f:c0:62:1c:23:66:c2:
d1:2c:05:23:40:ed:20:80:62:b8:21:54:bb:5d:06:
aa:c6:64:21:46:6c:15:0b:50:6d:f9:e6:fb:f2:d6:
1e:dd:67:e7:ea:49:30:24:07:08:41:b2:64:a4:8d:
0e:1b:46:f3:d3:3a:d9:ed:e4:64:32:32:1a:ad:90:
67:8e:61:d0:32:d2:cd:1a:2f:ed:23:89:cd:8c:07:
be:2c:f0:9d:09:a2:f6:37:e6:e2:85:f2:96:08:b2:
bb:fe:8d:fa:16:fd:50:4f:df:f0:b3:ee:56:49:c5:
84:0b:44:9e:c8:33:e5:b4:56:21:01:1e:48:61:8b:
c3:0a:fe:06:df:19:cd:2b:06:6f:b5:8b:04:3e:5f:
0c:a4:cb:55:fb:b0:0e:0d:5c:8f:b7:db:a9:8f:2c:
bf:98:96:90:aa:b5:6c:79:c0:cb:44:5c:cf:d4:5f:
2d:ca:4d:32:b2:28:74:97:e5:83:8d:7b:12:f1:fb:
09:fe:28:34:93:7a:86:40:b7:1b:d4:87:ca:90:d2:
bf:64:3b:c0:f2:55:28:32:21:88:6a:ed:38:61:6b:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:43:13:49:A0:AD:CC:31:3E:02:84:4B:98:04:22:C4:87:05:58:70
X509v3 Authority Key Identifier:
keyid:AB:B1:EC:F6:2E:F1:62:1B:37:0A:A9:22:33:D6:41:7B:54:37:74:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9406f9de2cc36563c979a4e153dcfbff00ffd679.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90417d20-1997-420b-ba86-286d1ef490a9/8f6fc12ebe18e4dc382720e23042c3feded518c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/90417d20-1997-420b-ba86-286d1ef490a9/9406f9de2cc36563c979a4e153dcfbff00ffd679.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.32.0/22
200.71.248.0/21
200.107.84.0/22
IPv6:
2803:f640::/32
Signature Algorithm: sha256WithRSAEncryption
67:60:df:63:b3:fa:42:cc:b2:7a:f2:78:f4:9e:13:7b:79:52:
b0:04:eb:c0:6d:f1:2e:7b:78:6a:e2:35:b5:cb:7a:5f:07:22:
67:bc:57:6f:f9:9f:92:64:8e:54:99:0e:e4:1e:f7:49:2f:7b:
ee:bd:2a:64:6b:30:8d:5b:e5:1a:f8:08:1d:80:db:69:e5:58:
a4:20:d8:da:ed:d8:99:f3:eb:ac:8a:7a:23:2c:47:0b:1e:d1:
4d:ee:cc:0f:69:25:9b:fd:e9:64:ac:a4:33:93:00:b1:9f:90:
43:0c:78:6d:9a:a4:3b:e2:66:e3:0b:a5:bd:e6:70:97:be:13:
f1:26:17:41:59:bb:f9:a0:8f:17:8e:b1:e1:a4:28:1b:05:b0:
0a:59:a4:b8:54:c3:3a:67:80:c5:46:bb:a1:c6:f9:07:7c:06:
f0:2b:18:f6:43:a1:4b:6b:59:69:93:e7:81:68:af:47:b9:de:
c4:59:70:0a:f7:7f:23:bb:5c:f9:f5:a2:ff:2d:a9:ea:1a:2a:
10:d3:3f:76:ea:60:dd:db:91:03:53:ef:2a:c5:33:5b:15:9b:
46:a0:1b:ca:12:00:96:b7:4c:60:bf:fc:8d:4c:f6:5f:80:31:
dd:c7:38:61:41:25:d7:b5:7c:74:30:bc:61:92:f1:d9:d8:f1:
38:f0:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org