Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7bb74e8ae2cda5437cf8f51d4b8546c995029a8c.roa
File: 7bb74e8ae2cda5437cf8f51d4b8546c995029a8c.roa (raw, json)
Hash identifier: k9RkqLrNq48Q+nLj0HLj7bLqIqE3Zl/5S0sKd2A0Yj0=
Subject key identifier: 78:93:0C:FF:07:2E:B8:DA:E3:51:E8:02:49:34:B2:38:00:B6:0F:3F
Certificate issuer: /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial: 21B2FB
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7bb74e8ae2cda5437cf8f51d4b8546c995029a8c.roa
Signing time: Tue 04 Jul 2023 08:30:02 +0000
ROA not before: Mon 03 Jul 2023 08:30:02 +0000
ROA not after: Wed 02 Jul 2025 08:30:02 +0000
asID: 6429
IP address blocks: 190.54.0.0/17 maxlen: 24
190.54.177.0/24 maxlen: 24
190.54.178.0/24 maxlen: 24
190.208.0.0/18 maxlen: 24
200.9.151.0/24 maxlen: 24
200.29.143.0/24 maxlen: 24
200.29.151.0/24 maxlen: 24
200.31.32.0/19 maxlen: 24
200.32.160.0/19 maxlen: 19
2800:3b0:1001::/48 maxlen: 48
2800:3b0:10ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208507 (0x21b2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Validity
Not Before: Jul 3 08:30:02 2023 GMT
Not After : Jul 2 08:30:02 2025 GMT
Subject: CN=7bb74e8ae2cda5437cf8f51d4b8546c995029a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:a1:67:a9:44:22:e8:1a:d3:e6:b9:e7:e8:
fb:1c:03:81:6a:2b:e3:43:82:67:e4:32:d0:c3:cc:
65:eb:98:39:b6:32:5e:6e:0e:a3:84:2c:f0:ec:51:
6d:4e:59:da:69:44:a5:6c:00:87:15:eb:9c:e4:fc:
e1:ab:5c:b5:32:ed:45:18:bf:e0:c1:8f:f5:10:61:
9c:46:b8:d9:b6:d9:39:f3:8e:7f:4a:c7:01:5d:6e:
61:5f:7f:2d:b3:e8:b3:cd:d9:f1:c9:03:35:e5:44:
7e:0e:fd:e6:9a:e5:2a:09:d1:1f:00:ff:9c:b8:b0:
e0:36:ba:c5:72:e1:5a:4c:03:05:20:46:dd:a2:41:
cc:89:e2:68:a8:fc:11:15:0f:d5:88:31:ff:9f:88:
d0:8b:16:13:92:20:b0:de:09:ce:f4:8e:fe:11:d4:
fc:e6:d3:db:4d:3d:dc:5e:76:85:ae:a3:53:c7:5d:
0e:e9:19:53:1c:ef:f7:22:cc:f8:d9:14:f9:96:8e:
43:57:4e:d9:f6:bc:e8:2f:15:68:3c:40:22:0a:16:
82:1d:d1:66:ad:64:45:c4:b7:8b:a3:33:63:3a:e9:
5a:47:3d:d3:26:ba:6b:af:af:f7:f4:ee:1d:a5:d7:
e4:eb:e1:4e:f2:28:64:11:c8:a0:e6:22:d2:4a:da:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:93:0C:FF:07:2E:B8:DA:E3:51:E8:02:49:34:B2:38:00:B6:0F:3F
X509v3 Authority Key Identifier:
keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7bb74e8ae2cda5437cf8f51d4b8546c995029a8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.54.0.0/17
190.54.177.0-190.54.178.255
190.208.0.0/18
200.9.151.0/24
200.29.143.0/24
200.29.151.0/24
200.31.32.0/19
200.32.160.0/19
IPv6:
2800:3b0:1001::/48
2800:3b0:10ff::/48
Signature Algorithm: sha256WithRSAEncryption
ab:5d:c5:d7:c3:a2:39:43:92:ad:d0:d1:83:47:a2:b5:7c:0d:
20:30:ae:64:ae:1c:4b:92:aa:86:f4:d5:54:0e:ed:bc:a1:80:
c7:47:d9:7e:42:a1:c9:f0:7d:1b:6b:c2:09:2b:a5:92:8f:3b:
f4:c7:c5:a9:82:f8:89:34:89:65:8a:28:03:a4:c3:51:e4:1e:
1f:ea:a6:c4:9c:a8:81:69:31:56:63:a0:15:62:71:b9:c7:58:
49:d3:35:b8:bf:e3:b1:97:ee:e9:83:55:49:d3:76:fe:4d:6d:
3c:82:b4:4c:0e:ce:77:2a:be:20:b7:08:ee:a9:18:3b:bb:53:
44:97:5c:96:f2:29:38:e6:ce:ff:50:9f:22:73:73:b1:60:84:
f2:38:42:c6:7e:e5:59:a0:10:6b:70:95:8c:00:8a:7b:96:43:
45:20:bf:a1:7e:ec:49:ca:eb:b1:47:66:b0:49:c1:85:6c:16:
d3:ab:fa:75:d0:87:8a:b1:df:8e:6d:e9:f5:41:68:db:0f:92:
90:61:c3:2d:b4:2c:33:0f:a9:1c:c2:e8:87:34:94:4b:70:89:
71:80:15:b9:2e:2c:e4:c0:a3:19:db:cd:b8:17:0b:63:b6:06:
7f:e1:2f:c5:4c:06:62:91:dc:46:96:f8:0a:06:19:c4:ba:c3:
2b:ca:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org