Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/fa30e3d8ec409c0c914ebac43567aad1685c4fed.roa
File: fa30e3d8ec409c0c914ebac43567aad1685c4fed.roa (raw, json)
Hash identifier: V7+j3Nv6DFR7LOh7wFw2eyEikET8axIAiuzo8Ells6w=
Subject key identifier: 77:98:5B:9D:33:61:10:DC:FA:E2:15:7D:E3:33:0D:C9:33:7C:1E:53
Certificate issuer: /CN=6930ea902e7534388d28d0e3ac75b7e3026edd6c
Certificate serial: 275902
Authority key identifier: 00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/fa30e3d8ec409c0c914ebac43567aad1685c4fed.roa
Signing time: Thu 15 Feb 2024 15:31:49 +0000
ROA not before: Thu 15 Feb 2024 15:31:49 +0000
ROA not after: Sun 15 Feb 2026 15:31:49 +0000
asID: 6568
IP address blocks: 200.87.0.0/16 maxlen: 24
190.129.0.0/16 maxlen: 24
168.205.96.0/22 maxlen: 22
181.115.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2578690 (0x275902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6930ea902e7534388d28d0e3ac75b7e3026edd6c
Validity
Not Before: Feb 15 15:31:49 2024 GMT
Not After : Feb 15 15:31:49 2026 GMT
Subject: CN=fa30e3d8ec409c0c914ebac43567aad1685c4fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8f:4a:07:1b:ac:ce:4f:49:f2:c4:72:ba:81:
f5:26:ee:5a:85:ae:1e:0c:00:cb:8c:18:9a:86:ec:
f8:be:b8:f6:0a:15:b5:3f:32:80:ad:ce:c6:b8:3f:
00:be:e6:37:2f:49:13:06:84:74:46:24:fa:fa:33:
9e:49:c3:f5:64:9a:65:1a:b8:c4:05:d8:47:02:65:
1d:69:51:79:08:5d:96:4a:14:42:ea:2a:21:f0:56:
66:d9:64:82:d6:31:a1:e2:8c:e2:d1:7d:c9:62:7d:
b8:0d:8f:a8:58:8d:17:7a:7c:36:56:d1:eb:3b:5b:
ad:05:fa:51:74:f7:04:9c:a5:6f:f2:2b:76:51:1b:
b8:f6:9a:fb:1b:c7:7b:b5:b5:0f:98:3b:91:98:86:
c1:8c:a0:bf:c9:74:72:69:a4:68:ca:ea:50:f9:4d:
b6:3d:dc:e8:9c:dc:3c:22:15:32:c4:66:b1:6b:d5:
54:0a:26:8f:8b:7e:c3:8f:b1:c0:e5:ad:94:75:c1:
61:e4:e1:90:92:e6:1d:21:c6:06:43:a7:89:b0:13:
9b:df:9f:9c:1c:ab:3c:02:2a:b0:ef:c5:36:6f:86:
cf:08:5b:33:4f:1f:01:f9:fe:95:b5:54:a5:73:ee:
0c:6c:19:53:16:7c:aa:70:b1:bf:2a:85:8c:cb:6d:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:98:5B:9D:33:61:10:DC:FA:E2:15:7D:E3:33:0D:C9:33:7C:1E:53
X509v3 Authority Key Identifier:
keyid:00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/fa30e3d8ec409c0c914ebac43567aad1685c4fed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/6930ea902e7534388d28d0e3ac75b7e3026edd6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.96.0/22
181.115.128.0/17
190.129.0.0/16
200.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:50:9b:8d:39:e6:6a:44:08:a7:f1:57:9e:cf:b3:23:bc:de:
99:53:68:9b:4b:58:92:e6:bb:24:fc:2f:c8:94:5c:09:45:fd:
69:c6:8d:79:b8:89:74:f9:fa:7a:db:6a:53:12:28:14:db:ee:
44:1d:50:6b:f9:e0:00:29:87:f6:bb:d8:9d:8c:e8:77:6e:bc:
a0:15:6b:e4:2a:a2:46:d0:64:33:2a:71:43:ad:48:46:b7:56:
d4:49:55:6a:7e:41:11:be:1c:a0:28:79:8d:4e:2c:d1:b0:ad:
5b:c9:d1:06:2d:20:f2:64:29:17:b8:c5:a5:ca:ab:80:f8:bd:
a8:42:43:9b:50:ec:b9:27:5d:e8:2e:cc:16:57:cd:c9:2a:78:
60:a9:00:e4:24:9f:a1:d9:fc:c5:fc:4d:0c:c4:95:14:04:2a:
ca:7a:5e:b4:84:40:e9:c9:ba:42:98:98:e8:f2:39:96:a4:76:
4f:a9:b7:8a:cd:2b:ee:86:60:30:87:94:b6:b5:e1:ce:3c:37:
0b:16:d0:58:7f:b8:3f:d2:03:56:d1:96:b7:75:83:33:b5:bd:
42:de:f8:3d:e6:c0:6b:10:9d:21:5f:a4:8e:02:ea:f0:f5:7f:
51:db:1c:8c:d8:e1:50:59:4d:9a:7e:ff:7a:f5:30:15:2c:93:
45:47:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org