Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96e2334f-bcf8-44eb-a7cb-907d2f4a3087/5825411b2128c5ecd8902071fd0e4e7c42287336.roa
File: 5825411b2128c5ecd8902071fd0e4e7c42287336.roa (raw, json)
Hash identifier: bAzuLwyD67fVHXKVMUgVaOwghPrs5yxF7GHPGgxkuiM=
Subject key identifier: 45:96:43:98:2B:4C:5C:FE:16:23:38:6B:AD:6A:6D:3F:24:97:7B:E0
Certificate issuer: /CN=ecc11edee32c9394c905ec3bca5e788e0606fe35
Certificate serial: 0D4222
Authority key identifier: C2:7C:EC:53:F1:E2:19:DE:89:6F:05:D3:3F:0F:33:CB:6E:39:55:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc11edee32c9394c905ec3bca5e788e0606fe35.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/96e2334f-bcf8-44eb-a7cb-907d2f4a3087/5825411b2128c5ecd8902071fd0e4e7c42287336.roa
Signing time: Wed 24 Mar 2021 14:37:33 +0000
ROA not before: Wed 24 Mar 2021 14:37:33 +0000
ROA not after: Tue 24 Mar 2026 14:37:33 +0000
asID: 262149
IP address blocks: 200.59.16.0/23 maxlen: 24
200.59.18.0/23 maxlen: 24
200.59.20.0/23 maxlen: 24
200.59.22.0/23 maxlen: 24
170.83.8.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 868898 (0xd4222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc11edee32c9394c905ec3bca5e788e0606fe35
Validity
Not Before: Mar 24 14:37:33 2021 GMT
Not After : Mar 24 14:37:33 2026 GMT
Subject: CN=5825411b2128c5ecd8902071fd0e4e7c42287336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:b2:0b:a7:d6:e6:67:77:28:a6:34:e6:63:
e1:6e:94:0e:8c:d3:37:d1:1a:c1:ae:9b:2f:e0:e9:
f6:81:57:ef:39:14:e1:6e:77:fd:b9:42:8a:86:69:
4d:ef:7f:ae:18:fd:54:7c:d3:15:68:d4:c9:0c:05:
9a:9c:cc:60:f9:55:2d:18:6d:44:6a:f3:a2:42:87:
2f:39:15:62:e9:7e:69:ec:a3:56:d5:80:30:58:44:
1a:18:f3:db:39:82:cf:46:da:3b:13:20:16:50:fb:
e8:b3:26:92:5b:f7:29:6c:b1:c1:3e:d4:00:0f:73:
84:a0:9e:ca:6f:cc:20:74:1d:58:94:1d:ed:2d:9f:
90:bf:0d:7f:13:81:06:55:f9:41:61:a0:52:22:b8:
e7:2f:c4:de:19:75:6f:27:4c:69:a6:d6:c7:41:33:
82:0f:53:c7:6f:fe:53:96:73:c6:2a:0d:f0:f4:36:
da:59:9d:23:03:21:d2:84:ab:09:c1:1d:6e:1c:40:
18:e7:69:62:eb:c8:d5:8a:57:f8:ae:c9:4d:f2:76:
19:7a:f6:04:6e:aa:45:77:37:29:fe:3b:08:1e:fe:
eb:64:4e:2b:9e:73:b4:04:60:f0:2f:49:42:0f:ff:
4b:dd:76:26:7e:08:1e:7d:3e:52:f1:ce:0e:d4:0c:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:96:43:98:2B:4C:5C:FE:16:23:38:6B:AD:6A:6D:3F:24:97:7B:E0
X509v3 Authority Key Identifier:
keyid:C2:7C:EC:53:F1:E2:19:DE:89:6F:05:D3:3F:0F:33:CB:6E:39:55:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc11edee32c9394c905ec3bca5e788e0606fe35.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96e2334f-bcf8-44eb-a7cb-907d2f4a3087/5825411b2128c5ecd8902071fd0e4e7c42287336.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/96e2334f-bcf8-44eb-a7cb-907d2f4a3087/ecc11edee32c9394c905ec3bca5e788e0606fe35.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.8.0/23
200.59.16.0/21
Signature Algorithm: sha256WithRSAEncryption
58:51:d2:f9:fa:80:ea:4f:61:55:63:70:f7:9c:2c:76:47:8e:
e4:0d:d8:9c:aa:e9:59:c3:ce:c2:49:72:e4:68:1e:c4:b8:64:
59:96:25:76:ec:63:9b:aa:6b:34:d6:bd:51:ad:43:e7:f1:bd:
81:69:28:29:e0:23:b4:d9:04:ec:c7:50:cc:4d:71:77:75:68:
f1:8d:96:c6:4f:62:0b:a1:6e:76:6a:fd:41:c8:77:62:20:ef:
65:5c:55:1e:14:21:df:a9:bb:44:21:55:67:60:52:b1:b8:1a:
51:13:61:35:da:98:ed:af:6d:59:c9:af:0a:fa:49:86:cb:bd:
58:e3:c8:5a:4f:30:df:d7:3f:ef:1f:a6:89:0d:fa:60:44:80:
d9:f5:81:d2:02:ec:29:0a:f1:e2:95:3e:c0:cd:bb:ad:89:09:
d1:52:43:bb:7e:0d:f3:ed:f6:bf:3e:e1:17:f1:3e:48:22:42:
e7:c2:db:8e:90:54:c1:35:bd:04:e7:18:36:93:85:00:a0:0a:
88:89:33:da:25:76:76:37:11:ff:52:ec:80:29:de:0d:5e:a2:
99:0a:1d:c4:e2:45:8c:e1:3a:d8:00:6b:e1:a0:0d:0c:9e:b4:
6a:eb:b9:63:81:9a:52:a2:9e:6d:06:1f:05:68:ef:27:c5:99:
2d:6e:e0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org