Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/cfe0e3c1ef3ff9180207aa7bddd6f1ab46e4d41a.roa
File: cfe0e3c1ef3ff9180207aa7bddd6f1ab46e4d41a.roa (raw, json)
Hash identifier: oY1TGqOw/brhw/9bF/er24dtzB9L+MOvAL+80MFNbSM=
Subject key identifier: 99:57:11:FC:03:3C:2C:97:9F:8A:8A:99:C6:55:56:B6:9A:10:37:10
Certificate issuer: /CN=580830aa46930a9ed0126869d25c20fe0e806ec5
Certificate serial: 0D8F64
Authority key identifier: CD:14:06:D7:74:A5:5E:B9:84:66:FE:FD:56:67:32:EE:B8:52:C8:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580830aa46930a9ed0126869d25c20fe0e806ec5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/cfe0e3c1ef3ff9180207aa7bddd6f1ab46e4d41a.roa
Signing time: Wed 24 Mar 2021 14:33:17 +0000
ROA not before: Wed 24 Mar 2021 14:33:17 +0000
ROA not after: Tue 24 Mar 2026 14:33:17 +0000
asID: 13381
IP address blocks: 200.112.232.0/24 maxlen: 24
200.112.233.0/24 maxlen: 24
200.112.234.0/24 maxlen: 24
200.112.235.0/24 maxlen: 24
200.112.236.0/24 maxlen: 24
200.112.237.0/24 maxlen: 24
200.112.238.0/24 maxlen: 24
200.112.239.0/24 maxlen: 24
200.112.224.0/24 maxlen: 24
200.112.225.0/24 maxlen: 24
200.112.226.0/24 maxlen: 24
200.112.227.0/24 maxlen: 24
200.112.228.0/24 maxlen: 24
200.112.229.0/24 maxlen: 24
200.112.230.0/24 maxlen: 24
200.112.231.0/24 maxlen: 24
200.112.248.0/24 maxlen: 24
200.112.249.0/24 maxlen: 24
200.112.250.0/24 maxlen: 24
200.112.251.0/24 maxlen: 24
200.112.252.0/24 maxlen: 24
200.112.253.0/24 maxlen: 24
200.112.254.0/24 maxlen: 24
200.112.255.0/24 maxlen: 24
200.112.240.0/24 maxlen: 24
200.112.241.0/24 maxlen: 24
200.112.242.0/23 maxlen: 24
200.112.244.0/24 maxlen: 24
200.112.245.0/24 maxlen: 24
200.112.246.0/24 maxlen: 24
200.112.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888676 (0xd8f64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580830aa46930a9ed0126869d25c20fe0e806ec5
Validity
Not Before: Mar 24 14:33:17 2021 GMT
Not After : Mar 24 14:33:17 2026 GMT
Subject: CN=cfe0e3c1ef3ff9180207aa7bddd6f1ab46e4d41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:69:25:77:f7:0b:c9:ac:ba:ef:2a:66:f7:
af:13:7c:cb:7a:f3:f6:e7:6e:b4:3f:c0:ab:1a:61:
2c:6e:25:b9:72:e6:b9:33:08:d7:1f:42:2d:97:74:
08:9c:e8:03:dc:5d:28:0c:e3:1e:f2:b3:01:38:7f:
c5:54:85:06:86:b9:af:96:d8:8f:3d:f5:ef:9f:91:
5c:40:8a:e8:89:4f:0a:2e:80:99:0a:89:cd:17:2f:
df:8b:23:e9:58:fe:86:7a:c3:60:ab:80:da:16:db:
8e:01:6d:11:35:94:cc:55:f1:d0:3e:4e:98:c3:1d:
8c:25:1c:a3:96:4d:d2:c1:47:15:3f:10:4f:70:e0:
16:d4:16:27:71:20:5f:a7:b5:ec:ee:14:d7:01:ec:
99:13:26:ec:4b:c3:ab:a2:16:b7:ef:a2:71:e7:b8:
83:ef:ba:23:6d:21:fb:e5:0f:b2:25:82:6e:35:a4:
95:2f:19:11:b0:d7:98:db:bd:80:5e:1c:1a:83:2d:
b8:eb:38:79:70:8f:f1:40:af:ac:2d:6a:44:bc:61:
16:2a:d1:2e:8c:57:e2:65:cc:4d:b9:76:4a:a3:f5:
fc:10:4f:00:d0:bc:8f:41:21:5f:6f:07:22:09:fb:
af:0e:84:dc:e1:63:75:d9:3b:87:62:b4:2c:e0:9f:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:57:11:FC:03:3C:2C:97:9F:8A:8A:99:C6:55:56:B6:9A:10:37:10
X509v3 Authority Key Identifier:
keyid:CD:14:06:D7:74:A5:5E:B9:84:66:FE:FD:56:67:32:EE:B8:52:C8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580830aa46930a9ed0126869d25c20fe0e806ec5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/cfe0e3c1ef3ff9180207aa7bddd6f1ab46e4d41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/580830aa46930a9ed0126869d25c20fe0e806ec5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.224.0/19
Signature Algorithm: sha256WithRSAEncryption
80:d6:c8:29:a7:05:d8:50:65:fd:4b:97:ea:72:33:00:4a:4f:
85:d8:08:33:ff:1f:7b:7e:b1:07:c6:c3:e5:60:fc:30:6e:ac:
72:6a:a4:d5:c8:de:f4:fd:84:a6:b2:9f:9b:25:02:82:e1:7e:
b9:00:3e:f9:f6:13:0d:1a:29:db:bd:ec:c0:c6:94:01:a1:29:
35:17:04:85:be:46:52:0a:07:59:dc:21:f5:bf:33:d7:ef:4d:
c5:1b:b9:a0:32:dc:c0:c1:98:d5:c9:e3:68:f3:c3:b6:c7:a1:
db:3d:e4:70:f7:49:91:e8:1c:a7:8f:d7:92:bc:f3:0b:80:8d:
98:8d:29:4b:ce:23:fe:80:64:4f:e1:c0:00:13:74:b8:e6:45:
d5:4a:4e:91:1b:db:03:94:ea:c3:ef:8d:70:fe:e7:9e:0e:be:
40:6b:8b:bb:47:2c:00:4c:4e:b8:4c:97:7e:42:b1:28:d9:c1:
0e:42:77:d0:13:ec:63:21:51:e8:65:73:5c:4f:df:61:14:05:
89:0d:fd:2e:95:74:5f:a8:ac:f9:d1:42:8b:ec:f3:9d:cb:55:
28:2a:55:59:e5:6b:36:63:4b:e6:f0:62:e8:3e:79:df:8d:71:
b6:68:e8:ff:06:d6:3b:3a:00:01:f8:75:b2:da:8e:3f:43:33:
99:c2:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org