Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7a1580c543ec66f4c95f9e201fb980832450ec65.roa
File: 7a1580c543ec66f4c95f9e201fb980832450ec65.roa (raw, json)
Hash identifier: uMW8KVv2YG3VrEaUCTbNTUOXlBy4L2rkSPIYOVIf3KI=
Subject key identifier: 2F:B2:25:F0:BE:BF:02:47:ED:2C:7F:28:39:DC:37:23:49:99:D0:1D
Certificate issuer: /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial: 21D6CC
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7a1580c543ec66f4c95f9e201fb980832450ec65.roa
Signing time: Fri 09 Jun 2023 18:34:28 +0000
ROA not before: Thu 08 Jun 2023 18:34:27 +0000
ROA not after: Mon 09 Jun 2025 18:34:27 +0000
asID: 19429
IP address blocks: 200.11.40.0/21 maxlen: 24
200.119.0.0/17 maxlen: 24
201.244.0.0/15 maxlen: 24
186.28.0.0/14 maxlen: 24
200.69.96.0/19 maxlen: 24
186.154.0.0/15 maxlen: 24
190.93.128.0/19 maxlen: 24
200.93.128.0/18 maxlen: 24
190.24.0.0/14 maxlen: 24
200.75.32.0/19 maxlen: 24
2800:260::/28 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2217676 (0x21d6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Validity
Not Before: Jun 8 18:34:27 2023 GMT
Not After : Jun 9 18:34:27 2025 GMT
Subject: CN=7a1580c543ec66f4c95f9e201fb980832450ec65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:72:0f:2a:1a:3b:3a:d8:e7:4c:2a:e2:80:83:
ee:dc:f8:0f:2e:af:c1:0d:1f:2e:25:5d:e7:f2:e1:
1a:eb:49:ad:65:df:be:57:aa:c1:be:2f:da:4d:13:
70:76:db:c2:3f:73:0b:23:d5:49:4e:c9:1b:ed:30:
2c:b3:f0:1f:67:4e:a5:92:10:cf:04:55:b6:9f:79:
19:ea:71:b6:99:3a:23:0b:f2:37:87:c3:40:2f:bf:
75:09:ac:6c:10:d0:05:e2:ad:8c:35:f4:71:d4:26:
28:5e:ef:77:3a:86:2a:f2:0b:13:be:a8:60:9f:14:
58:02:49:8f:1a:2a:96:59:2c:80:59:92:16:3a:af:
43:53:f2:99:b9:b6:21:89:d1:c0:68:ca:0b:69:76:
0e:a8:92:ac:85:ca:91:4a:08:04:b0:98:37:db:a6:
e0:d2:9a:08:65:06:d1:f8:97:43:d9:5d:67:03:34:
b3:20:0d:d5:7d:a1:88:72:4d:4f:57:fa:59:a2:03:
a2:b6:87:97:05:67:3c:69:5e:9f:bc:f4:8a:a2:4d:
bd:86:d1:12:61:c8:8a:45:51:6f:17:dd:41:e4:85:
77:31:e0:98:37:90:3f:b7:4c:1a:21:da:ea:c9:2b:
0d:e3:cd:cb:03:b3:e9:82:e6:d9:b8:1e:e2:64:b4:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B2:25:F0:BE:BF:02:47:ED:2C:7F:28:39:DC:37:23:49:99:D0:1D
X509v3 Authority Key Identifier:
keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7a1580c543ec66f4c95f9e201fb980832450ec65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.28.0.0/14
186.154.0.0/15
190.24.0.0/14
190.93.128.0/19
200.11.40.0/21
200.69.96.0/19
200.75.32.0/19
200.93.128.0/18
200.119.0.0/17
201.244.0.0/15
IPv6:
2800:260::/28
Signature Algorithm: sha256WithRSAEncryption
36:8f:24:c8:6c:5e:97:34:9d:8c:47:08:20:20:a7:0c:d5:38:
60:13:fc:58:84:cb:9a:d1:78:81:0b:67:0f:53:8b:e0:5f:20:
30:95:57:45:34:4d:58:4e:47:a7:c6:44:73:28:6f:5c:7e:53:
77:e2:74:0a:ab:b9:2d:42:1c:e4:e8:43:95:36:44:79:b3:19:
e9:47:64:50:14:b0:09:60:6f:2b:2a:65:3e:4b:37:ac:06:68:
4d:d9:53:0a:e3:bb:6d:f9:23:52:0d:ea:67:62:7f:ef:e2:b5:
fe:cb:90:23:55:d9:94:c1:e7:db:b3:7a:8f:2a:f2:64:40:b2:
41:af:39:3d:8e:39:1e:59:95:fa:74:81:2c:8d:c7:d6:5b:00:
16:31:8f:cb:0f:50:bf:37:d5:7c:04:81:74:58:c7:e9:14:fe:
2f:cf:d9:d8:dd:1f:8b:2c:19:09:96:a5:29:4f:8f:4a:1a:5c:
50:a5:e5:03:a2:07:f4:75:92:c4:17:ed:2d:ab:86:7d:8e:d9:
95:67:bc:a5:e9:27:c1:2c:fb:a7:68:64:18:6a:1d:a4:af:b5:
7c:32:a8:46:00:72:5e:8e:4a:91:9a:79:e3:65:76:9f:a6:28:
47:53:22:38:19:13:6d:fa:03:9c:33:75:9f:c7:6c:70:9a:b2:
d1:a7:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org