Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/4d7e69a5d05d8f32e91d18646169a25c903367fc.roa
File: 4d7e69a5d05d8f32e91d18646169a25c903367fc.roa (raw, json)
Hash identifier: 5dwbxQHYgFzDBUC6foQlNaNjmhlHvXUsUM5YdQhZz00=
Subject key identifier: B6:70:EB:CA:E3:F1:19:5A:4A:6F:F1:0E:89:EA:90:A8:9A:A9:87:A8
Certificate issuer: /CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
Certificate serial: 297A98
Authority key identifier: 87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/4d7e69a5d05d8f32e91d18646169a25c903367fc.roa
Signing time: Tue 26 Mar 2024 19:27:52 +0000
ROA not before: Tue 26 Mar 2024 19:27:49 +0000
ROA not after: Thu 26 Mar 2026 19:27:49 +0000
asID: 12684
IP address blocks: 201.220.38.0/24 maxlen: 24
201.220.44.0/24 maxlen: 24
201.220.51.0/24 maxlen: 24
201.220.52.0/24 maxlen: 24
200.85.227.0/24 maxlen: 24
200.85.238.0/24 maxlen: 24
200.85.240.0/24 maxlen: 24
200.85.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2718360 (0x297a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
Validity
Not Before: Mar 26 19:27:49 2024 GMT
Not After : Mar 26 19:27:49 2026 GMT
Subject: CN=4d7e69a5d05d8f32e91d18646169a25c903367fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:c2:2c:90:23:96:62:34:66:02:17:48:d4:
3b:93:93:5d:66:35:c9:1f:66:7e:66:19:c4:2c:b7:
ed:af:d8:e6:c9:40:ba:42:94:8a:16:1c:ec:a8:fc:
9d:0b:c2:c8:b5:60:d2:ea:87:56:54:59:59:c0:2c:
64:77:23:a4:c8:7d:4b:85:55:31:54:c5:ba:51:a2:
bd:82:2b:b0:b4:8b:83:d6:65:66:77:e1:9a:a9:bb:
fa:2a:4e:a3:af:80:f1:4d:36:54:bc:7a:4b:24:2e:
07:99:5a:19:93:11:60:51:03:60:e6:1f:68:fa:82:
23:dd:5b:de:57:1b:c6:c3:b2:57:1d:07:3b:a3:ff:
17:cd:83:a1:31:a0:b5:f3:7f:ae:c7:ed:56:88:3c:
08:cd:a1:80:5e:08:4c:c5:87:95:3a:f8:cd:a0:a9:
f3:8f:9e:5c:09:6d:12:69:e0:74:d1:af:13:8f:92:
85:22:a7:9d:82:a2:55:ba:e4:d9:06:c8:07:77:65:
84:fc:19:45:10:74:28:a0:a2:2b:f6:54:45:58:1a:
a0:7e:0a:11:13:b1:9d:96:3f:40:cd:a4:35:15:77:
f4:7b:20:5c:d7:49:be:77:e0:fe:4d:23:15:38:5f:
16:d9:0d:97:c7:91:c2:e2:92:c7:bd:0b:32:1a:c8:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:EB:CA:E3:F1:19:5A:4A:6F:F1:0E:89:EA:90:A8:9A:A9:87:A8
X509v3 Authority Key Identifier:
keyid:87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/4d7e69a5d05d8f32e91d18646169a25c903367fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.227.0/24
200.85.238.0/24
200.85.240.0/24
200.85.247.0/24
201.220.38.0/24
201.220.44.0/24
201.220.51.0-201.220.52.255
Signature Algorithm: sha256WithRSAEncryption
42:ac:f3:a1:d9:a2:bb:4e:ba:e4:ae:5e:bb:1b:6d:bf:35:35:
f1:84:7b:78:a7:8c:15:ea:56:9c:23:34:8d:f8:22:23:70:49:
fc:d0:bf:53:6a:55:c2:1d:c7:06:de:9c:c2:e9:12:79:16:17:
d9:15:66:79:71:12:da:a3:8a:e0:9f:af:13:d8:62:e6:40:f8:
8f:4a:c7:d6:89:d9:53:b5:e4:38:90:22:11:3c:d4:ec:1d:6c:
24:d3:40:ee:50:8e:c8:50:f9:11:98:1e:3b:20:5a:32:fd:c3:
f9:6a:1b:e2:a4:6c:a2:93:02:4c:6d:a5:2a:67:ce:ea:17:1d:
be:f0:6e:b2:12:d8:fb:a0:07:14:68:ef:53:b8:08:2a:17:e0:
79:62:f5:32:45:df:bc:35:bc:05:d0:a8:b0:e9:9d:19:b4:fb:
5c:e6:93:e7:b5:7d:56:42:d6:22:33:36:3d:e5:38:bb:46:b4:
9a:d5:fc:66:61:56:9f:4a:9b:60:a9:99:c5:86:4e:5e:22:fb:
6a:16:47:a6:4f:6f:6b:35:99:46:58:bf:48:1c:b6:88:06:7c:
cf:50:b6:98:84:6b:46:3c:ae:ef:3a:0b:84:ff:8c:ee:c0:6d:
68:f9:99:f9:80:a3:de:c3:cd:e0:27:55:5a:f1:7d:a1:e0:b2:
2e:25:51:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org