Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/a12f6103ff0e83e4d1a76e6e9493b1df7eb67b30.roa
File: a12f6103ff0e83e4d1a76e6e9493b1df7eb67b30.roa (raw, json)
Hash identifier: NScvLwmtNNLHBnwq28EO3baPlASExJ5j/J+MGYg2aFM=
Subject key identifier: 50:09:BA:49:52:25:9D:00:DD:D2:1E:F3:22:87:97:A6:76:63:C7:FE
Certificate issuer: /CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Certificate serial: 1FBA45
Authority key identifier: 3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/a12f6103ff0e83e4d1a76e6e9493b1df7eb67b30.roa
Signing time: Thu 27 Apr 2023 14:32:09 +0000
ROA not before: Wed 26 Apr 2023 14:32:09 +0000
ROA not after: Sun 27 Apr 2025 14:32:09 +0000
asID: 8048
IP address blocks: 200.35.130.0/23 maxlen: 24
200.35.134.0/23 maxlen: 24
200.35.136.0/22 maxlen: 24
200.35.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079301 (0x1fba45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Validity
Not Before: Apr 26 14:32:09 2023 GMT
Not After : Apr 27 14:32:09 2025 GMT
Subject: CN=a12f6103ff0e83e4d1a76e6e9493b1df7eb67b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:64:8e:cb:04:c8:e1:57:e3:e5:9b:78:ca:1e:
2b:f5:ee:1f:b2:4a:65:f8:ea:ed:b1:71:69:32:b5:
29:dd:2a:c7:42:b6:40:24:6a:80:45:a6:cd:a3:ea:
8d:67:e8:4f:a5:0f:50:aa:37:48:92:46:3e:9b:36:
82:8e:e1:01:4c:49:97:61:44:fe:12:a5:20:9b:3a:
66:9b:9e:50:a0:1a:0a:4c:73:38:bf:28:57:d6:8f:
c4:99:8c:79:3a:4d:46:ac:ce:d4:f0:aa:23:fa:37:
37:c7:05:4e:02:1d:30:b3:c7:de:de:85:f4:bd:9c:
bb:ed:d6:f2:b8:50:04:b2:48:20:b0:6b:ad:14:e2:
d9:58:12:a7:94:32:15:7a:74:47:12:0c:7a:82:90:
2a:6b:aa:a6:a5:de:69:99:17:54:e6:b5:1c:87:27:
ff:e3:31:03:3c:72:46:d6:7e:67:30:15:bb:44:44:
ee:2f:0c:93:59:3d:18:cf:54:81:d4:a0:22:b4:5b:
3e:6b:40:f1:96:eb:34:d4:bf:ef:77:c7:3f:51:92:
ec:8c:75:b8:97:67:aa:91:50:0e:97:e7:6e:e2:07:
ce:62:bb:1a:54:92:46:4f:7e:1c:d3:5e:83:96:c0:
24:46:8e:f2:b3:8e:f8:bb:ef:3f:de:9b:10:e3:9f:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:09:BA:49:52:25:9D:00:DD:D2:1E:F3:22:87:97:A6:76:63:C7:FE
X509v3 Authority Key Identifier:
keyid:3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/a12f6103ff0e83e4d1a76e6e9493b1df7eb67b30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.130.0/23
200.35.134.0-200.35.141.255
Signature Algorithm: sha256WithRSAEncryption
34:23:18:dd:48:af:a9:20:d8:45:42:5e:4c:ce:d2:b5:ee:8b:
fe:a4:ff:eb:4e:cb:df:85:f4:c2:3b:db:bd:8b:49:b4:0d:24:
e1:69:89:10:37:0f:56:a2:7a:7c:0c:99:8a:7b:81:1f:87:08:
c3:c4:25:97:33:7d:86:0b:ef:94:41:37:01:d1:c0:bf:a2:22:
12:f4:c9:ad:57:db:ea:95:df:6d:bf:ce:14:ad:26:36:ab:45:
95:8e:e7:d1:1c:00:a4:ea:9b:8b:09:20:f4:53:80:70:cb:72:
52:41:3c:89:ee:6e:83:8f:13:f4:cb:c6:0a:92:89:7e:bf:3b:
74:ae:c6:d9:91:62:18:5a:7c:13:8d:63:b4:c2:b0:83:cc:c5:
45:66:b1:52:43:8a:46:77:e4:a6:cf:d0:48:e7:8d:ce:f2:4f:
27:c8:01:6d:eb:33:5f:be:39:09:44:c1:93:5c:5c:b0:bf:f3:
d8:14:2c:44:77:70:a1:17:db:7e:03:4a:dc:0d:17:ea:a2:2a:
55:59:f6:21:4a:80:6f:1b:ad:31:bb:8c:e3:72:d1:22:98:8a:
90:b7:61:b6:ff:8e:04:9d:32:ef:eb:c7:27:dc:96:16:cc:be:
0d:8e:92:d8:eb:ec:27:b9:70:c4:60:b0:36:b8:a7:15:bc:3c:
2b:dd:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org