Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b491d053-f2b5-4dfb-b4e0-b6a18878ff66/8832975ce9227ddc4b1a6955d237b09f7552085f.roa
File: 8832975ce9227ddc4b1a6955d237b09f7552085f.roa (raw, json)
Hash identifier: 6TpnrhBMgBFKliTjkJbKi6heOe4Q9yvr2rm9z40PxaA=
Subject key identifier: 8A:2B:E8:05:AD:B0:73:A0:47:5C:B5:FA:01:6F:96:49:33:AC:31:07
Certificate issuer: /CN=ba552a17127ec2904d82704412e8848dc8f11c6c
Certificate serial: 0D5D39
Authority key identifier: 16:5D:39:5E:8A:66:E6:22:C8:FF:FF:E3:A2:1B:F6:16:AC:2A:11:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba552a17127ec2904d82704412e8848dc8f11c6c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b491d053-f2b5-4dfb-b4e0-b6a18878ff66/8832975ce9227ddc4b1a6955d237b09f7552085f.roa
Signing time: Wed 24 Mar 2021 14:47:18 +0000
ROA not before: Wed 24 Mar 2021 14:47:18 +0000
ROA not after: Tue 24 Mar 2026 14:47:18 +0000
asID: 20255
IP address blocks: 200.108.192.0/18 maxlen: 24
201.221.0.0/19 maxlen: 24
190.108.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875833 (0xd5d39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba552a17127ec2904d82704412e8848dc8f11c6c
Validity
Not Before: Mar 24 14:47:18 2021 GMT
Not After : Mar 24 14:47:18 2026 GMT
Subject: CN=8832975ce9227ddc4b1a6955d237b09f7552085f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:a2:30:b8:ff:2a:d6:9f:b5:91:58:80:1d:
5f:46:39:e0:75:11:47:e6:a4:b6:60:81:92:74:a2:
40:5d:13:f1:23:ac:aa:0b:df:e4:cf:b8:64:f0:40:
94:14:9a:72:98:bd:d0:7a:81:eb:f3:ee:a2:6e:c4:
5a:fa:b5:25:bf:26:4a:2b:39:a8:ae:05:61:d7:3f:
a1:4a:fa:87:22:4e:4f:b3:1a:14:06:de:8c:ac:5e:
4c:e7:42:9f:1e:0a:96:f6:fc:27:9a:fa:ef:7a:96:
58:a6:a1:d8:90:b1:74:a5:e2:52:a2:f2:6f:6c:41:
7e:48:47:e1:2d:20:04:d0:02:d8:e1:56:6c:b3:84:
2b:43:5c:75:b7:f3:7f:96:e1:de:ea:fc:61:bd:02:
fc:a1:4b:c3:a9:8b:42:a8:5c:11:f0:22:df:51:51:
32:bd:28:cb:f9:b6:a1:51:4b:70:d4:03:4f:90:a7:
3e:a5:7b:53:d9:f9:a5:f1:96:d7:46:0d:2a:ad:a0:
b8:67:f3:93:78:9c:db:e1:f8:ec:0e:a2:2d:61:26:
3a:34:38:32:b7:39:62:8d:90:2e:77:74:c5:b9:b7:
67:78:96:0a:83:cc:54:ed:77:75:15:f9:86:99:2b:
48:8c:f4:0f:fa:80:0e:e5:a4:47:ae:1d:57:99:45:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2B:E8:05:AD:B0:73:A0:47:5C:B5:FA:01:6F:96:49:33:AC:31:07
X509v3 Authority Key Identifier:
keyid:16:5D:39:5E:8A:66:E6:22:C8:FF:FF:E3:A2:1B:F6:16:AC:2A:11:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba552a17127ec2904d82704412e8848dc8f11c6c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b491d053-f2b5-4dfb-b4e0-b6a18878ff66/8832975ce9227ddc4b1a6955d237b09f7552085f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b491d053-f2b5-4dfb-b4e0-b6a18878ff66/ba552a17127ec2904d82704412e8848dc8f11c6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.0.0/19
200.108.192.0/18
201.221.0.0/19
Signature Algorithm: sha256WithRSAEncryption
12:0f:5f:2a:96:d4:00:2c:d8:27:4e:b4:66:b2:4c:ad:ae:73:
e3:46:f4:07:f2:5f:30:89:66:7d:c1:68:1a:32:54:05:f3:23:
81:05:6c:a1:1a:f8:33:8a:2f:3a:88:d2:44:ff:50:77:84:d2:
ef:7d:12:0d:30:89:67:ba:ff:c5:62:e2:21:76:59:06:13:20:
b0:9c:6a:15:76:2b:52:16:be:c7:69:6e:28:0e:7f:48:58:bb:
9d:7c:32:f2:22:b3:09:76:89:6c:af:65:5e:7e:05:6f:dd:59:
23:89:f7:5b:a9:ea:43:8a:88:9d:06:aa:92:48:cc:95:dc:2e:
21:66:8e:5f:e5:80:5b:4f:c0:6f:f7:25:40:a2:7c:32:68:15:
02:27:7a:72:f9:ed:51:4d:4a:ed:1c:f5:30:6c:55:b7:94:66:
bb:05:27:d8:49:b7:f7:c4:6f:01:48:2d:b6:94:f7:e1:00:01:
31:25:65:ce:4b:bb:fa:39:80:7c:ba:a3:14:2a:a8:36:38:8c:
12:6e:c4:1b:21:04:da:5e:07:8d:ab:63:16:44:70:2b:da:9f:
1c:3b:88:a4:c6:5b:9d:0d:74:d2:3b:02:ac:c6:39:fe:d0:73:
7a:d5:dc:de:19:91:b5:86:d5:76:e5:d9:3c:85:a1:80:ae:9b:
6e:e6:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org