Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/38e4f4398ffda1fa8ac219e06852d29ddcd292a5.roa
File: 38e4f4398ffda1fa8ac219e06852d29ddcd292a5.roa (raw, json)
Hash identifier: hRJOEzsjpCij3PNaldfYrKAlDOD9yF/E6ni0qRjuUyc=
Subject key identifier: BB:16:03:A4:BA:27:FD:C4:BB:40:07:F0:89:91:38:F0:53:01:FA:24
Certificate issuer: /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial: 0DBE3C
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/38e4f4398ffda1fa8ac219e06852d29ddcd292a5.roa
Signing time: Wed 24 Mar 2021 14:35:27 +0000
ROA not before: Wed 24 Mar 2021 14:35:25 +0000
ROA not after: Tue 24 Mar 2026 14:35:25 +0000
asID: 262216
IP address blocks: 190.60.175.0/24 maxlen: 24
200.80.8.0/24 maxlen: 24
200.80.9.0/24 maxlen: 24
200.80.22.0/24 maxlen: 24
200.80.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900668 (0xdbe3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
Validity
Not Before: Mar 24 14:35:25 2021 GMT
Not After : Mar 24 14:35:25 2026 GMT
Subject: CN=38e4f4398ffda1fa8ac219e06852d29ddcd292a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4c:09:a3:23:54:4d:a9:99:27:50:4a:c3:72:
94:b1:5c:35:62:8a:7e:08:09:74:53:dc:20:2c:43:
ca:60:8f:ac:d5:0c:04:e0:91:6e:8d:5b:57:22:b1:
be:2f:65:09:52:b3:8d:15:dd:74:9f:03:c4:0c:ab:
00:c7:33:bf:65:93:c3:67:1b:a8:04:2a:e2:48:54:
90:60:4e:7a:41:56:07:81:0f:96:3f:d6:d4:83:e2:
5c:ef:14:17:40:38:e8:00:87:d6:d9:1d:35:86:68:
b1:d1:4b:35:a3:60:d4:e1:81:33:87:ca:ef:03:cb:
a3:62:c6:e3:4d:56:03:81:10:13:ba:65:2d:35:75:
9c:ed:5d:c3:e5:5b:87:f1:02:7a:a3:d2:f9:6d:b6:
57:10:80:ed:21:ce:69:2c:c2:87:03:b1:19:a2:b5:
d8:02:c3:74:2a:f5:6a:92:a1:4e:9a:4a:bb:7b:55:
d2:84:04:43:97:2a:9f:7e:c4:3d:87:6b:79:1e:c0:
fe:66:0a:d3:93:f9:fd:0a:2d:d7:f6:31:2a:83:66:
02:d8:a5:7c:20:62:a6:bb:e0:ac:9b:ac:7e:ae:63:
d7:21:d4:eb:bb:26:f9:87:0f:db:bd:5b:77:1b:2a:
c3:4e:50:7c:80:eb:a2:b1:5b:30:38:f8:e3:e7:01:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:16:03:A4:BA:27:FD:C4:BB:40:07:F0:89:91:38:F0:53:01:FA:24
X509v3 Authority Key Identifier:
keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/38e4f4398ffda1fa8ac219e06852d29ddcd292a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.60.175.0/24
200.80.8.0/23
200.80.22.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:4d:74:1c:c6:b5:b4:7c:e8:d5:07:2f:2c:07:77:8a:24:6f:
4a:76:4d:1b:d7:18:c1:03:94:c2:f0:d9:18:39:a1:3d:98:f6:
06:98:a8:81:3c:ef:ad:5f:f8:20:ae:3e:5a:b1:48:2e:0c:74:
32:44:18:76:2a:34:05:9f:60:4f:f4:e9:34:47:5b:b1:db:55:
3c:d3:c5:26:4d:de:02:c6:01:c0:9d:10:6f:08:85:e7:e3:4e:
86:95:ea:e9:f6:2e:71:26:ec:2c:6a:bb:2f:1b:aa:aa:d3:75:
87:3a:27:c3:cb:93:5c:fb:0a:d6:66:9f:23:a5:ee:44:9d:2f:
55:19:64:f9:d0:1f:09:ae:58:b0:e1:de:ce:f0:3b:21:d6:c2:
f8:33:bb:f7:3a:14:72:a8:f6:4e:b2:db:22:f2:fa:89:b8:89:
fe:a1:f6:0d:05:aa:f4:03:94:fd:f8:12:15:3a:cd:c4:f8:2b:
a7:0b:ef:81:34:04:e7:af:cf:89:ee:75:2a:b1:bb:fb:7d:50:
74:ea:05:18:37:a5:aa:17:21:c4:12:33:ae:b7:14:f9:4b:f7:
bb:f4:c3:2d:3d:1d:d1:76:50:37:50:a7:c5:8e:c7:39:2e:cb:
21:e6:e3:74:8e:e1:ce:89:af:a3:4d:fd:df:d2:a9:c5:2b:01:
9a:e3:ba:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org