Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/83bf7b56ec1b2915077c9c78a3144261504e61c1.roa
File: 83bf7b56ec1b2915077c9c78a3144261504e61c1.roa (raw, json)
Hash identifier: LmsTtIC7r3UuWVHSx3IthZiP5NAKE3JJxmrgNrzSyzI=
Subject key identifier: A3:0F:44:E3:5D:8E:50:52:2E:D5:E0:9F:87:BC:96:78:D7:FE:83:16
Certificate issuer: /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial: 2386F1
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/83bf7b56ec1b2915077c9c78a3144261504e61c1.roa
Signing time: Thu 14 Sep 2023 20:19:24 +0000
ROA not before: Wed 13 Sep 2023 20:19:21 +0000
ROA not after: Sun 14 Sep 2025 20:19:21 +0000
asID: 202
IP address blocks: 181.193.0.0/16 maxlen: 24
181.194.0.0/15 maxlen: 24
201.191.0.0/16 maxlen: 24
201.192.0.0/12 maxlen: 24
200.91.64.0/18 maxlen: 24
200.91.128.0/18 maxlen: 24
201.237.0.0/16 maxlen: 24
45.232.116.0/22 maxlen: 24
2803:9b20::/32 maxlen: 64
2800:d300::/29 maxlen: 48
2001:1330::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2328305 (0x2386f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Validity
Not Before: Sep 13 20:19:21 2023 GMT
Not After : Sep 14 20:19:21 2025 GMT
Subject: CN=83bf7b56ec1b2915077c9c78a3144261504e61c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:ab:21:38:af:bf:ec:55:60:2e:b4:c3:4f:
27:4d:0d:78:7a:58:9c:d0:f7:21:d1:5d:f1:15:e6:
c1:f0:55:f5:6a:10:fe:46:e1:9c:54:e3:40:e2:68:
18:7e:fa:13:91:a4:e9:33:1f:0c:a3:03:cf:c3:1c:
a5:46:2a:08:45:5f:d7:74:f9:ad:51:6b:ba:ed:c5:
13:e9:f4:5c:6a:c4:e8:ff:3f:ee:c8:7e:eb:e2:f8:
42:05:1a:53:3d:cf:d2:f1:e0:fc:03:cc:d4:c2:37:
70:7e:cd:36:59:ca:60:81:92:e6:53:c0:74:c2:77:
50:04:fb:af:eb:ac:5e:39:70:d9:99:82:a6:a5:2d:
1d:e4:5f:f5:0d:7b:93:a6:ac:26:13:cf:bb:93:c9:
f6:d4:39:98:df:cd:d3:b6:71:bd:ba:0a:57:0b:c2:
5d:02:d4:c5:78:c9:fe:f8:b9:c0:89:dc:f0:23:be:
81:f8:f3:16:c9:8c:86:73:9f:67:df:57:42:d6:5f:
cb:d3:b1:73:cb:4e:2c:8d:e4:52:2a:2d:8e:74:4a:
44:44:79:88:d7:b9:22:97:af:3c:25:6f:76:22:6e:
e1:94:08:30:ec:7e:9a:13:a9:ef:55:a3:3a:49:43:
39:3b:44:04:25:01:0b:51:47:f7:62:83:de:3a:6a:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0F:44:E3:5D:8E:50:52:2E:D5:E0:9F:87:BC:96:78:D7:FE:83:16
X509v3 Authority Key Identifier:
keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/83bf7b56ec1b2915077c9c78a3144261504e61c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.116.0/22
181.193.0.0-181.195.255.255
200.91.64.0-200.91.191.255
201.191.0.0-201.207.255.255
201.237.0.0/16
IPv6:
2001:1330::/29
2800:d300::/29
2803:9b20::/32
Signature Algorithm: sha256WithRSAEncryption
71:3b:31:b3:ca:5b:2a:1f:9f:59:fc:36:32:aa:1f:39:b7:14:
1a:56:d5:4d:70:4f:c4:72:1c:89:0c:6e:83:de:92:a9:8b:98:
d2:f4:f1:d8:0d:53:ff:44:dd:83:86:14:46:8c:1b:68:28:25:
9c:92:0a:ef:9d:28:16:a6:40:58:4f:54:45:82:62:94:bf:24:
ef:b7:1f:0a:87:2c:b4:f2:06:2b:83:90:46:27:9c:73:3b:3a:
ef:ad:75:04:e1:c7:5e:15:86:cd:1c:0d:20:e5:80:c1:33:1a:
54:e9:24:8e:dc:07:75:bd:c3:0f:61:59:a7:6e:d2:51:42:5a:
3b:69:48:a0:3d:b6:be:aa:b4:bc:eb:60:c2:08:f4:64:02:ab:
e1:54:c4:7d:c1:2d:b1:33:a3:e2:9e:3f:86:64:d9:83:60:e4:
65:1c:81:f0:b6:00:06:ad:64:c7:ae:d8:7c:e5:98:85:c8:3b:
88:19:86:78:8e:86:0d:4f:80:e0:c4:9c:b6:84:18:d1:ea:cc:
c9:5a:fe:50:96:9e:cd:a9:46:43:63:51:85:6d:47:71:36:b7:
bb:85:ac:11:61:eb:3b:09:9d:4d:cf:94:53:90:5c:f5:5d:ea:
6a:2e:d3:a9:46:dd:d7:8e:75:af:3a:1a:07:91:a5:1a:f9:3c:
db:09:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org