Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/1c804dd68267f6f8206451247793521840ddfd68.roa
File: 1c804dd68267f6f8206451247793521840ddfd68.roa (raw, json)
Hash identifier: qa+2FyeutgO3mgdGlhuNZZUN6/9bMO4vUrMtI1JGEYA=
Subject key identifier: 07:C6:61:44:67:F2:17:02:6E:4F:67:0C:F3:BD:C9:B5:57:82:D3:93
Certificate issuer: /CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Certificate serial: 26CEEE
Authority key identifier: D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/1c804dd68267f6f8206451247793521840ddfd68.roa
Signing time: Tue 09 Jan 2024 15:03:41 +0000
ROA not before: Tue 09 Jan 2024 15:03:41 +0000
ROA not after: Fri 09 Jan 2026 15:03:41 +0000
asID: 27738
IP address blocks: 200.124.224.0/20 maxlen: 28
201.183.0.0/16 maxlen: 24
200.124.240.0/20 maxlen: 24
190.130.128.0/17 maxlen: 24
190.131.0.0/17 maxlen: 24
190.131.128.0/18 maxlen: 24
191.99.0.0/16 maxlen: 24
2800:440::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2543342 (0x26ceee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Validity
Not Before: Jan 9 15:03:41 2024 GMT
Not After : Jan 9 15:03:41 2026 GMT
Subject: CN=1c804dd68267f6f8206451247793521840ddfd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5f:e1:fd:23:e7:0f:d9:7b:9c:a7:82:c0:bb:
6e:a9:5c:0c:4e:cd:37:1c:30:87:c1:b5:ff:c9:ae:
01:07:0e:ba:55:f0:98:ee:95:72:c4:4e:82:26:84:
25:94:f2:90:75:95:bf:e5:fd:9d:dc:bc:27:cc:54:
fa:41:ac:6d:7f:34:ca:17:6a:17:2d:03:4b:0b:f7:
fd:ac:59:5b:6c:c1:65:0e:db:c1:2f:b0:1c:29:5c:
e8:5b:8e:91:ce:51:72:ba:49:fa:44:2f:5f:ec:9e:
fe:42:53:92:76:27:e2:d2:97:13:ab:60:a9:8e:17:
b7:42:35:e1:cd:59:c8:90:3f:9a:a5:81:8c:f8:50:
38:c5:66:79:6d:7e:65:10:f3:56:10:0d:af:c5:88:
e4:82:d0:09:8b:db:9d:38:92:66:25:6b:76:ff:fd:
fe:73:4d:25:74:f0:d5:9c:c5:b7:9c:82:2a:21:ec:
08:f1:36:88:83:59:db:2a:8f:93:ff:a8:15:10:78:
e8:22:d1:07:3e:b0:5a:b1:fc:0e:52:1e:50:fb:46:
e7:21:5f:10:c4:fe:57:61:9f:fb:79:09:2b:43:25:
a3:74:b2:04:a9:8d:a7:49:75:0a:59:6c:dd:66:da:
b1:ee:e1:a7:fc:00:66:da:3b:35:42:37:1a:6b:e9:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C6:61:44:67:F2:17:02:6E:4F:67:0C:F3:BD:C9:B5:57:82:D3:93
X509v3 Authority Key Identifier:
keyid:D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/1c804dd68267f6f8206451247793521840ddfd68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.130.128.0-190.131.191.255
191.99.0.0/16
200.124.224.0/19
201.183.0.0/16
IPv6:
2800:440::/32
Signature Algorithm: sha256WithRSAEncryption
73:4a:ef:fe:13:18:cb:ca:c1:10:1b:53:3b:4a:e1:e2:79:12:
91:ca:3a:61:0d:11:de:ef:47:6d:fe:06:3e:c6:7c:a3:b5:2c:
93:37:78:e7:c7:fe:e2:a0:97:9e:d9:8e:19:3b:f2:83:49:8a:
e5:b8:ce:d8:19:60:d5:45:6b:3e:3c:71:95:51:7d:73:d1:de:
25:8b:7c:9c:ad:69:ef:85:1c:85:98:a9:fe:1f:85:e5:b5:2d:
94:2b:a9:10:28:f8:51:d5:98:9d:46:1a:c2:a3:c7:f4:b6:26:
c4:4d:38:03:e0:2c:ec:4d:ec:e0:02:18:2a:ba:0a:46:f3:df:
54:ef:15:45:6e:e2:b7:e7:cc:bb:b8:57:6c:ed:ce:5a:a5:f5:
15:ce:5f:e3:83:8c:4e:b1:19:87:c4:c9:34:87:57:42:6f:c8:
6a:50:a2:d9:de:6f:fc:86:f6:77:6a:42:ef:4a:6e:4f:48:43:
27:1f:fc:29:23:2c:97:e8:83:6b:02:ca:59:87:6e:80:54:e0:
d2:f6:31:eb:43:3b:f7:94:c1:c5:7c:1b:71:a3:b1:bb:ef:9a:
5c:35:8c:72:70:72:e3:43:c9:e2:cd:66:66:22:22:0b:57:9f:
fe:a9:d8:a9:31:32:b8:26:40:a9:fc:ea:84:f6:19:09:10:04:
ad:2a:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org