Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/899d8b7a66ce6cd226c1db22353404018a8b7194.roa
File: 899d8b7a66ce6cd226c1db22353404018a8b7194.roa (raw, json)
Hash identifier: +Nwy+fbq7+uL1d6a9ywW/vWYWEvz0RRy12Um4DL0BHY=
Subject key identifier: D6:DF:0A:BE:F6:05:CE:7C:57:1B:B6:67:0C:44:58:B7:1D:83:EA:48
Certificate issuer: /CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Certificate serial: 0DC22E
Authority key identifier: FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/899d8b7a66ce6cd226c1db22353404018a8b7194.roa
Signing time: Wed 24 Mar 2021 14:32:06 +0000
ROA not before: Wed 24 Mar 2021 14:32:06 +0000
ROA not after: Tue 24 Mar 2026 14:32:06 +0000
asID: 10617
IP address blocks: 200.69.32.0/19 maxlen: 24
200.81.160.0/20 maxlen: 24
200.81.176.0/20 maxlen: 24
2803:6380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901678 (0xdc22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Validity
Not Before: Mar 24 14:32:06 2021 GMT
Not After : Mar 24 14:32:06 2026 GMT
Subject: CN=899d8b7a66ce6cd226c1db22353404018a8b7194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d7:d2:e0:fd:a3:f3:6a:00:be:18:7c:54:55:
da:21:48:a3:01:7f:d4:3c:c3:fb:bb:ad:cf:39:30:
70:11:c6:3d:92:c1:2c:4e:cc:06:24:78:ca:8c:b7:
59:55:1c:f3:28:c8:12:19:b1:3a:b7:e5:91:39:cb:
6d:c7:b9:26:e3:15:87:c1:d6:32:bc:80:28:c7:5d:
01:a3:a4:15:5b:1c:bc:b9:44:9a:88:4e:f0:1a:04:
ed:5b:45:86:a5:73:fb:28:cb:00:a5:56:00:f8:82:
37:d8:60:c5:c0:47:53:a2:6c:a5:17:ec:d5:2b:c7:
ed:a7:77:53:93:5f:d2:dd:de:a0:83:b4:15:24:03:
c2:e3:5d:00:b8:a2:06:42:70:34:0b:73:52:80:aa:
35:4b:22:66:ef:83:19:69:3c:7b:50:e8:6f:16:9a:
f4:92:2d:f2:0d:9b:70:69:a5:8a:cf:88:1c:bb:9a:
fe:4f:b6:af:2c:de:90:0d:ac:60:f5:0d:0f:ac:22:
56:89:f3:c0:28:8b:bf:59:47:7c:30:61:b1:d0:de:
0b:63:da:eb:b3:5b:79:96:ef:48:24:74:4e:db:c5:
a7:d1:ac:dd:1c:70:20:bc:14:e4:11:7a:1e:2d:d6:
69:db:bb:55:7d:50:db:74:16:c0:87:41:ed:a5:6d:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DF:0A:BE:F6:05:CE:7C:57:1B:B6:67:0C:44:58:B7:1D:83:EA:48
X509v3 Authority Key Identifier:
keyid:FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/899d8b7a66ce6cd226c1db22353404018a8b7194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.69.32.0/19
200.81.160.0/19
IPv6:
2803:6380::/32
Signature Algorithm: sha256WithRSAEncryption
60:e9:35:cc:70:e5:4a:30:73:56:de:a9:a1:2b:cb:8b:48:9f:
8e:7e:f1:fb:28:2e:23:5f:70:23:fe:d6:c0:7d:a9:75:4d:99:
f2:1a:4d:0e:0c:29:66:f9:6d:3d:97:7d:fd:49:5e:5c:84:f4:
f5:7c:1b:3f:dc:b9:1a:be:28:e3:84:88:13:88:4a:4b:d9:22:
80:d2:bd:06:38:08:ff:d2:e6:16:43:c1:77:6f:f4:85:04:36:
82:ca:b5:7d:0b:ee:ac:e8:92:d8:9a:4f:ad:15:37:58:69:37:
15:0f:16:44:aa:21:9f:64:45:f0:07:20:07:c5:1f:97:0a:3d:
8f:6d:ea:cf:cc:62:71:a9:34:c3:f4:a9:78:61:07:1f:5f:61:
fe:1f:75:80:41:8c:85:f5:0f:1e:6c:d3:79:00:68:21:c1:94:
c5:bc:b9:85:bc:4b:75:7c:ef:7c:38:10:ea:a4:af:0a:56:ac:
d2:74:f9:23:69:22:0a:a2:1b:94:34:d9:27:50:6c:79:a6:57:
45:27:9f:25:74:60:31:dd:2d:6f:67:2e:4d:c0:45:1f:5e:d8:
4a:d0:2e:cf:82:dd:26:7c:e4:cb:76:7a:b6:62:de:53:52:a3:
42:8b:b3:bf:cd:b6:99:b5:de:98:d7:ed:8c:58:85:75:12:7f:
3a:e3:7d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org