Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/9c366147f458b4fb01b4050c28225fb12e5829b6.roa
File: 9c366147f458b4fb01b4050c28225fb12e5829b6.roa (raw, json)
Hash identifier: 2Y9xnyAKbDjNMNFjItB1mQgJSAOYjyL7K0kqrtBCWdU=
Subject key identifier: C1:5B:9C:BE:EA:40:69:79:8E:74:D6:2E:32:CC:E7:7D:E5:6E:21:09
Certificate issuer: /CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Certificate serial: 2432A7
Authority key identifier: FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/9c366147f458b4fb01b4050c28225fb12e5829b6.roa
Signing time: Mon 11 Sep 2023 19:17:43 +0000
ROA not before: Sun 10 Sep 2023 19:17:43 +0000
ROA not after: Thu 11 Sep 2025 19:17:43 +0000
asID: 10617
IP address blocks: 200.81.160.0/19 maxlen: 24
200.81.176.0/21 maxlen: 23
200.81.184.0/22 maxlen: 23
200.69.32.0/21 maxlen: 24
200.69.32.0/19 maxlen: 24
200.69.44.0/22 maxlen: 23
200.69.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2372263 (0x2432a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Validity
Not Before: Sep 10 19:17:43 2023 GMT
Not After : Sep 11 19:17:43 2025 GMT
Subject: CN=9c366147f458b4fb01b4050c28225fb12e5829b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:79:df:a8:ac:23:f9:43:18:b8:77:c1:f2:
03:7e:70:b2:e6:46:4c:1d:d3:d5:dc:61:3b:cc:d0:
72:f5:cf:ff:2a:b4:18:39:d8:8c:1d:b3:d5:f7:ee:
9d:47:93:33:f7:ce:16:01:84:3b:b3:21:de:aa:4d:
85:78:8b:78:5c:e6:96:82:ee:01:cf:df:24:91:f4:
02:87:05:05:e0:d3:41:12:cf:1c:3a:a2:1c:c4:03:
bb:7d:2d:b1:ed:87:fc:a5:a3:32:fa:c8:d7:ca:ab:
08:48:14:32:69:40:45:07:1b:2d:d7:c2:20:e1:5f:
70:74:1c:01:f5:23:32:09:0d:70:dd:15:6f:65:c4:
28:86:b8:74:61:98:8e:b3:06:19:f6:75:75:40:58:
8f:28:9f:9c:ed:b7:07:ff:6e:4b:65:12:4b:a5:c7:
35:cf:09:1e:0e:a9:bc:23:99:80:e4:3e:14:b1:eb:
06:a4:fb:b1:e5:1f:9e:7c:20:5e:b4:25:33:2a:b0:
d3:9e:32:a7:cc:8c:86:77:95:14:53:50:25:02:20:
84:6d:53:71:70:01:c1:7a:f3:64:3c:bc:52:1e:4c:
7b:13:05:3c:25:c9:4d:3c:cd:fe:f7:aa:3d:68:82:
16:30:b0:e4:de:e4:5d:e8:29:b2:49:6a:66:19:25:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5B:9C:BE:EA:40:69:79:8E:74:D6:2E:32:CC:E7:7D:E5:6E:21:09
X509v3 Authority Key Identifier:
keyid:FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/9c366147f458b4fb01b4050c28225fb12e5829b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.69.32.0/19
200.81.160.0/19
Signature Algorithm: sha256WithRSAEncryption
44:39:c0:39:43:ab:46:1a:da:94:31:2c:6e:7e:09:8b:7d:bd:
a2:6f:fc:ee:01:51:2d:a7:6e:a1:55:8c:a6:f5:bb:d6:1e:3b:
32:6f:44:59:ce:65:1a:90:3f:23:0e:ab:e6:15:83:60:0d:62:
7c:ee:be:f3:98:a1:9f:e1:ee:66:2c:44:8e:27:fc:37:aa:dd:
5b:3a:35:0a:bd:4c:c1:f7:6c:ee:21:bf:6e:07:67:9c:ad:a6:
56:ca:97:5d:20:6c:1f:1a:e1:ba:9b:49:69:23:93:8a:c6:5b:
cf:09:6c:05:96:c6:75:82:65:45:70:f4:00:0c:1c:19:33:7e:
7b:a3:54:e9:cc:96:24:88:7e:ce:c3:a0:fa:61:a0:63:0f:63:
29:3c:41:6f:a5:48:28:57:43:48:fd:78:99:8c:2e:d7:3b:aa:
bb:59:0d:ae:f0:38:10:6e:c2:59:3f:c6:3c:0c:cd:f9:8c:40:
81:66:7a:82:13:db:7d:92:dd:1b:72:ff:07:83:36:55:78:29:
b7:0e:23:e0:c5:19:8f:cf:37:cc:51:a4:e3:ab:18:8d:dd:99:
a8:e0:2a:17:9e:a7:0e:df:70:d9:22:cb:ec:e2:b6:1f:12:73:
46:c7:2a:de:84:0f:bd:2e:9f:57:0b:be:3a:78:69:a9:0d:15:
fa:d8:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org