Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9f36a2a6d51792a78ceb2feb82cbb7f11cb7aca7.roa
File: 9f36a2a6d51792a78ceb2feb82cbb7f11cb7aca7.roa (raw, json)
Hash identifier: KQ9ypTry+9OEne0PO6dS1p1+UN1/jV1Qt+2IArvVj1E=
Subject key identifier: AA:BD:01:23:FD:4B:3E:A8:9E:22:25:37:D9:4C:68:08:A3:DD:13:09
Certificate issuer: /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial: 21A528
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9f36a2a6d51792a78ceb2feb82cbb7f11cb7aca7.roa
Signing time: Thu 15 Jun 2023 16:42:13 +0000
ROA not before: Wed 14 Jun 2023 16:42:09 +0000
ROA not after: Sun 15 Jun 2025 16:42:09 +0000
asID: 27742
IP address blocks: 200.35.183.0/24 maxlen: 24
190.111.30.0/23 maxlen: 24
200.35.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2204968 (0x21a528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
Validity
Not Before: Jun 14 16:42:09 2023 GMT
Not After : Jun 15 16:42:09 2025 GMT
Subject: CN=9f36a2a6d51792a78ceb2feb82cbb7f11cb7aca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:1b:1d:93:32:08:00:57:79:1c:b5:a0:04:
c2:b3:bd:f9:07:3c:b2:91:84:3d:89:95:47:28:47:
7d:84:00:f5:1b:e4:10:3a:85:72:5c:0c:6e:44:92:
b6:8b:ea:e7:2d:3d:27:ba:a8:7f:12:db:80:ea:7a:
f8:f1:4c:ec:35:15:ad:45:60:b9:74:06:e6:4a:5c:
4f:b3:c6:a9:71:83:44:89:f4:70:87:77:8f:88:a0:
27:08:6f:bb:41:9f:01:ec:cd:b0:a1:08:10:a4:05:
0e:19:18:31:cb:fe:15:a8:8c:c1:44:8e:98:ae:43:
93:4e:f7:dc:ff:38:c6:4c:ce:89:82:b0:c7:6f:f4:
99:b4:dc:ef:7d:cd:bb:e3:c2:c0:9f:00:63:6c:48:
33:ab:6c:de:7d:1b:bd:0b:3a:4f:72:43:a9:09:bb:
7c:00:96:f9:f8:77:5b:a8:5a:c2:ac:0b:fa:38:ca:
0a:25:42:48:d5:be:b4:0a:e8:81:0d:51:04:86:38:
28:75:11:d5:50:dd:3c:25:65:25:94:62:00:73:e6:
95:a0:0e:50:e6:5e:2a:14:3c:29:97:66:a5:77:f8:
7d:de:52:84:c5:97:bf:15:b7:4d:56:e2:8c:b8:ba:
be:7a:aa:47:03:08:cc:8f:82:c1:8d:43:96:ac:af:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:01:23:FD:4B:3E:A8:9E:22:25:37:D9:4C:68:08:A3:DD:13:09
X509v3 Authority Key Identifier:
keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9f36a2a6d51792a78ceb2feb82cbb7f11cb7aca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.111.30.0/23
200.35.183.0/24
200.35.191.0/24
Signature Algorithm: sha256WithRSAEncryption
99:12:01:0f:fe:45:5c:b0:83:ca:05:45:95:8b:ae:79:97:c8:
b6:92:ea:65:41:57:b7:12:42:8a:c0:4c:5c:b4:bc:e1:7e:c7:
3d:33:b1:21:b4:dc:c4:f7:53:3a:7c:f0:70:22:90:b1:4e:e5:
d1:a3:06:45:90:c8:9e:aa:37:08:4f:dc:1b:13:36:2d:48:25:
f0:3b:36:06:e5:74:9d:45:61:47:e6:87:7f:e8:68:09:7c:88:
9e:a5:83:46:db:91:f9:38:9b:0a:c4:a8:85:29:58:18:cb:05:
31:6b:62:56:1e:c9:85:21:ae:1c:96:b3:e2:eb:e8:38:1a:20:
68:87:e5:83:de:ad:2f:cf:12:b7:40:d3:ff:63:ee:86:b2:eb:
50:d0:94:f7:2b:90:0f:f5:ef:02:44:4f:af:99:83:a7:f8:8c:
34:d1:17:e5:57:27:56:54:fb:9d:22:ff:e0:11:50:e6:0f:c0:
fc:37:98:9d:ef:e2:ff:df:67:22:6f:f6:52:16:d9:70:4e:62:
f8:1e:7b:22:90:bb:58:1f:d1:2d:c9:ea:2d:fc:a7:3a:21:f7:
1b:0d:ec:1b:82:3f:85:44:99:ef:82:15:ff:93:3a:d4:5d:46:
bf:0b:e3:f3:54:be:e0:b3:72:d2:6b:02:64:b3:32:8a:9c:e4:
b6:a7:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org