Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c7cf56650433e6135f0d3f0b6220f97f16e0d02a.roa
File: c7cf56650433e6135f0d3f0b6220f97f16e0d02a.roa (raw, json)
Hash identifier: 37Eeuaq5zaXuGeT7Cu2ymgg2RvymVqd8m6dF1oJVVtA=
Subject key identifier: 09:17:2A:7C:B6:F4:44:18:14:8C:B2:D4:97:EB:2F:64:35:62:52:1D
Certificate issuer: /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial: 20F6AE
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c7cf56650433e6135f0d3f0b6220f97f16e0d02a.roa
Signing time: Tue 23 May 2023 19:01:40 +0000
ROA not before: Mon 22 May 2023 19:01:38 +0000
ROA not after: Tue 23 May 2028 19:01:38 +0000
asID: 27742
IP address blocks: 190.111.30.0/23 maxlen: 24
200.35.183.0/24 maxlen: 24
200.35.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160302 (0x20f6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
Validity
Not Before: May 22 19:01:38 2023 GMT
Not After : May 23 19:01:38 2028 GMT
Subject: CN=c7cf56650433e6135f0d3f0b6220f97f16e0d02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:74:b9:40:74:12:0e:d4:cf:bb:bd:2e:a9:
d2:ce:d2:6c:13:0e:58:43:a6:50:9a:2d:f2:0c:15:
26:71:90:74:31:c0:8c:9c:cc:a0:c6:36:3e:b6:82:
53:4b:cc:f8:d5:f5:dc:79:53:7d:d8:ea:2d:62:14:
c3:71:25:08:95:36:69:2e:c7:0a:63:1f:8f:a7:a2:
3f:e1:f4:b3:19:5c:bc:97:9d:da:57:0f:c9:9e:a6:
20:2a:89:85:84:11:7a:4a:fc:f2:ed:6f:ec:82:5b:
a9:64:4a:5f:77:ba:e3:05:df:86:74:d0:cd:ba:47:
ea:7d:a0:f8:e1:b5:ae:eb:bd:4c:e5:91:68:0d:17:
55:31:36:cc:f1:58:f6:fe:57:c7:43:ea:90:ba:24:
1c:31:ae:21:98:ff:3f:d8:99:20:40:10:e6:98:42:
91:9d:29:76:8f:b5:68:35:bb:80:6d:3a:5a:8d:ac:
65:91:4c:28:87:f3:1a:51:8d:09:46:79:7d:1d:2e:
e9:16:c0:e6:65:23:4f:f6:62:91:36:2f:d9:63:cb:
ed:26:75:73:d3:b4:ec:c0:64:44:99:60:e2:0d:3c:
42:7e:87:0c:7d:bb:9a:20:ed:16:da:d5:65:34:54:
ef:28:0c:c7:e0:73:af:27:c2:5c:ea:3c:4b:f8:f1:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:17:2A:7C:B6:F4:44:18:14:8C:B2:D4:97:EB:2F:64:35:62:52:1D
X509v3 Authority Key Identifier:
keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c7cf56650433e6135f0d3f0b6220f97f16e0d02a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.111.30.0/23
200.35.183.0/24
200.35.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0f:e1:74:d9:3a:8d:82:dc:06:10:18:b3:1d:39:87:e8:5f:
1a:3f:a5:b1:4b:99:d6:f3:39:2a:fd:da:4c:ec:4a:d5:7d:ba:
df:ad:6c:b8:f4:71:e1:61:4e:fa:03:e4:fa:27:dc:aa:53:22:
55:52:2c:e6:8c:fe:57:c8:73:d6:0d:50:65:1d:ad:02:88:e3:
28:e6:22:8b:19:f4:41:55:c7:21:ba:9d:c4:7d:ef:ee:ff:71:
fa:cd:4d:70:4b:f1:ca:1e:02:88:48:bf:5f:2f:5d:7d:4d:86:
06:e2:01:9a:6d:cb:5b:59:d1:c6:a1:e6:09:d0:2b:2b:88:b2:
03:0c:97:a7:fe:f8:74:17:a7:69:27:81:27:10:58:41:ed:40:
16:ba:65:02:09:75:52:3e:a8:56:6f:65:43:55:78:6b:55:23:
69:a9:eb:85:97:a1:c8:29:9c:46:c1:52:cd:2e:4b:38:36:4e:
f9:ad:e2:4d:95:65:55:0f:e9:d2:19:90:f2:5f:c8:36:6a:ff:
02:45:37:ef:ff:90:2d:1b:33:c6:85:a7:89:43:24:aa:ca:1d:
4c:d3:0e:eb:bc:e7:e1:db:62:b4:9d:ef:b5:c9:94:9b:f1:bb:
64:46:f2:c1:cf:7a:18:04:c4:bc:8d:16:d3:4b:75:4a:bd:00:
4b:03:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org