Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/3e9dc1bac85528025672dceeb5acb2db7eccbd7c.roa
File: 3e9dc1bac85528025672dceeb5acb2db7eccbd7c.roa (raw, json)
Hash identifier: lCiY6lg3l1DYwIAlM3BJ7ZNPT2DX2EvQ+zeDqRcqdcA=
Subject key identifier: F8:66:8C:AC:04:68:4E:55:10:90:6F:88:87:B8:6B:AF:17:B7:AA:73
Certificate issuer: /CN=296ae134c63fda98feba9ece79438406ecc84f03
Certificate serial: 0E49D9
Authority key identifier: 8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/3e9dc1bac85528025672dceeb5acb2db7eccbd7c.roa
Signing time: Thu 13 May 2021 22:26:31 +0000
ROA not before: Thu 13 May 2021 03:00:00 +0000
ROA not after: Sat 13 May 2023 03:00:00 +0000
asID: 17079
IP address blocks: 143.0.104.0/22 maxlen: 24
181.189.176.0/20 maxlen: 24
200.85.0.0/23 maxlen: 24
200.85.4.0/22 maxlen: 24
200.85.8.0/21 maxlen: 24
200.85.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936409 (0xe49d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296ae134c63fda98feba9ece79438406ecc84f03
Validity
Not Before: May 13 03:00:00 2021 GMT
Not After : May 13 03:00:00 2023 GMT
Subject: CN=3e9dc1bac85528025672dceeb5acb2db7eccbd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:48:ef:94:01:75:b3:93:67:cf:9c:8b:2c:f2:
7e:1e:2f:eb:d2:1e:4e:b1:d2:ca:68:a5:ef:88:f1:
9c:0b:ee:2a:c8:55:91:ac:b5:e0:07:c4:52:18:c5:
83:d1:32:a8:52:49:79:76:d3:c1:f4:0b:41:3d:4c:
86:20:6b:03:1b:25:ce:1e:ba:64:3f:9e:8a:7d:30:
98:28:37:4a:51:ea:75:ea:06:35:40:57:a5:e7:dc:
20:17:f5:17:9a:df:f8:03:31:bf:1a:c0:7c:59:56:
3e:1f:96:ec:eb:82:37:cd:10:db:2d:9c:e4:be:4b:
9b:85:ad:82:27:41:19:c5:e1:22:1d:0c:93:68:21:
1d:6e:35:c0:22:7c:47:92:03:72:3e:6b:da:70:74:
02:55:d0:ae:eb:01:ec:cd:4c:ec:05:56:19:c4:42:
f3:15:a5:24:21:23:1c:4b:ed:af:51:18:4a:f4:32:
85:85:d5:fa:58:3b:d5:48:24:aa:dd:99:28:e8:d9:
38:62:38:4f:76:23:31:a4:c1:69:4f:f6:a2:cc:96:
4b:61:f5:dd:73:c4:41:75:fe:ef:24:cd:ca:f5:3f:
98:61:f7:21:2b:9b:64:61:1c:c6:80:5b:99:43:f5:
25:b9:08:fd:a7:1a:a5:f5:6c:02:b8:fa:f9:bb:29:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:66:8C:AC:04:68:4E:55:10:90:6F:88:87:B8:6B:AF:17:B7:AA:73
X509v3 Authority Key Identifier:
keyid:8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/3e9dc1bac85528025672dceeb5acb2db7eccbd7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.104.0/22
181.189.176.0/20
200.85.0.0/23
200.85.4.0-200.85.31.255
Signature Algorithm: sha256WithRSAEncryption
68:fc:c7:ed:a2:a0:45:25:fa:04:48:c2:33:db:33:2a:64:a2:
30:27:9c:ce:15:76:39:60:e9:1d:39:da:72:96:b7:ca:f7:fc:
e2:a9:eb:c0:4a:aa:93:cb:50:05:60:d6:1a:0d:6a:6a:c8:cc:
81:fa:3c:f3:7d:bd:4e:6b:0a:4d:36:af:f1:b2:eb:3c:e9:0f:
15:d0:e1:b8:d7:d5:82:52:62:14:08:7b:86:1f:dd:18:4c:27:
e2:64:d1:f5:7a:21:6e:f4:3e:df:01:64:9f:b6:8b:ea:a4:3a:
17:32:c7:60:e8:f6:1f:d1:11:e7:04:ad:1c:5b:4a:6a:59:01:
e1:95:2d:b1:ba:2b:ca:c5:34:94:6e:f6:27:28:66:4e:00:bc:
02:42:18:0b:bf:ce:f6:5e:7c:a8:53:e3:96:d2:d4:5c:8b:28:
7e:22:ce:ad:a6:72:02:19:45:0b:3f:47:ce:f5:27:ec:2b:d8:
4b:95:6f:d6:af:98:96:05:44:d6:40:31:96:49:0f:aa:f9:4f:
9a:4a:7c:c1:ce:25:be:6c:a2:b7:e9:69:38:b8:fb:52:31:95:
dd:cf:24:d0:19:59:4e:78:3a:6d:f3:aa:47:91:c4:23:6b:f4:
97:32:7a:4d:f8:e5:ca:fe:47:e6:cc:6d:c0:56:18:de:f7:e9:
0b:94:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org