Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/243b2ded4ec980253e162d9d412d2dff5227aa0f.roa
File: 243b2ded4ec980253e162d9d412d2dff5227aa0f.roa (raw, json)
Hash identifier: uJcdHlMEetAvht3GQ/6Vv1wAb4QilAubj+EUOwiuFIU=
Subject key identifier: 2A:74:CB:44:47:3A:3D:3B:F0:52:C1:AB:70:EC:D2:CD:B9:0C:0D:19
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 1C3637
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/243b2ded4ec980253e162d9d412d2dff5227aa0f.roa
Signing time: Wed 28 Sep 2022 14:04:18 +0000
ROA not before: Wed 28 Sep 2022 14:03:01 +0000
ROA not after: Sat 28 Sep 2024 14:03:01 +0000
asID: 3816
IP address blocks: 200.30.96.0/19 maxlen: 19
200.30.96.0/24 maxlen: 24
200.30.97.0/24 maxlen: 24
200.30.100.0/24 maxlen: 24
200.30.103.0/24 maxlen: 24
200.30.109.0/24 maxlen: 24
200.30.110.0/24 maxlen: 24
200.30.111.0/24 maxlen: 24
200.30.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1848887 (0x1c3637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Sep 28 14:03:01 2022 GMT
Not After : Sep 28 14:03:01 2024 GMT
Subject: CN=243b2ded4ec980253e162d9d412d2dff5227aa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:c1:13:b3:90:7d:0c:90:88:3f:5c:93:5d:
07:80:16:f1:78:13:c1:15:26:e4:a4:82:71:40:9e:
31:8e:8d:3c:ab:d9:31:df:fe:af:60:6a:ae:5e:51:
18:85:2f:f0:b8:bc:72:86:bb:8f:e8:78:e1:9b:91:
31:d1:73:19:c7:ee:1c:bb:c7:5d:1d:75:bd:2a:94:
37:93:5f:57:ac:e5:75:e3:5f:00:96:1d:43:0d:81:
0e:e1:25:ee:f2:fa:95:94:5d:2a:5a:cf:61:f4:74:
1a:ff:bd:d6:e6:08:44:e9:77:27:e7:d6:26:b3:b0:
ba:8e:32:5a:db:5a:3a:23:ac:be:1b:f6:70:fe:44:
43:9c:c6:32:9e:4e:22:d1:79:ee:b3:96:92:1b:33:
49:59:90:e9:fb:94:3e:e9:14:24:30:3f:e9:f8:2f:
94:db:0a:83:ab:c5:8f:bb:68:d6:39:6a:7d:06:a7:
61:d0:f8:a0:ed:10:ef:69:0c:a0:8a:ec:52:cd:d9:
cc:5e:01:d8:13:a6:d7:b5:9e:9a:83:bc:6e:1d:e0:
0d:0d:82:46:1e:92:9a:90:12:74:20:d4:fc:8d:83:
31:e1:56:77:6c:56:a7:9c:85:bc:ee:ba:2c:95:d2:
cc:a9:17:d2:a2:d6:a3:e6:01:3f:21:d4:5d:f8:cc:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:74:CB:44:47:3A:3D:3B:F0:52:C1:AB:70:EC:D2:CD:B9:0C:0D:19
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/243b2ded4ec980253e162d9d412d2dff5227aa0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.96.0/19
Signature Algorithm: sha256WithRSAEncryption
29:bc:f6:3e:ee:44:1c:7c:8d:f1:6b:60:89:27:d8:28:17:67:
30:be:8c:e4:fe:7f:93:68:be:12:29:48:f0:d7:dd:01:6c:c5:
20:73:fd:b8:5d:00:e9:3d:04:ce:ff:d0:a4:45:6e:7f:34:ba:
52:59:19:16:e7:e1:18:6d:50:77:23:cc:04:d2:b9:8d:4f:0d:
38:27:14:8b:96:0d:13:9b:10:4c:dc:04:67:64:80:e9:44:0a:
d2:8d:c2:76:37:53:c9:43:bd:df:f0:9d:7b:97:33:b7:d5:42:
fb:ae:e8:68:f9:3d:33:df:e9:98:28:10:0e:ff:25:a6:da:24:
20:13:2e:f3:b1:cf:64:3e:41:07:d1:b0:61:8f:ba:08:40:0a:
a0:e1:d1:d9:8b:cb:41:dc:d7:f9:0e:00:76:36:80:d0:52:59:
92:6e:2c:73:7a:21:72:f9:a0:eb:13:14:22:29:02:6e:36:52:
61:83:59:60:2a:0f:84:9f:60:76:0f:f8:16:fa:10:46:d8:49:
3a:53:41:e0:1e:6d:90:9f:cb:38:18:e9:f9:a6:37:56:0c:09:
4d:3b:e6:15:3c:ae:7f:7e:53:5e:f0:35:97:88:c0:0a:a7:1b:
3b:74:61:84:ba:5e:ba:2e:bb:15:89:1a:bb:fd:bc:c2:bd:c2:
87:6b:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org