Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/678915276dd2f72989acf898f0144c151de2e941.roa
File: 678915276dd2f72989acf898f0144c151de2e941.roa (raw, json)
Hash identifier: 8pNcFNVUe2ImmhP/SG+iCTqZAsmKQvicFlksAu5wxT0=
Subject key identifier: 98:25:9E:DC:6B:D2:AB:2E:B0:31:8C:B5:70:01:26:36:BE:08:80:2E
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 1FE1BB
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/678915276dd2f72989acf898f0144c151de2e941.roa
Signing time: Wed 04 Jan 2023 14:36:55 +0000
ROA not before: Thu 22 Sep 2022 15:15:42 +0000
ROA not after: Thu 26 Sep 2024 15:15:42 +0000
asID: 3816
IP address blocks: 152.200.0.0/17 maxlen: 17
152.200.128.0/20 maxlen: 20
152.200.144.0/22 maxlen: 22
152.200.148.0/22 maxlen: 22
152.200.152.0/22 maxlen: 22
152.200.156.0/22 maxlen: 22
152.200.160.0/22 maxlen: 22
152.200.164.0/22 maxlen: 22
152.200.168.0/22 maxlen: 22
152.200.172.0/22 maxlen: 22
152.200.176.0/20 maxlen: 20
152.201.32.0/19 maxlen: 19
152.201.64.0/19 maxlen: 19
152.201.96.0/19 maxlen: 19
152.201.128.0/19 maxlen: 19
152.202.0.0/19 maxlen: 19
152.202.32.0/19 maxlen: 19
152.202.64.0/19 maxlen: 19
152.202.96.0/19 maxlen: 19
152.202.128.0/19 maxlen: 19
152.202.160.0/19 maxlen: 19
152.202.192.0/19 maxlen: 19
152.202.224.0/19 maxlen: 19
152.203.0.0/20 maxlen: 20
152.203.32.0/19 maxlen: 19
152.203.64.0/18 maxlen: 18
152.203.128.0/19 maxlen: 19
152.203.160.0/19 maxlen: 19
152.203.192.0/19 maxlen: 19
152.203.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2089403 (0x1fe1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Sep 22 15:15:42 2022 GMT
Not After : Sep 26 15:15:42 2024 GMT
Subject: CN=678915276dd2f72989acf898f0144c151de2e941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1a:41:ee:37:76:85:1c:29:c6:94:e1:03:2a:
8d:4c:1a:cf:3e:53:88:34:87:b0:de:4b:6f:b2:3b:
d6:d1:68:a9:89:a4:a0:22:ad:fc:0d:9e:1c:a7:1c:
f0:b3:75:bf:bd:14:26:bb:0a:bd:b2:7f:2c:9a:b9:
3e:6a:30:79:9d:f7:d2:f0:63:3d:d1:2d:2a:ad:d2:
7d:42:6c:3f:33:6f:5b:20:31:55:ce:1f:53:32:ce:
b2:bd:a2:09:81:b7:80:24:0b:ce:19:84:5b:7c:3c:
33:3e:54:f7:92:62:0e:dd:c0:e9:7b:b2:a2:58:78:
bf:78:02:38:d6:03:9e:2c:b6:69:4c:cd:27:81:e5:
f1:40:37:19:c7:9e:a6:8e:9c:ea:4c:9e:46:22:91:
b1:cb:24:49:cd:4b:72:db:5c:de:11:06:e8:4f:c4:
04:54:6b:7d:1d:cc:a1:28:b7:90:a9:f6:43:a4:21:
7a:71:b9:0e:54:9f:c9:a8:f5:4d:a0:8c:87:ba:ff:
09:5c:86:53:2f:47:63:52:42:e0:4c:0d:93:f1:25:
bc:99:fb:d0:c6:c1:ed:26:22:7a:36:0e:88:de:2d:
96:df:c7:6f:6d:58:a9:62:9f:e3:5d:95:90:3d:42:
23:b1:f3:52:58:43:bc:d0:87:06:ff:7e:f9:44:3c:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:25:9E:DC:6B:D2:AB:2E:B0:31:8C:B5:70:01:26:36:BE:08:80:2E
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/678915276dd2f72989acf898f0144c151de2e941.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.200.0.0-152.200.191.255
152.201.32.0-152.201.159.255
152.202.0.0-152.203.15.255
152.203.32.0-152.203.255.255
Signature Algorithm: sha256WithRSAEncryption
6c:ce:45:11:a0:53:53:c4:2c:63:15:4a:73:02:bd:0d:38:e7:
eb:76:ad:32:7a:c1:41:80:39:5e:d3:5b:58:39:2e:62:1a:36:
eb:28:8b:a5:8f:8c:fe:e6:e2:f8:ef:4b:6d:81:ca:50:88:2d:
4d:0f:00:ed:bd:c0:51:0d:5f:ea:83:ae:f0:0c:20:0f:37:f0:
55:a0:00:e4:7c:29:a5:c8:88:e8:fe:c3:b2:42:6a:cf:14:6b:
b3:68:af:1e:f2:59:9b:46:24:56:d6:d4:2a:2f:ea:a0:de:6c:
dc:fa:ff:44:25:d3:d7:99:b5:b1:9f:af:27:bb:b2:21:f0:92:
1c:0c:26:6c:e7:0d:32:7d:84:bf:13:0c:f4:3a:68:6c:99:c1:
38:55:7b:45:2b:37:60:e7:30:50:41:fd:41:5d:91:4d:b5:a4:
ac:1b:6c:90:c9:98:af:83:1b:0a:3e:6b:4d:4d:80:41:1c:52:
62:1f:aa:e9:58:6c:d8:b0:ec:96:7e:28:b3:52:1a:f5:2e:d9:
5c:ca:20:7d:38:a1:12:a7:d9:a4:55:20:6a:7f:f5:04:c2:77:
69:62:37:8f:65:ae:1a:85:3c:46:36:be:45:d5:35:ce:10:e8:
d1:20:50:a6:17:54:47:07:64:05:18:12:c8:c3:24:50:90:81:
63:4f:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org