Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/6c74f6cfaefe5cbfc4d18789737c31d7ea8de8e2.roa
File: 6c74f6cfaefe5cbfc4d18789737c31d7ea8de8e2.roa (raw, json)
Hash identifier: L9mO27opfrxmlnLuxiCfdnxVfwDgAtRqXc9Oghk/hLY=
Subject key identifier: 56:5E:35:D3:AA:D9:CC:8E:B8:77:BD:B9:7D:CD:28:0E:1D:39:E9:11
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 1C3EC3
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/6c74f6cfaefe5cbfc4d18789737c31d7ea8de8e2.roa
Signing time: Wed 28 Sep 2022 14:09:49 +0000
ROA not before: Wed 28 Sep 2022 14:06:03 +0000
ROA not after: Sat 28 Sep 2024 14:06:03 +0000
asID: 3816
IP address blocks: 201.228.0.0/19 maxlen: 19
201.228.20.0/22 maxlen: 22
201.228.28.0/22 maxlen: 22
201.228.32.0/19 maxlen: 19
201.228.32.0/23 maxlen: 23
201.228.36.0/22 maxlen: 22
201.228.48.0/22 maxlen: 22
201.228.64.0/19 maxlen: 19
201.228.72.0/23 maxlen: 23
201.228.74.0/23 maxlen: 23
201.228.76.0/22 maxlen: 22
201.228.80.0/22 maxlen: 22
201.228.96.0/19 maxlen: 19
201.228.96.0/21 maxlen: 21
201.228.104.0/23 maxlen: 23
201.228.106.0/23 maxlen: 23
201.228.108.0/22 maxlen: 22
201.228.120.0/21 maxlen: 21
201.228.120.0/23 maxlen: 23
201.228.122.0/23 maxlen: 23
201.228.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851075 (0x1c3ec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Sep 28 14:06:03 2022 GMT
Not After : Sep 28 14:06:03 2024 GMT
Subject: CN=6c74f6cfaefe5cbfc4d18789737c31d7ea8de8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:d1:a7:40:30:74:ec:5e:80:fe:7e:09:f2:
21:72:2e:3a:dc:83:64:e3:4a:4a:0e:82:46:dc:23:
39:bf:00:c6:f3:e5:42:d9:2e:fe:83:4a:e4:e4:6b:
0e:a4:88:30:80:5f:17:fb:9c:d4:fa:bd:42:68:ad:
85:29:b4:4e:d2:88:31:90:05:c9:62:9e:21:c4:d3:
af:8d:cf:51:6a:3d:6b:8a:a3:76:44:3e:ca:d2:d7:
17:f8:32:51:a5:76:49:16:21:ee:c0:53:8b:f7:0a:
60:26:70:af:0d:83:a3:3c:35:bc:80:00:8e:85:1b:
92:fb:80:af:e9:e6:b1:37:fb:1b:c3:7f:67:7e:90:
30:ed:a5:88:7d:43:49:d1:c7:ea:bc:36:32:1a:8e:
d7:40:15:b0:2a:96:e7:d2:10:ec:1a:27:94:14:2e:
11:09:62:2c:43:1f:29:ea:54:5f:bb:56:ac:e1:c2:
ff:d8:80:b7:95:8a:fe:3e:e3:db:15:2b:f7:f4:b0:
9c:28:c6:ac:63:c8:cf:f8:e9:c5:d6:af:fc:5c:a9:
6c:30:7e:06:f7:da:cf:7d:18:8d:58:ba:51:af:24:
80:90:3a:9a:1b:24:ad:96:f0:81:cb:89:5e:39:4e:
f3:a5:01:a2:b9:6f:0a:22:b8:e7:35:68:74:a2:54:
b8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5E:35:D3:AA:D9:CC:8E:B8:77:BD:B9:7D:CD:28:0E:1D:39:E9:11
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/6c74f6cfaefe5cbfc4d18789737c31d7ea8de8e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.228.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2d:7f:fa:47:55:52:0f:21:2c:19:d3:ab:d1:a0:0b:04:c0:e1:
88:7e:ed:3e:4c:8f:6a:96:e7:41:06:c9:14:a7:09:11:3d:f8:
9b:c9:66:2b:4b:71:bb:b9:86:c8:9c:75:bc:0d:37:48:72:86:
82:04:16:d1:e8:7e:1f:4d:20:6b:d7:08:2e:4d:f8:f0:9e:9e:
5d:1b:1d:df:60:ea:b6:9c:e3:77:a3:66:8c:64:b3:51:f8:03:
b5:e2:27:38:99:59:b7:17:a1:8d:db:e9:b4:a0:08:08:f5:74:
1a:70:bf:17:34:73:58:d3:12:d1:bb:3c:ff:c6:8b:2e:cf:a7:
96:99:09:08:04:62:9e:d9:65:12:56:f0:01:02:6d:1e:43:cc:
33:2f:cc:57:35:5c:09:a2:28:04:75:00:30:ca:48:85:9e:dd:
24:68:8f:5e:b2:e8:af:69:45:29:a1:1b:a5:ab:2a:e9:1d:99:
ce:9c:4a:71:fa:b9:f2:1a:75:63:b6:e1:73:99:e7:93:e8:07:
56:a6:fe:1d:82:6f:40:ad:2a:f2:55:28:18:39:74:20:d5:f6:
67:de:6e:f7:09:c3:be:a1:37:06:16:8c:c1:d7:10:73:ee:bb:
47:c3:35:c7:eb:99:70:40:fc:93:05:19:24:db:b6:b5:2c:61:
7a:e7:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org