Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f323d994c277339e076b19b9c83a4caaed8983d8.roa
File: f323d994c277339e076b19b9c83a4caaed8983d8.roa (raw, json)
Hash identifier: KqwxXy/vOdLgaZ6ArCWF6z1lCssHQ3F3bQ40kt9wpBU=
Subject key identifier: DA:4C:0A:ED:BC:2C:95:B1:B7:4C:FA:A1:C5:36:02:9E:93:E7:DC:0C
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 21D7A5
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f323d994c277339e076b19b9c83a4caaed8983d8.roa
Signing time: Tue 14 Mar 2023 20:16:55 +0000
ROA not before: Mon 19 Sep 2022 15:15:42 +0000
ROA not after: Thu 26 Sep 2024 15:15:42 +0000
asID: 3816
IP address blocks: 152.200.0.0/17 maxlen: 17
152.200.128.0/20 maxlen: 20
152.200.144.0/22 maxlen: 22
152.200.148.0/22 maxlen: 22
152.200.152.0/22 maxlen: 22
152.200.156.0/22 maxlen: 22
152.200.160.0/22 maxlen: 22
152.200.164.0/22 maxlen: 22
152.200.168.0/22 maxlen: 22
152.200.172.0/22 maxlen: 22
152.200.176.0/20 maxlen: 20
152.200.192.0/20 maxlen: 20
152.201.32.0/19 maxlen: 19
152.201.64.0/19 maxlen: 19
152.201.96.0/19 maxlen: 19
152.201.128.0/19 maxlen: 19
152.201.160.0/19 maxlen: 19
152.201.192.0/19 maxlen: 19
152.201.224.0/19 maxlen: 19
152.202.0.0/19 maxlen: 19
152.202.32.0/19 maxlen: 19
152.202.64.0/19 maxlen: 19
152.202.96.0/19 maxlen: 19
152.202.128.0/19 maxlen: 19
152.202.160.0/19 maxlen: 19
152.202.192.0/19 maxlen: 19
152.202.224.0/19 maxlen: 19
152.203.0.0/20 maxlen: 20
152.203.32.0/19 maxlen: 19
152.203.64.0/18 maxlen: 18
152.203.128.0/19 maxlen: 19
152.203.160.0/19 maxlen: 19
152.203.192.0/19 maxlen: 19
152.203.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2217893 (0x21d7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Sep 19 15:15:42 2022 GMT
Not After : Sep 26 15:15:42 2024 GMT
Subject: CN=f323d994c277339e076b19b9c83a4caaed8983d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:9c:62:59:15:b3:d6:45:ef:1d:b3:4d:60:
b7:8b:c8:6d:38:3c:ba:09:40:a9:12:4c:d8:57:e3:
35:56:ba:3f:9a:16:2b:2e:4f:12:97:07:84:96:af:
c6:3a:c5:75:eb:6f:ae:3a:c0:eb:8b:7a:1a:27:ce:
6d:f2:fe:01:23:53:2c:e0:b3:3b:8a:72:20:9b:af:
67:d8:a1:e3:33:cb:46:35:25:97:61:8a:9c:1a:92:
a5:61:e1:15:8f:7e:92:78:79:2c:32:27:9c:26:47:
7b:bb:5b:f9:d7:55:3c:ca:8e:46:9f:c0:1a:64:fe:
df:40:12:b0:a4:f2:0d:d1:06:ec:b0:c6:c1:a2:e5:
1c:ea:a5:6f:d6:7b:67:dc:31:80:89:e3:81:a9:b8:
d2:55:e2:9d:e5:fc:45:70:a8:f9:4b:a6:b9:14:d6:
d7:79:5e:8c:8a:b8:dd:be:26:2e:4f:78:1c:cc:a0:
eb:99:41:bc:ee:4f:c2:d4:e6:5f:f5:5c:98:02:7d:
d9:b1:c0:0c:77:98:48:83:69:e6:8c:2f:0b:18:65:
df:5e:51:6b:20:03:fd:b4:26:9d:de:2b:ef:80:4e:
4d:5b:34:8b:a4:d8:62:45:3f:03:2c:5c:fb:5e:c3:
8e:33:f5:c7:1e:d6:ee:b5:5d:e3:e8:d3:65:8a:66:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4C:0A:ED:BC:2C:95:B1:B7:4C:FA:A1:C5:36:02:9E:93:E7:DC:0C
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f323d994c277339e076b19b9c83a4caaed8983d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.200.0.0-152.200.207.255
152.201.32.0-152.203.15.255
152.203.32.0-152.203.255.255
Signature Algorithm: sha256WithRSAEncryption
74:30:b1:e3:84:a5:9a:b4:37:37:88:be:26:f2:c9:00:fd:5e:
d2:4c:43:28:37:70:76:de:b2:aa:cf:fb:e8:01:81:b0:82:ee:
cb:9b:88:8b:eb:0f:4a:bc:7b:14:14:6f:24:f6:05:bb:44:09:
5e:38:40:09:5b:a9:1b:42:60:6e:9c:be:8b:2b:54:04:61:5e:
4e:39:a7:a3:4e:c0:7d:0b:08:0d:3e:00:3c:35:06:0b:5e:75:
57:3e:53:b0:61:33:81:bc:08:ab:d3:aa:43:79:d8:13:2e:60:
8c:31:9a:72:eb:8b:a6:ea:e4:e6:8e:f1:fc:90:24:24:5d:fe:
d1:4f:9b:b7:b7:08:11:9c:e3:bb:08:4e:bb:e0:d6:e4:f3:2d:
6b:45:e8:78:18:9b:f7:18:96:47:ee:61:1f:f8:49:7f:4e:dd:
95:af:cd:85:59:ce:dc:1c:aa:66:69:12:86:16:1d:ed:27:3d:
19:f4:4f:3a:64:f9:c8:bb:99:1a:dd:55:be:e9:9a:f8:be:2a:
31:32:9d:5a:fd:66:2d:42:c3:18:98:a6:7e:8e:67:ed:f4:04:
c5:ac:cd:f7:de:e7:d3:4f:ec:dc:f5:74:9a:fa:74:96:8c:29:
3a:b6:c8:92:58:9d:ac:84:98:b9:05:c7:85:73:60:57:f8:8d:
55:8d:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org