Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/cf4803f464fd6648cd3300200f072d6ee2f17714.roa
File: cf4803f464fd6648cd3300200f072d6ee2f17714.roa (raw, json)
Hash identifier: YXDe4w3HqWD+q+qN80gqrFl9aMPrPeWgDcCcFH62pFY=
Subject key identifier: 60:3A:C2:E3:BE:CD:C2:87:35:55:DA:0C:40:8C:F4:AF:34:BE:6A:18
Certificate issuer: /CN=9f38530271142a50ccefbe64df571c9b0e259487
Certificate serial: 0D2CE3
Authority key identifier: 99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/cf4803f464fd6648cd3300200f072d6ee2f17714.roa
Signing time: Wed 24 Mar 2021 22:51:16 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 269822
IP address blocks: 190.102.120.0/24 maxlen: 24
190.102.121.0/24 maxlen: 24
190.102.122.0/24 maxlen: 24
190.102.123.0/24 maxlen: 24
190.102.124.0/24 maxlen: 24
190.102.125.0/24 maxlen: 24
190.102.126.0/24 maxlen: 24
190.102.127.0/24 maxlen: 24
45.65.232.0/24 maxlen: 24
45.65.233.0/24 maxlen: 24
45.65.234.0/24 maxlen: 24
45.65.235.0/24 maxlen: 24
2803:15c0:1000::/36 maxlen: 36
2803:15c0:2000::/36 maxlen: 36
2803:15c0:3000::/36 maxlen: 36
2803:15c0:4000::/34 maxlen: 34
2803:15c0:4000::/36 maxlen: 36
2803:15c0:5000::/36 maxlen: 36
2803:15c0:6000::/36 maxlen: 36
2803:15c0:7000::/36 maxlen: 36
2803:15c0:8000::/34 maxlen: 34
2803:15c0:8000::/36 maxlen: 36
2803:15c0:9000::/36 maxlen: 36
2803:15c0::/34 maxlen: 34
2803:15c0::/36 maxlen: 36
2803:15c0:a000::/36 maxlen: 36
2803:15c0:b000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863459 (0xd2ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f38530271142a50ccefbe64df571c9b0e259487
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=cf4803f464fd6648cd3300200f072d6ee2f17714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:fc:b3:aa:c9:8e:74:97:e7:d5:fe:6c:63:
e5:43:ff:ab:49:d4:a4:e6:e0:fc:14:97:29:0c:38:
c4:53:b8:e1:d9:a9:10:af:df:90:30:00:f3:be:d3:
c0:ea:b9:93:fe:df:5c:64:d2:3f:bc:47:b5:a8:32:
b3:65:11:c5:7b:94:b2:5a:57:e2:f8:17:81:07:26:
ee:95:2d:03:a3:a4:3d:c7:27:c4:79:69:77:95:4d:
fb:0b:fc:52:51:6b:79:35:54:7e:a8:a0:57:fb:74:
1d:44:82:7b:bf:36:33:e5:99:37:d9:31:11:a7:8c:
b4:b7:7f:8b:0a:c5:ea:7d:10:53:cf:36:87:00:02:
e8:22:dd:e7:a7:6a:39:b7:e8:b6:1a:81:9d:54:c2:
d4:7e:82:56:00:b7:a7:06:d9:cb:7b:19:3e:03:ef:
dd:72:cf:fd:a7:e0:d8:1c:cf:8f:6b:a7:9f:f5:65:
e9:fd:44:42:9e:a3:8b:2e:07:b5:34:86:22:8d:9b:
19:bc:54:c8:0a:83:02:49:4f:e6:e3:72:06:b7:da:
69:30:85:cf:12:75:6a:ab:86:30:bb:1c:b2:22:58:
6d:3a:7f:1b:1e:6c:89:ce:e6:3b:d8:f5:65:e7:cd:
3b:6a:c9:6c:b7:6d:2f:2a:ea:62:09:5c:6e:bd:f2:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:C2:E3:BE:CD:C2:87:35:55:DA:0C:40:8C:F4:AF:34:BE:6A:18
X509v3 Authority Key Identifier:
keyid:99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/cf4803f464fd6648cd3300200f072d6ee2f17714.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/9f38530271142a50ccefbe64df571c9b0e259487.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.232.0/22
190.102.120.0/21
IPv6:
2803:15c0::-2803:15c0:bfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
24:3e:ea:8c:ad:e4:65:35:2a:79:c0:28:44:db:d9:3d:2a:f1:
31:aa:80:3c:7f:bf:0b:db:28:30:4c:a5:33:79:22:51:01:35:
48:90:c1:54:a1:24:00:fc:76:8f:41:56:04:a5:1c:af:60:ef:
28:1f:a6:b3:22:c0:db:55:b8:dd:90:f0:9a:67:a3:94:ff:c7:
38:49:4e:c1:be:93:95:98:e4:2b:b2:0a:14:bb:8a:09:d2:e5:
88:25:8d:6d:e2:e3:10:dd:64:12:3e:5b:09:3c:49:9a:ff:74:
98:74:66:26:56:d4:7e:de:39:01:fe:17:a9:29:7a:cc:f3:fe:
68:44:95:c2:22:fb:a6:bf:33:41:7b:b3:06:17:00:43:7c:a8:
57:01:0e:d7:d0:99:cc:1b:dc:04:17:af:57:1c:40:1e:a4:56:
76:70:9e:12:e1:64:71:7e:ee:bb:26:c2:7b:f6:22:d2:e9:47:
9c:c6:bc:db:b0:fa:2a:b9:56:2d:39:e6:83:d8:72:57:57:24:
86:f8:9b:62:97:ed:74:99:9c:38:2a:9d:16:39:36:af:d5:25:
c6:49:bb:f3:53:28:b3:9f:25:ca:d5:2a:1d:4f:2a:2b:75:06:
bc:60:fd:6d:28:09:19:4b:4e:6e:28:d2:d8:0c:dc:9f:25:fb:
36:ec:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org