Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a2e1d3e64e65c0dada948cd54079801023fed320.roa
File: a2e1d3e64e65c0dada948cd54079801023fed320.roa (raw, json)
Hash identifier: Vu6aINjM4i3ic9hYa8m3KYekUdfgVevpXOSubir+iIg=
Subject key identifier: 22:2F:10:FC:D7:D2:69:08:F4:29:32:C3:72:B5:F1:06:81:8C:0A:26
Certificate issuer: /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial: 246A9F
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a2e1d3e64e65c0dada948cd54079801023fed320.roa
Signing time: Fri 01 Sep 2023 19:30:54 +0000
ROA not before: Thu 31 Aug 2023 19:30:43 +0000
ROA not after: Fri 01 Sep 2028 19:30:43 +0000
asID: 27789
IP address blocks: 201.221.69.0/24 maxlen: 24
201.221.72.0/21 maxlen: 24
201.221.80.0/22 maxlen: 24
201.221.84.0/23 maxlen: 24
200.12.240.0/21 maxlen: 24
201.221.93.0/24 maxlen: 24
201.221.94.0/24 maxlen: 24
190.93.0.0/19 maxlen: 24
201.221.64.0/22 maxlen: 24
2800:70::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386591 (0x246a9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
Validity
Not Before: Aug 31 19:30:43 2023 GMT
Not After : Sep 1 19:30:43 2028 GMT
Subject: CN=a2e1d3e64e65c0dada948cd54079801023fed320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:98:04:c8:1a:c1:7a:2a:2c:c4:78:03:c1:
13:26:94:42:1c:26:94:06:c5:4b:20:40:b4:fd:ff:
c8:0a:95:69:4b:0d:1b:c3:37:82:14:9e:65:31:a0:
ef:64:1b:c2:11:38:1f:90:16:20:eb:2a:7f:b6:27:
d0:b7:7a:c8:83:a0:61:cd:b9:99:05:7b:2f:c7:70:
9d:5b:72:40:66:4b:7f:f8:73:b0:b8:ee:5c:ea:28:
25:c6:cf:86:2d:bd:9f:41:0d:ac:f4:48:39:d9:a4:
6d:cc:66:96:6a:6b:81:b2:1b:d1:56:05:08:19:c8:
78:31:00:d0:11:aa:de:6b:5d:23:b5:6a:3d:c5:14:
48:26:6a:f7:2b:06:65:82:15:da:8d:c3:55:54:32:
06:96:34:29:23:3d:00:c0:68:6e:4e:18:41:37:8d:
4c:05:56:d3:76:a1:2d:ba:12:91:db:1e:3c:3e:b7:
ae:27:7b:28:5c:0e:0b:bf:81:f1:37:ae:0c:45:75:
58:ba:b6:e4:38:34:f5:a8:22:5f:fa:ff:52:4f:3e:
ba:66:bb:fe:32:bc:be:ca:58:cc:04:12:0c:3f:8b:
cc:68:04:aa:f3:22:cc:b8:a3:58:38:ac:58:5e:59:
36:fe:8f:59:c6:3c:13:4a:bd:1a:e3:74:3d:15:6e:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:10:FC:D7:D2:69:08:F4:29:32:C3:72:B5:F1:06:81:8C:0A:26
X509v3 Authority Key Identifier:
keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a2e1d3e64e65c0dada948cd54079801023fed320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.0.0/19
200.12.240.0/21
201.221.64.0/22
201.221.69.0/24
201.221.72.0-201.221.85.255
201.221.93.0-201.221.94.255
IPv6:
2800:70::/32
Signature Algorithm: sha256WithRSAEncryption
7f:da:75:98:f6:4f:28:4d:6b:b2:70:c5:17:6f:38:13:b8:09:
9c:52:20:fd:be:38:64:0f:f2:f7:a9:03:af:55:6f:13:fa:96:
ba:f8:74:cd:71:66:73:f4:53:d8:da:ac:fc:24:ff:bd:24:74:
8d:2c:e1:64:a8:57:aa:41:40:46:5a:c9:86:0a:0d:0e:42:96:
ca:30:1f:81:d9:46:57:25:ac:36:e8:c6:3c:d2:8d:09:51:82:
a7:77:88:b0:bb:f0:97:b2:af:2d:59:b4:8d:58:5b:9b:f4:03:
b7:8c:b1:87:a3:18:7e:c9:de:f8:f2:85:ad:e3:62:6f:1e:00:
83:d9:d2:7b:ff:46:7c:a5:a7:7e:76:f8:01:a9:b9:7e:a1:a5:
f6:b1:de:2b:ac:e4:69:85:e0:d0:90:ed:fb:6b:8c:13:f8:d9:
5d:65:5a:23:36:82:38:d7:6f:3b:75:eb:50:a6:04:48:0c:ef:
eb:d3:ef:8c:c2:38:74:4a:42:db:ef:99:0d:39:8d:fb:cd:98:
4e:7c:c0:95:17:5d:7a:35:9b:5a:42:fc:db:c2:1a:68:e9:e5:
78:b7:f2:08:a6:4f:dc:3b:19:ec:87:31:d4:ab:f1:f6:a6:06:
f5:82:2e:71:e9:13:af:96:3a:27:9f:98:da:cb:39:dd:fb:0a:
83:92:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:15:34 2024 by rpki-client on console-ams.rpki-client.org