Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d99af149a6338a0dede40aaa4940f237b5d988c7.roa
File: d99af149a6338a0dede40aaa4940f237b5d988c7.roa (raw, json)
Hash identifier: HZHeQBZy7KxxKYS0Mob0KlSELvIIbTxQDk1FV9dSDXU=
Subject key identifier: 30:21:AC:07:54:59:4D:EB:7A:53:69:F7:C8:A9:CA:D1:84:1C:1A:76
Certificate issuer: /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial: 2A48D5
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d99af149a6338a0dede40aaa4940f237b5d988c7.roa
Signing time: Wed 14 Feb 2024 13:39:40 +0000
ROA not before: Wed 14 Feb 2024 13:39:34 +0000
ROA not after: Wed 14 Feb 2029 13:39:34 +0000
asID: 27789
IP address blocks: 201.221.69.0/24 maxlen: 24
201.221.72.0/21 maxlen: 24
201.221.80.0/22 maxlen: 24
201.221.84.0/23 maxlen: 24
200.12.240.0/21 maxlen: 24
201.221.93.0/24 maxlen: 24
201.221.94.0/24 maxlen: 24
190.93.0.0/19 maxlen: 24
201.221.64.0/22 maxlen: 24
2800:70::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2771157 (0x2a48d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Validity
Not Before: Feb 14 13:39:34 2024 GMT
Not After : Feb 14 13:39:34 2029 GMT
Subject: CN=d99af149a6338a0dede40aaa4940f237b5d988c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:75:91:bf:74:f0:ce:db:dc:65:1d:a4:4d:
e2:aa:9e:2a:d9:c3:d5:d3:72:29:03:3d:98:07:4c:
3a:a3:35:18:c6:cd:43:04:78:f3:99:84:49:85:ad:
6b:13:4a:cc:ac:39:e9:32:f4:34:0f:cc:68:55:66:
b7:50:db:a4:82:97:6d:91:6e:be:f8:46:58:c1:24:
40:04:b6:e1:1c:6d:1b:47:7f:04:64:17:37:37:10:
9d:a4:65:50:ad:31:f6:1f:cf:64:66:f8:04:1f:f3:
95:07:c6:00:28:ef:99:c9:6e:9f:a7:ac:37:a9:ec:
8c:e6:7d:b6:1d:27:d8:87:2c:63:b8:e1:d3:02:17:
86:15:7e:8c:7b:0e:cf:e5:4e:ce:7d:31:91:4f:c3:
e8:99:0a:7e:b5:ce:2a:c8:08:f5:d3:5d:f5:18:19:
78:82:be:06:a7:0d:c8:19:4f:0b:98:1a:80:f4:49:
b4:d8:e6:75:72:4e:e3:16:8f:d2:2b:3c:0c:0b:1d:
62:5b:17:82:22:58:15:92:02:da:b2:4a:01:0b:f7:
23:45:e8:cd:ea:32:92:34:14:3a:48:bb:1c:81:9b:
fd:79:ac:6d:c7:6c:ec:4d:b1:f6:99:8e:47:9f:a6:
c2:07:52:b5:4d:e9:b8:78:03:ff:cd:39:11:82:70:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:21:AC:07:54:59:4D:EB:7A:53:69:F7:C8:A9:CA:D1:84:1C:1A:76
X509v3 Authority Key Identifier:
keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d99af149a6338a0dede40aaa4940f237b5d988c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.0.0/19
200.12.240.0/21
201.221.64.0/22
201.221.69.0/24
201.221.72.0-201.221.85.255
201.221.93.0-201.221.94.255
IPv6:
2800:70::/32
Signature Algorithm: sha256WithRSAEncryption
72:21:38:16:1f:a2:7e:fe:4a:33:56:2e:38:2b:03:a6:58:a5:
ed:b2:2f:de:4c:cf:87:51:d0:f7:70:88:78:3f:b2:25:3b:c4:
a5:22:b5:c1:48:88:f4:9e:15:d1:16:8a:5e:59:49:5c:0a:08:
19:b0:5b:34:32:a4:26:ad:b9:6a:62:0f:4d:d8:13:ed:64:1d:
69:7e:1a:92:3f:85:b8:17:ed:54:b4:dd:74:d5:aa:d6:b4:18:
3c:94:b3:d1:af:a5:54:dd:58:2b:ae:38:0e:71:2b:79:3e:5d:
88:90:c1:1f:1b:c5:6a:29:66:96:2a:b8:bb:e6:78:85:fa:75:
93:e8:41:c3:5d:65:81:0b:5b:3e:77:c6:d7:18:ce:f7:7a:a3:
61:cc:84:61:a0:8b:13:23:eb:5b:c6:26:1b:27:19:ef:5d:fb:
65:aa:8f:56:e1:93:b5:48:24:1d:c5:09:16:55:9a:9a:f3:24:
42:25:0a:ee:1c:28:97:31:2e:82:13:c4:31:53:ca:02:ec:f4:
6c:80:eb:5b:e7:c9:bd:80:15:bb:c5:5d:b2:3c:98:54:5a:82:
99:45:2e:a5:3f:d4:83:87:75:83:d1:a4:df:db:c5:3e:df:b2:
7e:f2:16:c9:a0:a8:ec:24:2d:83:40:df:c3:20:d2:33:e0:e0:
b3:91:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-ams.rpki-client.org