Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/7c939edff979263673265b17bc3ac53551ba7d9f.roa
File: 7c939edff979263673265b17bc3ac53551ba7d9f.roa (raw, json)
Hash identifier: CjkEmfz6+Yi89gJVdqI6DI9tmzyrb9HfggempEksZTE=
Subject key identifier: 6B:3C:F0:93:63:DC:D2:75:AD:86:5E:F9:27:48:A4:F4:8D:18:A8:E2
Certificate issuer: /CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
Certificate serial: 0D8B61
Authority key identifier: AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/7c939edff979263673265b17bc3ac53551ba7d9f.roa
Signing time: Wed 24 Mar 2021 14:40:36 +0000
ROA not before: Wed 24 Mar 2021 14:40:36 +0000
ROA not after: Tue 24 Mar 2026 14:40:36 +0000
asID: 14522
IP address blocks: 181.175.0.0/16 maxlen: 24
186.66.0.0/17 maxlen: 24
186.66.128.0/17 maxlen: 24
186.68.0.0/15 maxlen: 24
186.70.0.0/15 maxlen: 24
190.10.128.0/18 maxlen: 24
190.10.192.0/18 maxlen: 24
190.154.0.0/17 maxlen: 24
190.154.128.0/17 maxlen: 24
190.155.0.0/17 maxlen: 24
190.155.128.0/17 maxlen: 24
200.25.128.0/19 maxlen: 24
200.25.160.0/19 maxlen: 24
200.63.192.0/19 maxlen: 24
200.63.224.0/20 maxlen: 24
200.63.240.0/20 maxlen: 24
200.69.160.0/20 maxlen: 24
200.69.176.0/20 maxlen: 24
201.217.64.0/19 maxlen: 24
201.217.96.0/19 maxlen: 24
2800:9a0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887649 (0xd8b61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
Validity
Not Before: Mar 24 14:40:36 2021 GMT
Not After : Mar 24 14:40:36 2026 GMT
Subject: CN=7c939edff979263673265b17bc3ac53551ba7d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:25:48:f3:3d:86:aa:43:df:c0:8c:98:1c:
5f:f0:ef:a5:bd:be:f7:f8:a7:c3:de:b0:2e:04:6b:
84:a0:9c:2d:bb:dd:8a:d7:ed:3f:7e:96:c0:d2:44:
95:80:49:cc:5a:dd:f1:e5:9c:a9:9d:a5:9b:0b:a5:
6b:bd:c9:f6:fa:74:20:d2:98:24:9c:51:3c:e9:2e:
bc:0a:9a:56:bc:19:2c:f6:18:f2:a5:99:18:78:dc:
92:a5:04:70:1a:d2:68:17:b8:b7:e6:de:16:88:db:
4f:fd:27:90:b5:6f:f0:fa:8f:fc:13:fa:fa:72:74:
96:2c:6d:64:c3:3e:81:d8:51:88:32:97:1f:54:f2:
5d:0c:83:88:99:cf:89:eb:4d:bf:cc:0f:16:f4:b1:
a7:8e:76:32:92:42:36:1c:38:00:95:80:f3:e0:c9:
b8:e1:71:5f:a3:43:f9:08:90:be:b3:f6:7c:e2:df:
cb:ac:bd:6b:0e:9f:09:c0:aa:57:f5:d7:bf:a3:7a:
1e:5d:16:5e:97:32:94:d5:9a:f8:e6:1b:51:81:1e:
ba:3e:2f:9f:41:17:7f:c1:de:69:67:85:ec:d3:65:
2d:51:f3:9d:2e:a9:1a:1e:54:d4:fc:34:33:ab:8f:
76:d0:05:47:8e:05:44:2e:67:b8:4e:89:9d:7d:8e:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3C:F0:93:63:DC:D2:75:AD:86:5E:F9:27:48:A4:F4:8D:18:A8:E2
X509v3 Authority Key Identifier:
keyid:AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/7c939edff979263673265b17bc3ac53551ba7d9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/82de3982dc3fe10698e2213ddec20b8ab75df7bf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.175.0.0/16
186.66.0.0/16
186.68.0.0/14
190.10.128.0/17
190.154.0.0/15
200.25.128.0/18
200.63.192.0/18
200.69.160.0/19
201.217.64.0/18
IPv6:
2800:9a0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:36:8b:d6:9c:7e:6d:44:c6:3f:70:d8:c6:7f:b0:3a:86:9c:
4d:f0:1a:f2:7f:bc:73:cc:54:c4:71:8d:2e:b5:c3:9c:be:4b:
fc:cb:e4:01:ae:19:fc:7a:0b:00:b2:3d:2a:49:05:24:db:33:
c3:3d:4a:80:9a:af:d7:30:2b:38:35:9b:3f:54:86:c0:d9:31:
00:ef:04:44:17:c1:4b:d3:b1:ce:2e:81:f4:8d:1a:9d:02:bc:
b7:7c:2e:54:7f:fc:69:86:5f:c3:e4:f6:05:d2:85:7b:67:7f:
58:6b:a1:48:a3:61:38:c9:7a:7a:85:51:6d:89:b3:6c:22:c5:
85:b4:b7:62:d4:de:24:f1:a6:15:a3:e9:39:68:12:2b:32:a5:
7d:b8:b3:56:ea:89:cf:bc:fb:de:b8:0c:22:c9:80:bd:9b:54:
71:9c:3c:6b:9b:dd:5c:7e:14:20:8f:c1:ac:46:04:e3:60:14:
f3:f5:07:ad:e9:7f:b4:e0:0c:57:8f:a4:4c:86:fa:c6:15:2e:
22:ac:be:00:ff:64:55:12:09:fb:87:27:e9:e3:e7:7a:94:43:
c8:2e:53:02:9a:da:2d:23:c1:9a:22:63:6c:a7:68:c8:9d:b1:
e6:3a:58:65:9c:4f:d8:96:03:0f:6d:8a:7c:3c:b8:dd:58:10:
aa:f0:6d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org