Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/3d4f97f5d060d9a56e09900eb929c20f917595bd.roa
File: 3d4f97f5d060d9a56e09900eb929c20f917595bd.roa (raw, json)
Hash identifier: csev25L5GA/FBxzGQBgtdb7xavs3yq4czSHOlmCG9dw=
Subject key identifier: BD:F9:E1:AB:54:08:05:5A:4D:D1:88:B0:66:81:25:A2:D4:54:1A:1F
Certificate issuer: /CN=b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f
Certificate serial: 0DE03B
Authority key identifier: 2C:1E:B6:2A:68:B7:1E:98:C5:3F:97:1A:91:9C:F5:FE:2F:B3:DB:71
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/3d4f97f5d060d9a56e09900eb929c20f917595bd.roa
Signing time: Wed 24 Mar 2021 14:41:37 +0000
ROA not before: Wed 24 Mar 2021 14:41:37 +0000
ROA not after: Tue 24 Mar 2026 14:41:37 +0000
asID: 27806
IP address blocks: 200.13.136.0/22 maxlen: 24
200.13.141.0/24 maxlen: 24
200.13.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909371 (0xde03b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f
Validity
Not Before: Mar 24 14:41:37 2021 GMT
Not After : Mar 24 14:41:37 2026 GMT
Subject: CN=3d4f97f5d060d9a56e09900eb929c20f917595bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:51:72:bd:fe:63:d8:f5:1c:63:f0:c9:5e:
7e:2e:50:d1:e7:d3:c2:e8:7f:f9:a5:83:09:12:dd:
f2:d3:ea:07:55:44:0b:21:6f:c3:44:1b:97:b0:03:
39:23:71:8b:97:7a:80:f4:eb:24:91:13:0b:76:a4:
03:b8:8c:b9:16:2e:d2:fa:79:99:70:17:b9:1f:1e:
9a:c9:09:37:40:ca:12:6e:a5:23:6f:e6:9a:b1:36:
9a:51:c1:e3:83:6e:59:2b:3e:e2:1e:ce:a8:e6:f4:
8d:21:7b:a2:ee:5f:32:b2:08:4d:1f:1c:c2:7b:3d:
de:47:87:07:95:4f:76:51:a5:2f:92:bd:73:5b:51:
eb:fd:25:60:5d:2f:77:34:b0:2d:ea:60:c8:97:ae:
e1:2e:ae:08:c6:95:b9:fe:96:11:5c:2c:44:e7:a7:
a3:20:f9:f2:00:31:f3:7e:f0:95:80:af:72:f9:a2:
49:5d:ae:31:7b:ee:73:d3:c1:be:6b:13:22:16:b8:
3c:7f:d7:dc:a7:54:10:24:05:e9:b0:d5:62:dd:5b:
df:09:c5:0c:57:c8:14:4d:6c:82:a8:2b:bc:3b:ea:
9d:4c:8b:75:ae:3f:74:97:f3:a3:57:22:23:b3:3e:
68:3d:fa:f3:d4:64:c3:9e:19:26:6b:f9:15:00:56:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:E1:AB:54:08:05:5A:4D:D1:88:B0:66:81:25:A2:D4:54:1A:1F
X509v3 Authority Key Identifier:
keyid:2C:1E:B6:2A:68:B7:1E:98:C5:3F:97:1A:91:9C:F5:FE:2F:B3:DB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/3d4f97f5d060d9a56e09900eb929c20f917595bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.136.0/22
200.13.141.0-200.13.143.255
Signature Algorithm: sha256WithRSAEncryption
4a:d7:7f:2e:3b:06:66:ad:30:12:bb:11:c1:ed:46:c2:fd:88:
be:2a:19:29:65:cf:a0:39:e2:b0:34:c4:ee:84:ed:f3:94:7b:
c9:f1:fb:74:55:f6:a6:a7:38:75:36:a0:83:91:a2:18:62:b8:
54:42:09:a8:f9:51:86:7d:e0:84:92:bb:0e:75:67:d4:7a:ed:
18:6d:4a:c8:1b:dc:d6:2d:6c:1e:b4:58:55:c6:d3:25:26:7f:
eb:58:a7:7e:a6:6d:eb:a9:1b:5a:f9:51:13:fa:9e:f1:73:c2:
6e:05:38:c8:28:27:c1:a3:1c:8e:44:78:d4:ce:e1:56:43:6b:
c1:32:be:b6:59:7e:93:33:79:75:30:1a:63:b9:de:e5:7a:d9:
fe:a7:bc:2c:9f:29:f4:47:51:c9:f1:08:7c:f7:d6:3e:69:6d:
ad:58:31:9f:5c:a4:05:fd:b9:03:05:4b:71:c4:5b:0a:f2:b9:
bd:c3:48:5b:ca:5f:20:81:f9:c8:94:62:66:8c:37:5a:61:e3:
bb:fe:84:59:c7:68:6c:62:22:1e:9f:e7:7a:24:39:ff:85:6d:
65:a2:15:1d:35:6c:74:c2:50:5c:91:7a:5e:a1:ea:c8:5d:cf:
6e:27:52:31:0d:5a:91:29:b2:f4:12:6b:ea:2e:22:20:18:88:
ec:d6:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:31:53 2024 by rpki-client on console-fra.rpki-client.org