Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/00fc3f473fe5b377f8f2f56d79a48e18a6541654.roa
File: 00fc3f473fe5b377f8f2f56d79a48e18a6541654.roa (raw, json)
Hash identifier: HiXI4qIXtmuDZQOwu/ZwnJWk57EdqsFN65MGx7kPszg=
Subject key identifier: 61:51:D3:29:98:3D:77:CA:93:03:73:21:56:FB:15:A7:58:A0:93:11
Certificate issuer: /CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Certificate serial: 222B47
Authority key identifier: 5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/00fc3f473fe5b377f8f2f56d79a48e18a6541654.roa
Signing time: Wed 20 Sep 2023 14:39:45 +0000
ROA not before: Tue 19 Sep 2023 14:39:44 +0000
ROA not after: Sat 20 Sep 2025 14:39:44 +0000
asID: 12189
IP address blocks: 190.112.192.0/24 maxlen: 24
190.112.193.0/24 maxlen: 24
190.112.194.0/24 maxlen: 24
190.112.195.0/24 maxlen: 24
190.112.200.0/24 maxlen: 24
190.112.201.0/24 maxlen: 24
190.112.203.0/24 maxlen: 24
200.35.152.0/24 maxlen: 24
200.35.154.0/24 maxlen: 24
200.35.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239303 (0x222b47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Validity
Not Before: Sep 19 14:39:44 2023 GMT
Not After : Sep 20 14:39:44 2025 GMT
Subject: CN=00fc3f473fe5b377f8f2f56d79a48e18a6541654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bb:ce:96:4b:46:8c:18:0b:7c:23:2f:9d:5e:
6c:06:83:e6:c2:5c:4b:7f:9b:18:f3:04:1f:2d:c6:
9a:47:9c:f1:10:fe:55:1d:e3:f3:62:7b:d6:41:22:
a9:71:72:52:ca:fa:82:1f:6b:17:0d:02:4d:8b:81:
80:01:9f:3d:b4:8f:a4:13:a6:53:a2:ff:49:60:3a:
8d:a9:45:b1:0e:dd:b5:1e:5a:25:3e:76:87:03:ef:
d2:40:de:67:f0:86:c1:0e:1d:05:3a:89:69:e6:cc:
8e:7d:13:83:6b:f5:40:26:30:25:38:9c:b6:20:6b:
73:e1:c6:b7:7b:7e:a3:ca:00:a1:72:17:90:6d:b4:
b9:3d:83:cf:ff:d2:07:19:d6:41:e0:49:64:7a:76:
ff:ea:3a:f1:51:e9:ae:b4:0e:45:5f:02:0f:c5:d7:
ba:bd:3b:aa:94:ed:60:5e:2d:34:29:83:5c:93:35:
0c:9f:2d:b8:46:64:9f:c7:ea:28:07:92:0f:4d:c3:
ae:9c:dc:1c:84:48:17:32:59:99:18:da:a0:2f:91:
93:5c:84:6d:13:c7:32:83:10:79:cb:fb:fb:74:6a:
cd:79:be:7f:ec:6b:4c:1a:70:87:1a:24:62:bc:67:
65:70:52:dd:d5:f7:57:4d:c2:ee:e0:06:fe:80:3d:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:51:D3:29:98:3D:77:CA:93:03:73:21:56:FB:15:A7:58:A0:93:11
X509v3 Authority Key Identifier:
keyid:5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/00fc3f473fe5b377f8f2f56d79a48e18a6541654.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.192.0/22
190.112.200.0/23
190.112.203.0/24
200.35.152.0/24
200.35.154.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:6e:54:87:5f:d3:e4:5a:5f:cc:55:69:1b:1f:5d:6c:e7:f0:
d0:c8:41:9b:e1:21:a6:31:0f:d0:be:09:8c:5d:0b:37:b6:ec:
4c:f4:b2:a0:63:f5:dc:66:ca:fb:50:32:6f:9c:c4:47:80:0b:
2a:b4:ee:2a:01:2f:10:c8:0c:a6:fc:8d:da:a5:93:47:fc:bc:
48:14:32:4f:e0:d8:95:40:51:be:6b:4d:ed:35:69:80:cb:e6:
a3:4c:be:09:24:23:29:fd:05:ac:be:72:2d:6c:c2:b1:c8:9a:
3d:2c:2f:9f:a9:80:80:72:5b:71:26:92:23:ea:89:18:5f:1a:
49:5a:4e:1f:5e:b7:7d:a9:37:c0:64:97:1a:36:31:15:b8:30:
30:d9:51:b8:4f:70:e7:88:d5:de:6b:92:e4:d3:23:28:82:19:
20:4b:6a:a8:80:b2:1c:36:42:e4:f9:0c:16:86:56:3e:8d:6b:
c7:5c:93:d7:6c:58:bc:8d:58:76:c7:44:6f:ff:79:24:f5:5d:
19:7c:c9:e7:34:b9:d9:82:7c:57:84:d9:90:03:13:95:96:c4:
d3:26:d4:58:f3:c2:56:cc:40:1b:3e:d0:7a:a7:9c:2e:b3:bb:
48:e3:a3:f7:dc:5b:65:e7:f3:1a:3c:72:1b:f5:ee:13:db:21:
1d:a6:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org