Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/2edc5d54ffd5ebfb7b85b405944554b143f727fc.roa
File: 2edc5d54ffd5ebfb7b85b405944554b143f727fc.roa (raw, json)
Hash identifier: OD5I77PdkLxsyqAxZ1coVUG0ViF6cKzlF5wsD1hmTVE=
Subject key identifier: 7B:87:99:61:F4:1A:46:9B:8D:4F:75:D1:A2:E1:82:19:43:40:C7:4A
Certificate issuer: /CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b
Certificate serial: 231EBB
Authority key identifier: B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/2edc5d54ffd5ebfb7b85b405944554b143f727fc.roa
Signing time: Fri 11 Aug 2023 17:42:03 +0000
ROA not before: Thu 10 Aug 2023 17:42:03 +0000
ROA not after: Mon 11 Aug 2025 17:42:03 +0000
asID: 27839
IP address blocks: 181.177.128.0/18 maxlen: 24
190.11.64.0/19 maxlen: 24
201.150.160.0/19 maxlen: 24
190.106.240.0/20 maxlen: 24
132.251.224.0/19 maxlen: 24
181.114.64.0/19 maxlen: 24
200.58.64.0/19 maxlen: 24
190.107.32.0/19 maxlen: 24
2803:9400::/32 maxlen: 49
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301627 (0x231ebb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b
Validity
Not Before: Aug 10 17:42:03 2023 GMT
Not After : Aug 11 17:42:03 2025 GMT
Subject: CN=2edc5d54ffd5ebfb7b85b405944554b143f727fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:70:1d:79:83:87:61:e1:c0:ea:f0:a9:35:
3f:f2:fb:3d:d3:4c:0d:34:01:bd:40:51:82:c9:8c:
b2:35:fa:0e:d1:ea:e0:55:4d:80:95:c4:e9:a6:24:
2a:46:2d:2e:6e:0c:a3:64:3e:26:ec:ac:4b:35:8b:
22:dc:91:b1:9b:61:45:22:d9:63:aa:0c:6f:24:12:
a2:5d:56:db:52:74:b8:f0:72:96:89:ad:9c:ac:c3:
c8:c7:53:a0:34:3c:8f:0f:31:14:02:e0:f6:17:ac:
d9:d5:5f:2c:eb:c2:61:7a:aa:62:9d:88:66:a0:c4:
8e:d1:26:de:d2:81:e5:27:d9:8c:0c:d1:9d:ba:60:
a1:fd:af:00:7a:71:95:95:fb:e6:a0:b8:46:45:0d:
6d:23:d4:ad:7a:66:93:0e:e2:0d:3f:57:6b:24:b6:
1d:9a:2c:6f:9b:43:20:95:51:4c:e4:f4:ca:8e:1d:
e2:ec:0d:39:99:9a:80:8a:0a:a3:ff:ee:36:04:38:
f0:88:3a:69:fb:f2:1a:63:42:c0:c0:00:32:9e:7d:
df:e7:bb:88:61:77:22:fb:5b:53:5c:34:5f:55:1f:
88:0f:74:cc:08:b2:0b:30:53:1f:c7:53:e0:a1:da:
06:53:a4:ae:08:73:88:38:56:2d:8e:35:90:17:2f:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:99:61:F4:1A:46:9B:8D:4F:75:D1:A2:E1:82:19:43:40:C7:4A
X509v3 Authority Key Identifier:
keyid:B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/2edc5d54ffd5ebfb7b85b405944554b143f727fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/89a0699fe9f460e1f4fcd4dbeee82910785b065b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.251.224.0/19
181.114.64.0/19
181.177.128.0/18
190.11.64.0/19
190.106.240.0/20
190.107.32.0/19
200.58.64.0/19
201.150.160.0/19
IPv6:
2803:9400::/32
Signature Algorithm: sha256WithRSAEncryption
80:24:35:b2:0d:40:02:94:d8:7e:3f:b4:1f:c8:ad:7f:97:1e:
ce:97:e3:39:e2:30:1c:90:09:33:cc:f6:1e:52:23:74:e3:12:
c1:8a:e0:ff:f2:2f:f8:0e:d3:5c:8a:f4:35:b6:3e:46:db:5d:
04:06:59:20:65:f2:4b:4b:ec:9d:a9:ca:24:88:be:da:df:ed:
82:90:db:2a:78:21:bd:f8:47:08:a5:36:44:7e:71:e2:77:1f:
2d:ad:7c:38:e2:8a:8b:61:43:f9:cb:1b:0b:63:a2:3d:1c:0e:
1a:a7:91:c3:01:5c:99:8f:2e:b5:94:7e:02:1f:bd:08:60:c3:
61:13:c8:55:3d:ef:e9:30:62:95:c2:c9:58:53:62:72:18:f0:
63:19:70:5d:2b:e6:fa:cb:a4:32:9b:27:c2:ed:aa:fd:60:cf:
22:3b:c3:16:82:54:c3:2e:0c:07:70:62:9d:fa:e0:e4:e6:42:
2e:25:3b:88:ab:22:a8:d2:72:6b:10:87:e9:0b:ea:24:c7:fe:
1e:88:78:f9:4d:83:a1:a3:dc:f5:42:f8:43:9a:2c:6f:2c:ec:
6a:b4:64:80:dc:e6:cc:4b:43:c3:f2:2f:0f:1c:b6:f7:96:16:
fa:f3:33:cd:38:f9:4e:16:af:d7:6d:03:b9:99:b5:54:79:02:
cb:c4:9d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org