Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/b3ed8eff0708954e882c89e1659a4ae5eb6547f3.roa
File: b3ed8eff0708954e882c89e1659a4ae5eb6547f3.roa (raw, json)
Hash identifier: VskE+j9G0O/oGB0swHWjRCTYovlVZPEoxAPHr93/+UE=
Subject key identifier: F4:C8:C3:1E:7E:A3:33:8E:25:F3:F4:FD:19:33:8B:5E:89:92:D4:D5
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 100A94
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/b3ed8eff0708954e882c89e1659a4ae5eb6547f3.roa
Signing time: Mon 05 Jul 2021 18:47:48 +0000
ROA not before: Mon 05 Jul 2021 03:00:00 +0000
ROA not after: Wed 05 Jul 2023 03:00:00 +0000
asID: 14080
IP address blocks: 200.14.205.0/24 maxlen: 24
200.14.206.0/23 maxlen: 24
200.14.231.0/24 maxlen: 24
200.14.232.0/21 maxlen: 21
200.14.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051284 (0x100a94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: Jul 5 03:00:00 2021 GMT
Not After : Jul 5 03:00:00 2023 GMT
Subject: CN=b3ed8eff0708954e882c89e1659a4ae5eb6547f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:8d:a3:0d:64:f1:69:cf:81:4c:1f:83:a7:
ac:6a:5b:06:a4:44:01:85:35:c8:b1:ad:8f:c6:98:
9d:ba:80:ce:40:17:ff:25:5f:5e:84:e1:52:a4:91:
4b:eb:03:3b:83:69:85:12:19:57:2e:64:fa:d5:9c:
93:32:49:50:eb:9b:00:fe:f1:53:8b:86:11:e3:d4:
e3:e3:a7:d9:56:a1:b4:ab:32:0e:f8:49:d8:43:3d:
dd:b1:8a:bf:43:e9:7e:3a:dd:dc:6c:ef:be:6f:48:
00:06:61:50:e9:89:72:1e:3a:bb:46:9d:3c:db:d9:
3e:68:21:0b:7a:99:a7:ad:3a:3f:08:57:c4:bb:66:
f2:9d:ce:f2:f4:25:f3:42:60:6e:05:68:cd:12:0a:
5e:2b:fb:51:cd:15:0f:4d:b0:85:93:b6:f8:47:86:
6f:85:95:43:f5:4a:03:05:b5:bf:c0:28:84:db:80:
c0:2b:7a:83:c3:f3:34:e9:dc:c1:7b:27:99:d1:61:
c3:93:5b:ca:55:df:e2:f4:4e:83:6f:68:7a:1d:d8:
a5:db:65:89:ee:94:b1:f0:61:cb:2b:fb:1a:d7:81:
fa:99:16:cb:5b:47:53:8b:89:44:8d:7a:6c:25:9e:
3b:87:61:51:4a:52:c8:ce:98:ac:35:25:50:f1:9c:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:C3:1E:7E:A3:33:8E:25:F3:F4:FD:19:33:8B:5E:89:92:D4:D5
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/b3ed8eff0708954e882c89e1659a4ae5eb6547f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.205.0-200.14.207.255
200.14.231.0-200.14.239.255
200.14.253.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ea:f4:a4:10:13:6e:10:bf:c9:33:22:a9:b5:9f:28:45:71:
e4:1f:65:3e:62:88:74:65:47:f5:f3:e9:9a:18:90:b4:d2:0d:
93:b4:ad:3d:73:24:40:65:c0:51:9f:5d:0e:7b:ce:63:cd:57:
67:6c:e9:cd:49:3e:68:22:a8:8f:41:69:a6:07:53:49:b8:37:
65:3b:47:38:96:50:0f:93:61:de:78:ea:c4:dc:9d:d5:8c:45:
87:c3:96:d9:fd:1b:7c:57:7d:91:96:e7:2b:f6:af:69:17:44:
83:4e:1d:6b:1b:e0:ff:ae:b2:16:5e:6b:85:9b:a4:10:33:f4:
4c:57:ee:b6:52:b0:65:b1:8b:6d:83:41:fd:66:6d:94:e4:94:
e4:34:72:17:4f:c5:6d:bb:49:a9:95:ce:57:17:80:d2:42:f1:
b1:99:f9:06:81:04:63:e7:2c:fe:85:b3:be:47:e5:a0:16:3c:
5b:12:b1:b2:a0:f0:a6:72:2e:39:e9:9b:3f:bc:95:23:8a:1a:
0b:60:d8:f3:8d:32:b7:6b:31:56:34:2e:69:61:b3:42:81:2b:
c8:f6:61:d7:0b:f2:c8:24:ec:58:ec:b5:68:8a:8b:ca:bf:76:
c4:ad:09:1e:8d:0f:a7:bd:6c:87:26:03:30:e8:3c:02:ee:d5:
99:d4:d0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org