Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/de8f8c2cd5e6a822a5d23f0f9c6f0d6b33d4b800.roa
File: de8f8c2cd5e6a822a5d23f0f9c6f0d6b33d4b800.roa (raw, json)
Hash identifier: j8wUB+a+kSlDqay5stiFt1Qp+nbECGXU4OG/zzQpiUg=
Subject key identifier: A0:78:68:68:CA:A4:61:91:9E:35:FD:97:0A:43:69:E6:D7:7C:67:A5
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 22397E
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/de8f8c2cd5e6a822a5d23f0f9c6f0d6b33d4b800.roa
Signing time: Tue 04 Jul 2023 08:30:11 +0000
ROA not before: Mon 03 Jul 2023 08:30:11 +0000
ROA not after: Wed 02 Jul 2025 08:30:11 +0000
asID: 6429
IP address blocks: 200.14.202.0/24 maxlen: 24
200.14.208.0/23 maxlen: 24
200.14.215.0/24 maxlen: 24
200.14.216.0/22 maxlen: 24
200.27.0.0/16 maxlen: 24
200.29.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242942 (0x22397e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: Jul 3 08:30:11 2023 GMT
Not After : Jul 2 08:30:11 2025 GMT
Subject: CN=de8f8c2cd5e6a822a5d23f0f9c6f0d6b33d4b800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:09:9e:e0:b1:a2:ab:f4:7c:74:1d:b9:76:
c9:c3:ed:b7:42:f7:e4:f3:af:a5:4c:cf:4e:6b:aa:
90:37:52:67:fb:a2:ba:31:ed:b3:39:44:05:91:61:
14:3d:70:5a:12:02:7d:a8:12:7f:34:6e:3a:91:12:
0b:a1:95:85:c5:40:6e:e6:0c:6c:c5:17:58:a2:18:
ea:8a:ff:73:12:dd:a8:0e:eb:4b:0e:f4:6c:42:ca:
8e:e1:7b:82:07:e9:df:6d:df:aa:a1:01:a4:f6:6c:
40:5b:8d:31:c0:52:4a:28:30:fb:a8:73:43:a1:69:
6c:83:9d:fb:aa:e8:4e:0c:bf:bd:3d:9a:d4:86:9a:
52:39:1c:fe:a9:a8:22:81:67:c3:f4:e8:30:e3:e8:
35:8d:60:4d:a0:12:97:50:6d:b5:30:45:b5:db:a4:
4e:16:44:a4:88:13:78:31:26:0f:f5:3d:d5:ae:ab:
66:3a:fd:ef:ae:6b:35:9d:b6:49:d2:4b:c7:a1:41:
89:1b:dd:ce:27:a1:da:59:c6:d6:64:75:d0:c8:b3:
fe:c8:67:16:d4:b4:0c:89:a9:aa:fa:0d:a6:69:7a:
8d:69:5a:3c:00:d7:92:ec:8b:31:89:83:ff:25:15:
1c:f6:5d:9d:0e:29:57:3c:75:c1:b3:da:54:f9:db:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:78:68:68:CA:A4:61:91:9E:35:FD:97:0A:43:69:E6:D7:7C:67:A5
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/de8f8c2cd5e6a822a5d23f0f9c6f0d6b33d4b800.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.202.0/24
200.14.208.0/23
200.14.215.0-200.14.219.255
200.27.0.0/16
200.29.192.0/19
Signature Algorithm: sha256WithRSAEncryption
d6:e9:83:17:a5:e7:b3:ec:0e:34:1e:e4:e8:54:8b:90:b0:52:
22:1d:a7:65:71:b6:47:b3:cd:10:38:09:94:5c:82:95:79:8f:
8f:de:fe:36:2f:a2:68:69:c8:fa:bb:94:cf:c1:a6:d4:41:ed:
35:1b:ad:a8:a3:e1:73:46:d3:47:ca:9e:ff:49:d9:9f:28:ba:
a1:bd:f3:f4:ca:3d:76:4a:3d:d3:ac:37:37:24:ed:af:c6:47:
82:0c:db:2c:af:95:13:dd:e1:3b:bd:cd:03:d6:6e:18:9e:df:
cd:29:74:b6:57:37:e7:fb:25:a1:8d:a6:d8:91:fd:36:fa:41:
2f:dc:39:fc:9a:3b:61:77:4e:46:14:63:e2:0e:32:6f:c3:1c:
e0:cf:3f:af:6e:65:1f:35:e4:7b:c7:9f:99:2a:c7:db:1a:00:
c5:ea:1a:f0:5f:24:b2:ed:5c:1d:ae:96:cb:ee:94:7a:de:b5:
6e:01:61:4f:98:52:77:f8:19:51:ba:0a:ea:fc:2f:b7:d5:0c:
20:72:0e:ac:c3:79:40:6a:e1:7d:bd:75:4c:fd:8c:78:94:df:
53:25:9d:c8:61:41:6f:1f:71:d5:1f:d5:33:9e:aa:35:9f:52:
30:53:6a:21:b7:8b:b8:c6:90:a0:07:83:be:2f:ce:54:d5:48:
45:75:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org