Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/41de029a0d9f8386b07f09ef4ffb27c4c289463b.roa
File: 41de029a0d9f8386b07f09ef4ffb27c4c289463b.roa (raw, json)
Hash identifier: 7p3V36Z/O0D09ga7RWp6tCU2eizjkIc6PynhXYXrJwc=
Subject key identifier: FE:05:2D:AE:09:75:F0:31:FF:3C:72:74:2E:85:8F:9F:1E:98:FD:00
Certificate issuer: /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial: 2428E3
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/41de029a0d9f8386b07f09ef4ffb27c4c289463b.roa
Signing time: Wed 08 Nov 2023 17:41:49 +0000
ROA not before: Wed 08 Nov 2023 17:41:49 +0000
ROA not after: Sat 08 Nov 2025 17:41:49 +0000
asID: 7438
IP address blocks: 200.36.160.0/19 maxlen: 24
201.131.4.0/24 maxlen: 24
200.39.0.0/19 maxlen: 24
200.76.80.0/20 maxlen: 24
201.166.128.0/18 maxlen: 24
201.162.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2369763 (0x2428e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Validity
Not Before: Nov 8 17:41:49 2023 GMT
Not After : Nov 8 17:41:49 2025 GMT
Subject: CN=41de029a0d9f8386b07f09ef4ffb27c4c289463b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:79:d3:62:f7:92:a7:9c:ec:f8:d9:aa:9b:2e:
df:bb:a6:cb:87:f6:ce:18:cf:33:5f:3c:84:57:7f:
a0:4d:ff:72:b8:ff:a4:0d:d3:df:eb:19:21:d6:47:
11:93:fb:9d:d3:e9:10:fb:b4:c6:00:04:20:00:bb:
98:8c:4f:52:20:a8:fa:c8:d0:a1:a6:75:dd:8f:ec:
c9:7e:33:3d:95:99:94:a9:11:49:a2:eb:76:86:a8:
67:28:00:42:ac:b4:2a:46:40:35:95:2c:27:b2:40:
fd:51:27:d7:69:69:02:ec:c3:4d:62:bb:f8:da:d4:
55:84:5a:fe:d2:5e:16:c3:d7:31:48:a8:d5:0a:e8:
cd:f7:09:24:95:ed:29:43:ea:5a:03:a2:06:3e:d8:
f3:d7:3b:49:45:7e:83:f3:83:0d:51:b6:51:15:fa:
a2:8c:a9:75:fa:b1:f8:87:79:7d:a3:10:5a:ea:91:
a4:d0:f7:11:c4:05:80:d2:6f:b1:2e:c9:78:ac:4d:
8e:e3:14:55:9b:d4:1b:b4:e1:c1:46:4c:3f:bc:fc:
f9:27:0e:11:c6:5a:c8:b2:0e:8c:fd:4e:c8:95:de:
26:c8:22:45:1c:65:a1:95:99:42:dc:86:57:55:3d:
a8:6f:ad:33:5d:a1:c6:5d:48:2e:34:c7:d3:e2:cd:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:05:2D:AE:09:75:F0:31:FF:3C:72:74:2E:85:8F:9F:1E:98:FD:00
X509v3 Authority Key Identifier:
keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/41de029a0d9f8386b07f09ef4ffb27c4c289463b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.160.0/19
200.39.0.0/19
200.76.80.0/20
201.131.4.0/24
201.162.128.0/17
201.166.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3d:fb:1f:37:e1:13:33:e3:fc:eb:8a:96:ec:24:b4:21:c7:3f:
18:35:f7:c3:98:aa:57:c2:d2:62:60:63:21:e3:0c:3c:a8:e6:
0c:44:2a:49:68:dc:a4:89:e0:05:fa:cb:c8:2e:73:eb:8f:20:
90:72:de:dd:0f:70:89:59:fc:fa:d2:90:55:31:b0:db:aa:66:
fc:83:b7:5a:ac:98:fe:1e:3b:24:e2:26:3a:e3:49:ef:f0:05:
ac:dd:f9:27:84:c3:d7:55:f0:bc:0c:11:3d:96:3c:b1:f8:5e:
c0:fa:0c:4e:f5:f4:47:4c:3d:a7:3d:aa:77:b2:ea:a0:1d:37:
1b:cc:4d:62:35:da:a4:e6:ec:1b:f5:76:02:24:fe:ed:b9:93:
5b:5b:c1:25:3c:1a:26:7d:76:25:81:73:8f:79:bf:8f:f7:bd:
40:64:63:1c:4c:45:8d:d5:f8:ee:b0:34:87:07:a3:60:74:01:
4a:91:96:eb:34:76:b9:58:88:4e:47:cd:9b:1f:85:80:de:3a:
04:e4:57:ac:01:ed:ec:8b:0e:13:a6:76:21:5c:d1:8a:33:79:
24:b7:69:e6:c8:b6:22:d4:4b:56:ac:f2:43:aa:e0:96:ac:ae:
53:3f:64:a0:6f:16:9c:36:6c:ad:2a:c8:bb:5a:14:8a:e2:6e:
4d:86:72:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org