Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/1f0c6cf7f383d071451ccf0605530cc372f45699.roa
File: 1f0c6cf7f383d071451ccf0605530cc372f45699.roa (raw, json)
Hash identifier: uKsdN+EfWY9pI6GmPLFM9X13+ODlSu4AjPKyZI4y77M=
Subject key identifier: 5D:78:B1:E0:92:42:E3:0D:BE:85:E6:3A:3E:8A:48:93:DA:34:0C:1F
Certificate issuer: /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial: 1EF825
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/1f0c6cf7f383d071451ccf0605530cc372f45699.roa
Signing time: Mon 29 May 2023 12:27:59 +0000
ROA not before: Sun 28 May 2023 12:27:56 +0000
ROA not after: Thu 29 May 2025 12:27:56 +0000
asID: 6503
IP address blocks: 200.76.0.0/18 maxlen: 24
200.52.112.0/20 maxlen: 24
201.151.0.0/16 maxlen: 24
200.56.112.0/20 maxlen: 24
192.190.30.0/23 maxlen: 23
192.207.204.0/23 maxlen: 23
148.244.0.0/16 maxlen: 24
200.76.128.0/18 maxlen: 24
207.248.224.0/19 maxlen: 24
143.202.156.0/22 maxlen: 22
201.163.0.0/16 maxlen: 24
200.94.0.0/17 maxlen: 24
200.94.128.0/19 maxlen: 24
189.206.0.0/16 maxlen: 24
2001:1248::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029605 (0x1ef825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Validity
Not Before: May 28 12:27:56 2023 GMT
Not After : May 29 12:27:56 2025 GMT
Subject: CN=1f0c6cf7f383d071451ccf0605530cc372f45699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:0f:3d:e0:13:33:e9:82:0d:21:33:27:85:
58:8c:0c:de:8f:1f:74:f7:c5:17:7c:b1:e8:d2:3a:
bd:72:3b:d2:8e:b5:12:87:49:a0:61:16:bd:bf:e5:
07:16:40:df:5d:6d:75:1e:07:69:48:b7:63:f9:51:
b5:09:bc:3f:c6:c7:50:36:bf:05:d8:18:8a:ab:35:
11:08:fc:ec:6d:4d:d1:96:0e:8b:03:63:22:40:c7:
99:32:45:a0:23:b2:d7:9e:8d:85:e2:69:8b:6e:4d:
1c:8a:0e:b4:3d:cf:0c:33:26:65:ea:c5:4f:73:78:
db:4f:ed:82:bd:f6:bd:cc:28:31:da:82:ae:b4:98:
3b:39:58:f9:6a:94:d1:75:35:00:13:a0:e1:4c:e6:
13:e0:f1:3d:d9:b0:31:27:18:98:22:8f:42:0a:0e:
6a:6d:6c:d2:45:f2:52:f8:00:c5:80:74:56:05:5b:
6a:5e:ca:e1:af:0c:7d:a8:3b:7a:31:df:0b:f9:e9:
e2:24:42:e5:2d:4d:15:76:0c:a3:5d:aa:b2:85:6d:
45:98:77:8f:4f:97:e3:ce:32:9d:54:56:67:e9:5c:
08:af:a1:bc:a4:c1:3a:d6:b0:ae:3d:0a:24:9a:a7:
64:23:0d:90:e8:70:a0:43:fc:ff:72:55:3e:f4:7b:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:78:B1:E0:92:42:E3:0D:BE:85:E6:3A:3E:8A:48:93:DA:34:0C:1F
X509v3 Authority Key Identifier:
keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/1f0c6cf7f383d071451ccf0605530cc372f45699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.156.0/22
148.244.0.0/16
189.206.0.0/16
192.190.30.0/23
192.207.204.0/23
200.52.112.0/20
200.56.112.0/20
200.76.0.0/18
200.76.128.0/18
200.94.0.0-200.94.159.255
201.151.0.0/16
201.163.0.0/16
207.248.224.0/19
IPv6:
2001:1248::/32
Signature Algorithm: sha256WithRSAEncryption
57:a9:13:74:2e:33:8e:e2:bc:e4:2c:8b:d2:b2:06:e0:14:34:
f8:f8:f7:c7:14:4a:79:41:56:44:06:08:12:3f:54:21:ac:76:
dd:2d:10:73:91:2e:c8:5a:ba:32:5c:84:ac:29:88:25:cd:1a:
6e:69:00:34:4b:b0:51:31:65:52:a5:5f:fa:0c:18:37:86:84:
7a:d2:e1:e6:fc:f0:f7:53:73:d1:f4:05:c0:a5:dc:0f:27:83:
be:ad:39:7b:bb:52:9d:8f:9a:13:38:d6:67:a1:f8:15:af:8a:
ee:91:0e:29:cc:3b:37:ba:5e:79:bb:d4:ac:c4:ab:f5:2f:b5:
63:07:78:b0:f9:08:1f:ae:ab:aa:81:03:60:c7:a0:ad:6e:e0:
10:82:c6:a0:a0:6e:e8:e1:48:95:9c:93:ca:b3:3a:13:3f:fb:
ba:47:06:54:2d:5b:c5:43:79:d6:94:83:29:89:e6:40:80:69:
49:fc:9a:76:23:19:ab:82:27:f4:85:4d:3f:0c:48:45:fd:77:
78:0b:7b:87:a9:e3:94:f4:a4:35:04:37:95:75:7f:bc:96:c1:
fd:ca:02:af:ae:0e:29:2a:5f:38:68:e9:00:e0:71:61:1a:12:
85:7b:a4:5b:cb:6f:b2:e8:ab:7c:82:14:76:ba:ec:47:79:08:
8e:91:5c:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org