Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/16e7d0a1ef579a394609e0b4291b9d7a93c5c52d.roa
File: 16e7d0a1ef579a394609e0b4291b9d7a93c5c52d.roa (raw, json)
Hash identifier: uzVlbY/ObmASOA/nCyMIM8EGIC1ua5BXfgwf9SsaN8s=
Subject key identifier: 96:F3:8D:35:95:50:A1:DD:31:9F:F5:F3:06:72:D7:EC:FF:6F:00:1A
Certificate issuer: /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial: 1BF387
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/16e7d0a1ef579a394609e0b4291b9d7a93c5c52d.roa
Signing time: Mon 31 Oct 2022 13:56:57 +0000
ROA not before: Mon 26 Apr 2021 03:00:00 +0000
ROA not after: Fri 28 Apr 2023 03:00:00 +0000
asID: 271906
IP address blocks: 200.85.128.0/21 maxlen: 24
200.85.128.0/24 maxlen: 24
200.85.129.0/24 maxlen: 24
200.85.130.0/24 maxlen: 24
200.85.131.0/24 maxlen: 24
200.85.132.0/24 maxlen: 24
200.85.133.0/24 maxlen: 24
200.85.134.0/24 maxlen: 24
200.85.135.0/24 maxlen: 24
200.85.140.0/22 maxlen: 24
200.85.140.0/24 maxlen: 24
200.85.141.0/24 maxlen: 24
200.85.142.0/24 maxlen: 24
200.85.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1831815 (0x1bf387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Validity
Not Before: Apr 26 03:00:00 2021 GMT
Not After : Apr 28 03:00:00 2023 GMT
Subject: CN=16e7d0a1ef579a394609e0b4291b9d7a93c5c52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f7:3c:d3:a5:1c:24:7f:50:e1:f4:2a:53:86:
cd:b0:c3:4e:66:85:01:5f:97:d0:a8:3e:09:14:45:
1d:ce:c1:ea:ba:9b:b4:a2:84:75:54:8c:a9:af:72:
4c:88:48:b8:25:ec:08:48:2c:e4:0d:64:d1:aa:28:
d4:d3:f4:3f:43:b7:ab:37:3b:65:20:70:61:eb:91:
e6:d1:3c:be:14:48:46:c1:96:db:fb:85:d7:ff:38:
17:1c:6a:2d:3f:4a:ad:d4:b9:66:a5:cd:f3:99:60:
4f:17:b7:92:b4:9f:83:e2:42:ce:d8:85:6f:e1:04:
c6:a3:c4:4b:81:6f:30:10:63:cf:91:0a:45:8b:26:
ea:8e:30:96:55:60:73:bd:1d:95:12:61:45:be:da:
6d:50:41:04:ac:85:21:f3:19:6d:4b:1a:01:1b:9a:
9a:c2:65:c3:3c:d2:2d:cb:d8:e5:22:72:1a:e5:08:
5a:77:08:d3:3c:36:32:e6:75:2d:78:ae:fb:f5:c3:
74:c4:5c:25:b0:b1:91:37:b1:40:ad:77:d2:44:66:
05:1d:a1:1c:74:23:f3:f3:37:ec:01:d9:6d:97:c0:
5e:e2:7b:9a:44:ce:a3:59:2e:d8:8d:75:ea:e0:88:
7b:f0:b4:2e:a2:37:6a:53:44:da:c1:6f:2e:80:8f:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F3:8D:35:95:50:A1:DD:31:9F:F5:F3:06:72:D7:EC:FF:6F:00:1A
X509v3 Authority Key Identifier:
keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/16e7d0a1ef579a394609e0b4291b9d7a93c5c52d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.128.0/21
200.85.140.0/22
Signature Algorithm: sha256WithRSAEncryption
02:0b:68:7f:99:8a:06:9c:85:53:39:1c:0a:e3:10:f1:54:54:
df:ce:77:9d:78:67:9e:6b:ef:20:df:71:51:97:9b:dc:e8:19:
fc:81:53:7b:f5:4b:47:58:6a:91:55:cb:b4:4e:e8:df:55:b6:
50:ff:90:b2:2d:eb:dd:8f:d9:1a:15:b3:22:1f:61:f8:c2:42:
b3:f8:c9:b0:dd:7c:db:95:42:23:58:c8:a0:88:8d:1b:90:5c:
b9:78:59:c4:cd:cf:ec:a7:d2:f8:3e:eb:7c:ee:d3:6f:62:fa:
49:6f:a3:c4:ae:a6:a1:13:9e:10:47:b2:3d:a6:e6:8c:22:5c:
c4:de:ff:6a:bc:27:a5:a9:32:96:29:bd:f2:12:b6:bc:dc:ba:
4d:4b:c9:42:0e:3e:61:9c:7f:ff:3a:58:be:a3:e9:5b:63:55:
11:aa:26:82:2a:2d:90:44:7e:f8:87:d5:1a:2a:7c:69:cd:dc:
c4:bd:7c:3a:51:ff:1a:31:a4:38:3e:71:18:fc:01:bd:49:dd:
44:56:38:e7:35:b9:50:47:d9:7d:d5:21:82:a0:1d:f9:6f:e9:
cf:ec:2c:1d:b0:5c:51:47:64:bd:75:7c:85:30:07:64:60:b8:
23:bf:19:8f:3e:30:02:0d:ac:ab:51:40:db:a0:2e:69:ca:4f:
37:af:bd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org