Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/3233a5fb64064a6567fcd45ed88e343f9618be7c.roa
File: 3233a5fb64064a6567fcd45ed88e343f9618be7c.roa (raw, json)
Hash identifier: lTJD15KsUDEjlgNVlv0nTu+S63AK/+VvF8WywTgeL8s=
Subject key identifier: 0B:6D:44:3E:8F:49:65:AC:5D:ED:63:8B:66:1B:41:88:E8:5C:26:93
Certificate issuer: /CN=6e37ba61cda2665349146e3f47d9626599bc42f0
Certificate serial: 0D253E
Authority key identifier: 95:AE:CE:6D:67:BE:1D:4E:2D:8F:34:DB:70:3E:01:B2:11:53:03:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e37ba61cda2665349146e3f47d9626599bc42f0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/3233a5fb64064a6567fcd45ed88e343f9618be7c.roa
Signing time: Wed 24 Mar 2021 14:47:10 +0000
ROA not before: Wed 24 Mar 2021 14:47:09 +0000
ROA not after: Tue 24 Mar 2026 14:47:09 +0000
asID: 6057
IP address blocks: 190.64.0.0/16 maxlen: 24
190.132.0.0/14 maxlen: 24
200.40.0.0/16 maxlen: 24
200.125.0.0/18 maxlen: 24
201.217.128.0/18 maxlen: 24
201.221.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861502 (0xd253e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37ba61cda2665349146e3f47d9626599bc42f0
Validity
Not Before: Mar 24 14:47:09 2021 GMT
Not After : Mar 24 14:47:09 2026 GMT
Subject: CN=3233a5fb64064a6567fcd45ed88e343f9618be7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:79:f5:67:89:a0:af:f9:89:7f:96:4c:95:
58:cd:58:14:83:2e:d6:42:a6:ed:cc:d6:e0:5f:3e:
0e:04:a3:10:0c:12:05:f0:d1:15:a9:29:7f:55:ee:
d3:cb:82:2b:90:a2:d2:02:68:fa:68:9a:ef:88:69:
e8:47:29:5b:7c:9f:29:74:d1:de:3f:1b:e7:e6:7d:
24:8f:9f:bc:c6:0f:e7:32:f5:be:d4:32:82:46:2e:
19:c1:73:ad:6e:70:60:ba:37:c5:c1:2e:37:ab:3f:
13:d1:6a:75:db:51:7b:5e:c1:78:4f:74:62:3a:27:
18:fb:a1:d3:5a:be:c8:76:e9:f9:28:dd:7b:d3:40:
ad:00:6c:95:5c:52:54:c5:ae:dc:e1:cc:6d:6b:20:
a5:67:93:31:6d:bd:92:68:7e:0e:98:ec:ff:ea:22:
cb:10:15:f6:93:95:2c:45:a0:f9:f0:13:ee:c3:6e:
33:6d:c6:c5:b1:72:34:b4:53:0c:95:98:b6:7c:2a:
ab:63:35:72:55:de:82:11:fa:26:a3:bc:54:fe:1f:
a4:c8:1f:09:2c:5d:36:e9:2f:4b:05:3b:da:49:b9:
ad:f1:f4:b9:72:21:60:2c:4d:45:36:f1:89:1f:82:
9f:b0:93:a0:da:3d:3c:5a:d9:c1:4d:3c:e0:a3:5c:
9f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6D:44:3E:8F:49:65:AC:5D:ED:63:8B:66:1B:41:88:E8:5C:26:93
X509v3 Authority Key Identifier:
keyid:95:AE:CE:6D:67:BE:1D:4E:2D:8F:34:DB:70:3E:01:B2:11:53:03:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e37ba61cda2665349146e3f47d9626599bc42f0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/3233a5fb64064a6567fcd45ed88e343f9618be7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/6e37ba61cda2665349146e3f47d9626599bc42f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.64.0.0/16
190.132.0.0/14
200.40.0.0/16
200.125.0.0/18
201.217.128.0/18
201.221.32.0/19
Signature Algorithm: sha256WithRSAEncryption
28:dc:6f:cb:da:8c:1f:97:df:7a:69:e7:fc:48:48:7f:34:79:
89:5f:06:f0:12:06:cb:d2:c1:35:60:6b:72:dd:bb:5b:22:56:
69:5c:cc:07:0d:38:a2:32:d2:72:cf:2d:1e:10:ba:51:df:c2:
aa:62:6d:86:d7:37:b6:bf:f2:dd:f8:c7:be:04:e0:6c:78:d7:
9d:af:02:d4:61:67:82:ef:ad:79:d1:8d:09:75:94:1a:56:80:
16:4e:45:cc:eb:f4:29:01:e4:75:d7:be:df:2a:32:0a:61:d1:
03:55:83:6c:db:07:f6:a9:b7:05:ba:6e:25:80:7e:b4:da:dd:
49:bf:a3:26:ec:b8:ef:d2:31:7c:84:1e:72:9e:13:8d:95:16:
49:f1:05:61:7e:1e:d5:a4:24:74:0d:3f:78:91:30:93:a3:10:
ec:88:9d:54:10:3a:a1:2e:f5:3d:ec:d3:35:55:b7:0f:7a:15:
34:a0:25:26:97:3b:66:cb:6d:bf:08:ba:60:b7:83:07:68:0e:
89:f7:59:2c:19:2b:42:9d:ae:6b:ed:a0:aa:c1:18:88:da:de:
ee:b9:ef:09:91:92:d2:7d:30:59:f9:b4:c9:7f:fe:39:97:97:
8d:9b:53:10:ab:5e:93:c9:a6:55:3c:79:53:2d:1a:87:e6:32:
4c:df:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org