Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/939da845f4434b5fd2dcb6b55a07518377b3299c.roa
File: 939da845f4434b5fd2dcb6b55a07518377b3299c.roa (raw, json)
Hash identifier: 3xPbdKG47w1sKgWXI+BK1B14y4EpcMLXDDMlmHJ1iU8=
Subject key identifier: 6A:BB:22:FF:37:BF:87:74:08:DE:32:6C:89:39:05:90:CE:AE:44:27
Certificate issuer: /CN=e6245b6703466ee65faded994e4250d58dcd651f
Certificate serial: 0E58D5
Authority key identifier: 7B:F5:EB:DF:F4:09:D5:9E:D0:39:A6:33:9B:B1:44:C1:54:3E:BF:F9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6245b6703466ee65faded994e4250d58dcd651f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/939da845f4434b5fd2dcb6b55a07518377b3299c.roa
Signing time: Wed 17 May 2023 13:10:54 +0000
ROA not before: Tue 16 May 2023 13:10:54 +0000
ROA not after: Sat 17 May 2025 13:10:54 +0000
asID: 16921
IP address blocks: 200.108.120.0/21 maxlen: 24
179.61.64.0/20 maxlen: 24
200.81.112.0/21 maxlen: 24
2803:1c80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940245 (0xe58d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6245b6703466ee65faded994e4250d58dcd651f
Validity
Not Before: May 16 13:10:54 2023 GMT
Not After : May 17 13:10:54 2025 GMT
Subject: CN=939da845f4434b5fd2dcb6b55a07518377b3299c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d0:f1:91:b1:1b:27:ef:16:7e:ea:9e:8f:55:
3f:91:9f:4e:f4:0d:fc:70:9d:4b:dd:55:d9:c7:26:
5a:cd:6a:97:59:4f:42:22:8d:7b:28:90:4e:ec:39:
2e:ef:29:5d:e4:2c:cc:59:0c:d3:a8:09:84:7d:1d:
8b:b1:86:ce:3d:2c:3c:f8:2d:16:58:c9:77:d4:ca:
d4:0b:0e:96:b6:76:6d:ae:48:56:ba:ba:9b:1f:05:
e5:5a:5d:7e:8d:3b:a7:51:c1:1f:eb:f7:7c:12:41:
32:90:87:6f:8d:c9:77:0e:88:29:e3:32:af:d1:54:
c0:4b:64:d1:7e:93:dc:1a:ca:f5:ea:14:17:4b:10:
5e:1c:76:a6:d8:f0:80:15:03:07:74:93:f9:51:e7:
f3:8b:0a:d7:73:61:e2:e1:4f:b2:04:05:33:17:03:
8b:3e:fb:42:e9:3b:89:d6:fb:9b:97:d9:db:1f:83:
fd:e2:19:30:dd:8f:cf:3f:ae:16:77:34:30:2f:36:
fa:16:9d:49:32:89:2b:f9:97:db:cd:0b:fd:c8:47:
10:cd:9e:9e:76:61:fb:73:15:ae:0e:e7:d7:10:e3:
fc:b1:d4:e6:ac:a8:ab:61:a6:49:88:f8:3f:ee:a7:
54:c7:a0:d6:a0:db:5a:1f:3a:0b:1a:12:dc:ee:1d:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BB:22:FF:37:BF:87:74:08:DE:32:6C:89:39:05:90:CE:AE:44:27
X509v3 Authority Key Identifier:
keyid:7B:F5:EB:DF:F4:09:D5:9E:D0:39:A6:33:9B:B1:44:C1:54:3E:BF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6245b6703466ee65faded994e4250d58dcd651f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/939da845f4434b5fd2dcb6b55a07518377b3299c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/e6245b6703466ee65faded994e4250d58dcd651f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.64.0/20
200.81.112.0/21
200.108.120.0/21
IPv6:
2803:1c80::/32
Signature Algorithm: sha256WithRSAEncryption
12:c4:5d:c1:d9:f4:9d:6d:b2:29:59:31:9d:d8:29:7d:46:9b:
31:ad:de:6e:83:14:12:ee:5e:3c:c2:e6:2c:04:ef:33:91:a8:
03:e6:c1:98:9b:67:23:2f:bf:79:25:46:48:78:72:43:f5:d9:
98:6d:b5:0a:e3:d8:53:6e:b9:9c:db:7c:95:22:c3:de:6a:92:
bc:18:7b:47:09:7a:4a:06:96:b3:41:d6:15:0f:ba:71:ee:1b:
49:ef:f9:9c:10:60:1e:4d:90:11:4e:b5:a7:7a:90:c7:72:b8:
c1:0b:33:5b:29:d7:02:60:94:f4:37:e1:f0:a8:0d:3f:11:15:
14:2b:d6:74:41:c5:b1:13:d0:12:c9:9f:fb:2c:4c:ff:4a:fc:
ae:fd:05:b1:9b:16:01:52:84:6e:63:51:4f:00:31:a9:b7:1d:
2b:fb:d1:b9:9f:c6:97:cf:18:9c:49:05:ca:de:32:c3:ed:02:
95:b1:81:e0:9a:61:89:a7:fe:26:d5:d9:40:43:ab:09:c3:19:
28:99:83:c7:6c:9e:7a:60:21:a3:31:70:33:d4:43:72:f3:69:
e8:b9:af:d4:d2:c2:1e:5c:9f:a8:bd:7f:0b:f2:60:29:5e:49:
10:72:0f:2b:e7:3f:6e:41:13:51:ea:24:b0:c1:e1:9f:37:40:
be:6e:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:16:07 2025 by rpki-client