Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/b7c0a9015a7510968d8042a7fafd1c2fdba1ec04.roa
File: b7c0a9015a7510968d8042a7fafd1c2fdba1ec04.roa (raw, json)
Hash identifier: EgEbhig89KDZywcpMonZ65Pjj46z98Zrd9PM1NosguE=
Subject key identifier: ED:10:B5:BC:8F:47:AA:A0:F9:58:6E:B2:B1:B4:52:3A:B3:D8:B5:AB
Certificate issuer: /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial: 1F9FFF
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/b7c0a9015a7510968d8042a7fafd1c2fdba1ec04.roa
Signing time: Wed 03 May 2023 14:44:56 +0000
ROA not before: Tue 02 May 2023 14:44:56 +0000
ROA not after: Sat 03 May 2025 14:44:56 +0000
asID: 52392
IP address blocks: 190.99.120.0/21 maxlen: 21
190.99.120.0/24 maxlen: 24
190.99.121.0/24 maxlen: 24
190.99.122.0/24 maxlen: 24
190.99.123.0/24 maxlen: 24
190.99.124.0/24 maxlen: 24
190.99.125.0/24 maxlen: 24
190.99.126.0/24 maxlen: 24
190.99.127.0/24 maxlen: 24
2803:b100:9::/48 maxlen: 48
2803:b100:b::/48 maxlen: 48
2803:b100:a::/48 maxlen: 48
2803:b100:8::/48 maxlen: 48
2803:b100:1::/48 maxlen: 48
2803:b100::/48 maxlen: 48
2803:b100:3::/48 maxlen: 48
2803:b100:2::/48 maxlen: 48
2803:b100:6::/48 maxlen: 48
2803:b100:e::/48 maxlen: 48
2803:b100:7::/48 maxlen: 48
2803:b100:c::/48 maxlen: 48
2803:b100:f::/48 maxlen: 48
2803:b100:4::/48 maxlen: 48
2803:b100:d::/48 maxlen: 48
2803:b100:5::/48 maxlen: 48
2803:b100::/44 maxlen: 44
2803:b100:10::/44 maxlen: 44
2803:b100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072575 (0x1f9fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
Validity
Not Before: May 2 14:44:56 2023 GMT
Not After : May 3 14:44:56 2025 GMT
Subject: CN=b7c0a9015a7510968d8042a7fafd1c2fdba1ec04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:67:b1:99:cd:e4:b5:d6:ee:ce:c5:c2:62:
b5:09:26:16:b9:c7:2b:00:7b:f4:ea:5a:94:cf:80:
06:ae:05:5e:55:d6:2d:db:dc:e7:b9:eb:d4:ad:07:
fe:4f:6e:d7:1a:8c:6b:ff:13:91:8b:51:5a:25:92:
b8:35:ae:2a:38:16:bb:ad:fe:2f:7f:b0:3b:61:ed:
fa:14:d1:fe:7a:80:c6:c5:62:d6:49:65:e1:79:9b:
fe:fa:5b:c0:f7:01:27:f5:86:95:ea:db:b6:7c:e3:
17:3a:ad:f8:fa:16:ac:73:ab:36:5c:07:af:46:f6:
ea:eb:b5:2d:03:60:7e:cd:73:d6:f5:d9:e1:e3:db:
93:4d:79:1a:8e:bc:bc:50:64:44:ac:3e:15:e8:c8:
4d:20:56:b9:a0:41:97:1d:0c:cd:cc:c9:ea:c1:c3:
89:cc:07:e9:fb:db:2b:6d:6d:4a:11:24:e9:01:f5:
df:9e:10:9e:98:77:cd:68:16:4c:02:f2:1b:7d:c5:
84:d5:bf:4a:a7:6d:af:a5:c7:0e:15:51:24:23:06:
6a:ac:39:e2:be:3e:c1:31:9a:a6:88:ec:71:83:f1:
94:91:f4:50:32:6d:75:18:46:08:52:68:30:dd:14:
d5:fb:cf:9c:13:27:8b:3e:33:46:73:9d:49:98:0f:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:10:B5:BC:8F:47:AA:A0:F9:58:6E:B2:B1:B4:52:3A:B3:D8:B5:AB
X509v3 Authority Key Identifier:
keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/b7c0a9015a7510968d8042a7fafd1c2fdba1ec04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.120.0/21
IPv6:
2803:b100::/32
Signature Algorithm: sha256WithRSAEncryption
63:37:15:7a:3d:9e:db:e7:45:10:1c:57:6d:c7:ee:0b:0f:bc:
96:56:62:aa:b3:72:76:fc:ca:d6:f4:a7:2a:3b:99:49:20:9e:
1f:fa:5b:5c:0f:76:84:02:ad:1c:6f:a6:07:ef:85:18:3f:c6:
12:db:f0:f0:fa:c5:5d:d8:30:ac:7d:d2:49:3a:db:15:f1:02:
90:fa:21:93:99:60:a7:2b:b5:ed:e6:a3:f5:08:0e:b7:e3:44:
22:fd:d5:17:0e:46:ef:5a:a2:e8:aa:b2:2d:3b:0f:ca:7f:0e:
39:24:f7:48:d8:0c:d2:73:b7:83:9e:52:09:18:21:e8:3d:c9:
16:26:b0:67:b3:5d:cf:4c:14:b1:d6:09:95:9d:46:25:84:d8:
2f:98:e0:ad:95:7c:85:4c:b4:b8:f9:1b:8d:5a:96:e1:d5:72:
9a:10:c8:e4:b4:2e:5e:41:df:d2:b2:2c:af:b3:3d:b1:f0:89:
db:e5:1c:04:b2:e0:96:6e:a9:0d:8f:20:9b:9b:64:8f:aa:41:
14:91:7c:d6:7b:73:19:63:44:85:1e:b6:74:04:7c:e0:53:03:
47:aa:35:3d:e2:6b:50:6d:fc:8d:1c:1e:2c:9c:f2:14:85:37:
37:3d:36:d0:c8:f7:15:72:20:99:2d:f2:18:f9:24:b9:e0:f9:
63:b2:9b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:44 2025 by rpki-client