Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/57ca4f9823a9b0385b2938bd141b687b5e5285d8.roa
File: 57ca4f9823a9b0385b2938bd141b687b5e5285d8.roa (raw, json)
Hash identifier: TX+sDITy8rvfHxywULyiAfftft2Z4+92MuW+C1Cc8Kw=
Subject key identifier: BD:79:4D:2F:81:3D:26:80:F1:96:74:A2:5D:BB:37:F3:0B:38:96:1B
Certificate issuer: /CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
Certificate serial: 187AB2
Authority key identifier: 0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/57ca4f9823a9b0385b2938bd141b687b5e5285d8.roa
Signing time: Fri 29 Jul 2022 18:51:54 +0000
ROA not before: Thu 21 Apr 2022 03:00:00 +0000
ROA not after: Sun 21 Apr 2024 03:00:00 +0000
asID: 52471
IP address blocks: 138.99.236.0/22 maxlen: 24
168.228.232.0/22 maxlen: 24
170.244.40.0/22 maxlen: 24
179.51.64.0/20 maxlen: 24
186.148.88.0/21 maxlen: 24
191.97.104.0/22 maxlen: 24
201.49.186.0/23 maxlen: 24
2803:ab00::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604274 (0x187ab2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
Validity
Not Before: Apr 21 03:00:00 2022 GMT
Not After : Apr 21 03:00:00 2024 GMT
Subject: CN=57ca4f9823a9b0385b2938bd141b687b5e5285d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:93:a5:a2:30:5e:a4:d2:bf:50:e0:9a:55:
a8:9e:c7:c9:47:47:4e:d4:28:d3:88:e0:37:8b:c9:
e1:85:4c:76:5e:a3:d2:9f:bd:cd:d0:ea:06:6b:8a:
0b:d8:31:f7:31:d2:c4:0a:7e:3e:97:a8:93:3e:e7:
e8:58:b1:53:6d:35:77:e0:97:70:7f:47:21:6b:3c:
77:78:c7:f2:18:54:b6:f6:0e:d1:6a:da:bf:75:14:
6f:19:06:1e:26:9f:c7:3b:a7:77:c0:bd:fb:90:8f:
b4:b2:bc:1f:16:e2:a3:8c:d4:f2:18:f9:c1:87:50:
bb:a5:66:cd:74:02:a7:f5:50:18:0e:bd:a9:5d:21:
a2:53:52:86:e7:b7:13:81:1e:c8:39:80:50:42:8f:
b7:95:6a:8c:16:17:62:4c:ff:88:cd:ce:d1:07:4b:
0a:ad:a1:be:5f:10:ff:b5:1a:84:7f:6d:63:ec:ec:
68:7f:7a:2c:c6:41:13:67:aa:69:f8:44:4c:82:18:
d3:c5:68:a1:5f:d1:6b:b9:4c:51:50:d3:68:16:09:
e1:3d:9d:7c:db:d2:70:1b:e2:fd:30:a7:49:93:a8:
f0:06:7f:e7:fd:03:c3:e5:e6:e6:b8:2b:48:fd:8e:
90:14:76:b3:31:85:ba:c1:cf:8a:7a:a7:d8:b4:9b:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:4D:2F:81:3D:26:80:F1:96:74:A2:5D:BB:37:F3:0B:38:96:1B
X509v3 Authority Key Identifier:
keyid:0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/57ca4f9823a9b0385b2938bd141b687b5e5285d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.236.0/22
168.228.232.0/22
170.244.40.0/22
179.51.64.0/20
186.148.88.0/21
191.97.104.0/22
201.49.186.0/23
IPv6:
2803:ab00::/32
Signature Algorithm: sha256WithRSAEncryption
58:d3:07:c7:c1:fd:62:54:b7:d5:e0:64:d6:ae:de:c5:e3:c3:
0b:c7:88:e8:4f:b3:f1:f8:02:ba:ad:4e:33:14:7b:13:d5:03:
dd:de:7e:b6:7b:7f:db:4c:6c:b7:56:05:14:f0:38:ee:b5:ff:
f7:07:29:92:d6:1d:70:4d:9a:de:40:12:d9:6e:a3:82:29:00:
4a:bf:77:1d:b3:a5:7e:fc:5a:e4:4f:f2:7a:d8:bd:b5:d0:af:
a0:12:65:3c:a5:6f:c6:e1:c5:e4:d3:7b:b9:ef:cf:ea:2f:5c:
86:72:e0:a1:f3:34:b2:e5:a9:dc:54:2e:62:34:ba:1c:12:99:
45:18:63:7a:e4:20:ab:6e:d9:52:f6:54:ca:a3:cc:06:56:c1:
32:7b:c6:27:b4:3b:34:4a:48:ac:16:d6:54:3e:15:b3:59:87:
40:a7:78:06:a9:8d:81:2b:3f:7f:33:c2:de:6f:82:18:d4:e6:
60:23:1e:1c:96:b1:f4:ea:48:56:0e:0c:01:52:10:82:33:ea:
12:9d:78:ef:95:e0:b5:65:62:53:1a:4a:c4:5c:d7:4f:47:dc:
35:cd:1a:d4:2e:92:19:ef:53:2a:27:d9:6c:13:1c:02:c1:a2:
b7:cc:27:77:09:64:15:2c:11:24:89:d8:32:f7:74:90:86:67:
29:3d:37:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org