Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8bf92eb84a2a7b51fc66df83effd584c4e0fe15.roa
File: f8bf92eb84a2a7b51fc66df83effd584c4e0fe15.roa (raw, json)
Hash identifier: xU0i3dSvMUE+RI33/2k21mxw0sSQQzcgKweiG3V4ibA=
Subject key identifier: E2:E2:6A:62:36:6E:71:E6:53:CC:8A:33:65:A1:18:4A:B0:91:2F:1B
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2D98D2
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8bf92eb84a2a7b51fc66df83effd584c4e0fe15.roa
Signing time: Thu 07 Dec 2023 12:42:10 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 264642
IP address blocks: 190.228.115.0/24 maxlen: 24
190.228.116.0/23 maxlen: 24
186.125.199.0/24 maxlen: 24
186.125.200.0/23 maxlen: 24
190.137.162.0/23 maxlen: 23
190.228.64.0/23 maxlen: 24
190.228.88.0/22 maxlen: 24
190.228.93.0/24 maxlen: 24
190.228.94.0/24 maxlen: 24
181.105.228.0/22 maxlen: 22
190.30.254.0/24 maxlen: 24
190.228.42.0/23 maxlen: 24
190.228.165.0/24 maxlen: 24
190.228.166.0/23 maxlen: 24
200.73.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2988242 (0x2d98d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=f8bf92eb84a2a7b51fc66df83effd584c4e0fe15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:97:86:24:8a:c2:9c:ea:bf:ca:e0:2d:3e:75:
14:8a:e6:47:10:64:9b:82:7d:d8:6c:9e:80:c5:2c:
80:e8:56:b6:b6:25:47:bc:34:39:29:3d:42:2f:d4:
70:b7:df:c1:54:ae:8d:9f:58:f4:52:8f:2f:52:62:
37:d0:ac:20:3b:d7:4f:63:9b:a5:4f:21:e7:b9:bd:
b3:f7:d1:e7:81:2a:fd:05:e3:3d:ec:7f:3a:c3:9a:
9a:ae:f9:84:2f:d2:d6:1a:a2:7c:54:ab:d2:f3:08:
ca:58:61:25:d5:4a:3d:ab:32:b4:3e:57:0d:b0:d4:
5a:52:9e:ff:90:b4:68:c3:f9:b3:51:7a:6c:2c:3f:
44:ed:4c:f9:c7:25:b3:fb:44:4d:d2:a4:6c:2c:5b:
14:47:2b:9d:8b:d0:c6:82:b9:87:74:64:c7:40:d9:
a2:6e:a5:4b:8d:97:e7:f7:88:ef:c3:de:2b:7e:29:
64:06:cf:d8:75:c7:0a:fa:f2:4d:fc:63:8d:dd:4d:
24:be:65:34:60:58:a4:5a:3e:9a:c7:e6:ea:b4:cb:
39:12:0c:43:74:38:25:1d:37:be:25:70:68:e9:6e:
d2:b8:ee:b4:b0:ef:2a:d4:06:0e:58:14:5c:82:32:
0b:9c:56:c0:99:35:31:ea:c4:19:32:b8:75:07:b6:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E2:6A:62:36:6E:71:E6:53:CC:8A:33:65:A1:18:4A:B0:91:2F:1B
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8bf92eb84a2a7b51fc66df83effd584c4e0fe15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.105.228.0/22
186.125.199.0-186.125.201.255
190.30.254.0/24
190.137.162.0/23
190.228.42.0/23
190.228.64.0/23
190.228.88.0/22
190.228.93.0-190.228.94.255
190.228.115.0-190.228.117.255
190.228.165.0-190.228.167.255
200.73.188.0/22
Signature Algorithm: sha256WithRSAEncryption
78:26:7a:00:28:e3:8f:d2:58:70:b1:e9:01:6f:b0:4b:a4:a9:
86:80:b0:29:80:58:b2:0e:69:91:d3:02:84:46:bf:80:a6:c2:
d9:5f:b1:b7:7b:13:53:05:f5:74:78:d3:26:e9:2b:b6:27:c0:
72:ed:6e:92:6d:3c:c0:4f:68:1b:cb:a8:6c:6b:9e:7c:f4:43:
53:d6:ae:27:9b:a8:4c:3b:aa:1f:87:70:64:d7:a5:b8:3f:6a:
4a:12:f9:97:91:87:17:16:ab:dc:15:5d:50:7a:79:92:b7:c5:
50:3e:79:0e:22:9e:0a:46:b3:5d:e7:fd:ed:fe:7e:4a:61:e6:
81:00:e1:a0:df:0b:a1:0f:cd:b6:22:df:69:56:1e:cf:e0:7e:
17:99:b0:0b:81:8d:7f:6a:38:a6:00:36:fa:5a:42:10:ce:31:
a7:3e:a7:7d:b3:d4:3d:74:69:9f:31:42:bc:37:a0:9c:66:2e:
54:d4:f8:ad:8c:5b:e0:57:3b:77:65:25:45:2f:04:d3:b2:77:
0d:2a:5d:de:70:8a:21:5a:d7:78:7e:c0:88:b0:77:18:aa:a0:
34:c1:6b:73:b0:21:b8:2d:e0:69:8d:71:08:65:55:44:dc:cf:
ec:56:3c:ea:44:aa:39:fb:74:06:4a:3b:3f:6a:7d:f0:c9:69:
7c:c0:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org