Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a2209c6235fa5fe276d3d97efd9eede87bdded54.roa
File: a2209c6235fa5fe276d3d97efd9eede87bdded54.roa (raw, json)
Hash identifier: UuD4EF+oOdX7i2PPrv5gSgYym2du2Jv/1PqvPamO9rs=
Subject key identifier: A6:91:55:EE:53:0D:C0:97:EE:2D:9B:E8:65:A4:E5:6F:D9:5B:FF:AD
Certificate issuer: /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial: 1CA997
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a2209c6235fa5fe276d3d97efd9eede87bdded54.roa
Signing time: Fri 25 Nov 2022 16:11:56 +0000
ROA not before: Sun 17 Jul 2022 03:00:00 +0000
ROA not after: Thu 18 Jul 2024 03:00:00 +0000
asID: 265705
IP address blocks: 186.31.155.0/24 maxlen: 24
190.26.30.0/23 maxlen: 24
186.28.108.0/22 maxlen: 24
186.30.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878423 (0x1ca997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Validity
Not Before: Jul 17 03:00:00 2022 GMT
Not After : Jul 18 03:00:00 2024 GMT
Subject: CN=a2209c6235fa5fe276d3d97efd9eede87bdded54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:d0:70:e6:d3:9d:9f:a9:ab:3c:cc:8d:c4:
b2:f9:43:a5:f3:24:69:98:99:89:9b:13:28:ea:cb:
04:f4:59:fa:8f:de:d9:62:5f:01:45:6c:fd:e2:1d:
ca:0d:9a:aa:bc:da:af:5e:59:f7:29:54:ef:de:e3:
7c:ff:f3:e0:82:26:2a:ea:e0:1e:c1:8c:a4:0e:72:
6f:35:8a:3a:42:6c:4e:97:8c:6a:6c:c8:86:a6:ba:
42:63:37:5a:83:3b:3a:cf:ec:5b:73:45:cd:8c:19:
e6:ea:74:f6:a1:9d:70:09:47:23:35:b7:1e:04:1c:
b9:f9:d2:31:fe:de:9e:fe:82:76:55:7d:85:61:3f:
85:f3:b7:ac:5f:fc:04:f2:68:eb:8e:2c:c6:b9:68:
d0:6b:33:5a:97:1a:fb:69:7f:48:6b:63:48:7a:16:
21:ca:f3:64:35:d9:ec:cf:8e:04:88:52:86:3f:a0:
67:ba:be:2a:71:e4:83:4c:fc:f8:bd:9b:af:de:0d:
c9:37:70:f0:60:a4:56:b8:61:3e:57:3f:63:72:0f:
36:92:33:1b:37:16:21:4a:e5:38:d4:df:1a:a2:83:
02:50:dc:5c:f7:90:cf:44:c6:39:db:ed:92:42:6f:
1b:eb:67:e6:98:d1:81:e5:28:22:27:e0:f1:ae:49:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:91:55:EE:53:0D:C0:97:EE:2D:9B:E8:65:A4:E5:6F:D9:5B:FF:AD
X509v3 Authority Key Identifier:
keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a2209c6235fa5fe276d3d97efd9eede87bdded54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.28.108.0/22
186.30.120.0/22
186.31.155.0/24
190.26.30.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:1c:f1:89:49:14:d3:6b:75:ac:ff:bb:39:49:0e:47:2b:f7:
e0:66:17:5c:a5:b1:e0:31:7e:16:9f:48:af:1e:22:a5:f6:18:
a4:eb:c2:af:5b:88:aa:04:0e:4c:52:6a:47:55:af:79:8a:4f:
ef:84:38:20:99:b6:9f:d0:bf:a8:5f:bf:2b:b4:31:aa:99:5e:
27:e0:c0:57:5c:5d:32:52:2f:cd:82:49:0e:15:d6:6a:e1:f4:
b0:78:48:0a:e1:52:48:34:b3:77:a7:9c:27:bd:32:b3:9d:6e:
cb:0d:4a:b1:51:a8:5f:88:26:dc:de:cd:3b:5a:2d:7a:d4:d4:
0d:33:51:f0:f6:cd:41:75:5b:f3:ca:07:b9:f0:51:25:50:33:
68:a8:b5:88:9b:c4:9d:75:92:ff:ee:d3:2d:f2:fc:d3:70:5d:
05:cb:d1:3c:d7:71:b9:ec:7c:ec:58:4c:ba:15:24:ce:7c:4a:
e5:d3:82:16:d6:43:2d:ca:bc:63:77:a0:8f:ab:1e:d4:6c:88:
35:13:65:7d:42:e1:8c:e1:41:07:ad:23:48:d7:1a:9a:8c:d6:
8f:bd:65:24:5b:47:09:aa:44:9b:f2:53:9c:c5:f8:4d:e8:fd:
60:b0:96:8d:21:7a:ba:0b:72:2e:bc:9e:ac:6b:f4:91:10:a3:
11:6a:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org