Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a4c690544beb4f5207a8227f954cbc92ebaf20bf.roa
File: a4c690544beb4f5207a8227f954cbc92ebaf20bf.roa (raw, json)
Hash identifier: yoxXhU0oH78pHycwUnaE0RkwaC+NOijLDd3bZSMzbvg=
Subject key identifier: DB:55:E9:3E:6A:35:61:C4:11:D6:F5:03:CD:34:B1:36:8A:F5:33:E3
Certificate issuer: /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial: 21C18E
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a4c690544beb4f5207a8227f954cbc92ebaf20bf.roa
Signing time: Fri 09 Jun 2023 18:33:59 +0000
ROA not before: Thu 08 Jun 2023 18:33:58 +0000
ROA not after: Mon 09 Jun 2025 18:33:58 +0000
asID: 265705
IP address blocks: 186.28.108.0/22 maxlen: 24
186.31.128.0/22 maxlen: 24
190.26.30.0/23 maxlen: 24
186.31.155.0/24 maxlen: 24
186.28.176.0/22 maxlen: 24
186.28.180.0/23 maxlen: 24
186.28.184.0/22 maxlen: 24
186.30.120.0/22 maxlen: 24
190.27.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212238 (0x21c18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Validity
Not Before: Jun 8 18:33:58 2023 GMT
Not After : Jun 9 18:33:58 2025 GMT
Subject: CN=a4c690544beb4f5207a8227f954cbc92ebaf20bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:5f:1d:ef:9c:9f:e1:ff:96:9f:d4:20:2a:
ab:00:5d:6c:db:92:26:4e:03:90:71:c5:6a:89:86:
64:02:0c:d8:91:22:d5:a1:1a:97:48:3d:67:4e:91:
95:15:07:e2:47:00:52:a6:b2:10:68:50:2c:c7:3e:
ee:9f:a5:30:0a:fb:87:ee:37:4e:5b:f5:c7:75:65:
5e:3a:a0:34:e5:88:1a:f4:a5:c7:a6:85:26:8e:d9:
e1:3e:f1:65:01:55:62:95:0b:74:6f:e2:61:02:f0:
46:47:bc:70:02:ae:a6:fb:e9:18:de:f3:8c:18:53:
0b:ad:25:ee:5b:dc:51:94:72:41:e7:58:89:e1:e1:
93:13:63:77:41:66:32:3d:3b:10:32:d0:54:30:66:
bf:e0:b9:7f:d0:ed:65:23:d6:c2:87:54:f3:23:52:
be:c1:6e:3a:a4:39:37:52:67:80:f8:6c:75:f5:4c:
2a:db:b0:74:25:e2:11:f2:b4:79:8e:61:03:a9:42:
b4:8a:94:ae:d4:0d:67:ee:f1:0f:c7:aa:ed:cf:65:
1b:4a:b7:91:c4:fb:eb:a4:91:f8:ea:1c:87:5c:a0:
9d:d3:0a:b5:07:84:66:84:1f:de:aa:da:84:2a:e0:
bc:4f:db:8a:da:a9:eb:eb:19:86:ff:84:8e:af:58:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:55:E9:3E:6A:35:61:C4:11:D6:F5:03:CD:34:B1:36:8A:F5:33:E3
X509v3 Authority Key Identifier:
keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a4c690544beb4f5207a8227f954cbc92ebaf20bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.28.108.0/22
186.28.176.0-186.28.181.255
186.28.184.0/22
186.30.120.0/22
186.31.128.0/22
186.31.155.0/24
190.26.30.0/23
190.27.136.0/22
Signature Algorithm: sha256WithRSAEncryption
65:8e:05:3d:65:2c:10:8c:c3:5b:4f:bd:6b:d6:3a:6f:c1:98:
11:b9:f8:f4:18:82:8e:71:1c:88:59:66:3f:79:37:03:d2:73:
86:a5:63:75:70:dd:10:17:ba:2f:75:8d:1a:89:80:5d:5a:86:
cc:26:6b:da:69:f4:49:d7:23:8b:f1:7d:f7:9f:86:a9:a0:cf:
84:9f:06:a7:b6:5d:36:5e:d8:b4:dd:2a:37:e2:0a:01:91:f3:
a7:c7:5f:f0:6a:71:f7:b5:ac:7f:18:19:06:ec:f9:c5:4a:13:
06:41:7f:85:14:17:ea:0a:b2:fb:d8:b2:8a:2d:90:8e:b5:95:
08:62:84:2d:c2:66:69:db:84:3f:41:f2:92:ee:82:01:5b:75:
47:e2:7d:dc:1f:3b:c5:f6:bf:36:d0:e4:34:38:88:5e:02:ff:
5f:51:28:ea:18:07:88:bb:85:c5:7c:85:c0:49:da:39:1a:95:
3f:be:53:b6:43:ca:b5:eb:64:d9:2f:05:3f:b4:d7:04:78:ed:
4c:4e:c8:3f:d9:dc:c0:a2:4d:b6:76:db:84:89:4f:da:62:c0:
a1:4b:e6:84:b9:1f:37:58:7a:97:08:d6:14:83:77:77:19:57:
a1:3d:5c:b0:ec:83:00:60:cf:25:fb:01:40:74:2c:ad:5b:06:
3f:25:aa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org