Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/1274d5fcfd124a4ac267c7a2b278cb6412baf365.roa
File: 1274d5fcfd124a4ac267c7a2b278cb6412baf365.roa (raw, json)
Hash identifier: uNd6zp+TLJdxWKEpOl5pYLNHzgC/dF9s1HdIjV2AKd8=
Subject key identifier: E2:3C:69:96:3C:F9:FD:24:1A:05:BE:31:8C:E3:78:9C:D7:0C:8F:39
Certificate issuer: /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial: 2914FC
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/1274d5fcfd124a4ac267c7a2b278cb6412baf365.roa
Signing time: Fri 05 Apr 2024 22:30:54 +0000
ROA not before: Fri 05 Apr 2024 22:30:54 +0000
ROA not after: Sun 05 Apr 2026 22:30:54 +0000
asID: 52468
IP address blocks: 190.60.112.104/30 maxlen: 30
190.60.113.36/30 maxlen: 30
190.60.113.48/29 maxlen: 29
190.60.116.92/30 maxlen: 30
190.60.193.216/30 maxlen: 30
190.60.200.24/29 maxlen: 29
190.60.203.136/29 maxlen: 29
190.60.243.96/28 maxlen: 28
190.60.243.128/28 maxlen: 28
190.60.243.144/29 maxlen: 29
200.91.204.148/30 maxlen: 30
200.91.204.152/29 maxlen: 29
200.91.204.168/29 maxlen: 29
200.91.204.180/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2692348 (0x2914fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
Validity
Not Before: Apr 5 22:30:54 2024 GMT
Not After : Apr 5 22:30:54 2026 GMT
Subject: CN=1274d5fcfd124a4ac267c7a2b278cb6412baf365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:52:5d:5c:c8:d3:57:e2:ca:8c:c0:b3:44:
99:12:fe:21:54:2d:4e:e5:e5:58:74:fa:ee:45:52:
85:d8:1d:ec:f8:bf:8d:48:20:c8:65:ea:ae:e8:1d:
10:7f:86:37:5a:f2:21:0f:c4:e0:ff:46:f8:4b:21:
97:b1:e1:bb:e9:5f:56:88:30:51:2b:a5:ea:cd:f9:
a6:b8:4f:86:b4:61:bf:82:c6:c0:03:6e:c3:ae:99:
06:84:16:dc:85:24:d4:bf:34:16:27:4e:ef:52:1d:
0f:36:9f:d5:e2:03:9f:69:9a:94:f3:18:3b:9d:c4:
dd:6a:35:13:4b:e3:f2:a3:15:2b:a3:ce:87:5d:89:
68:cb:dd:75:63:2d:06:02:4b:ad:e5:87:7d:9c:35:
5f:ae:9c:4f:0a:4d:69:3c:05:a8:5c:35:de:81:d0:
35:ab:43:8c:df:0a:53:23:d8:2b:20:c4:41:a1:03:
ee:91:35:b8:26:96:c3:72:89:f0:6a:8f:57:0f:a8:
88:48:f2:12:8e:8b:a9:8e:99:ac:bd:85:21:3c:90:
18:fe:b8:29:9f:10:94:5a:00:43:bb:23:aa:a0:0c:
e3:bb:6d:0f:9d:b7:11:62:54:5d:0c:91:21:cf:c6:
20:42:4b:6f:5c:5b:5a:93:93:85:b8:8f:bc:ea:06:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3C:69:96:3C:F9:FD:24:1A:05:BE:31:8C:E3:78:9C:D7:0C:8F:39
X509v3 Authority Key Identifier:
keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/1274d5fcfd124a4ac267c7a2b278cb6412baf365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.60.112.104/30
190.60.113.36/30
190.60.113.48/29
190.60.116.92/30
190.60.193.216/30
190.60.200.24/29
190.60.203.136/29
190.60.243.96/28
190.60.243.128-190.60.243.151
200.91.204.148-200.91.204.159
200.91.204.168/29
200.91.204.180/30
Signature Algorithm: sha256WithRSAEncryption
bc:5c:40:5c:27:71:fc:48:bf:57:18:de:f8:07:65:b4:20:71:
90:22:6d:1a:a6:38:16:c2:2f:a3:4f:51:9b:4f:b4:f6:3e:6e:
a0:58:67:25:88:a7:2d:6c:05:a1:ee:9b:e2:28:27:bf:2e:e7:
00:cc:db:d7:b5:0f:5f:c2:c7:16:8f:c9:8c:3f:ba:cd:06:4b:
e4:16:1e:dc:c3:3b:d8:7a:78:a2:ca:72:c1:f0:73:dd:f6:5e:
bc:99:d2:38:c7:68:3b:80:e7:3a:af:9f:62:70:57:75:ab:96:
d3:0f:dc:46:98:91:84:0b:6f:68:7d:33:82:6b:aa:40:6a:9d:
c1:9e:a9:e4:7e:8e:4a:44:05:c5:bc:a7:73:cb:95:c8:96:e4:
8a:e4:8d:92:43:69:8d:70:4e:99:15:71:f6:d2:a3:0d:8f:a9:
d9:f8:0b:2e:34:37:46:86:aa:46:15:e0:fa:06:ac:ab:09:30:
aa:b6:60:ea:eb:56:76:70:af:40:8c:b4:9c:e6:b1:73:83:70:
b1:47:ec:ae:e2:a2:b0:0b:09:69:db:3a:af:aa:10:27:a1:2c:
48:fa:d6:54:c5:e5:a7:8d:67:dc:2e:1b:71:23:ea:cb:78:42:
9a:1d:c8:c4:b5:6a:81:98:a6:ea:15:a8:04:2d:5d:6b:43:79:
04:70:5f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org