Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/06cb2a2d79597b724fc3344aa22cd70a30eda79f.roa
File: 06cb2a2d79597b724fc3344aa22cd70a30eda79f.roa (raw, json)
Hash identifier: SDvEHRX9YKqUgFD9YcaLXU52b+ESlmF9MjoaexUwOWg=
Subject key identifier: 20:BA:C6:C2:D5:77:51:FE:3A:4C:37:17:A8:07:DD:CC:AD:27:E4:EC
Certificate issuer: /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial: 20ED62
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/06cb2a2d79597b724fc3344aa22cd70a30eda79f.roa
Signing time: Tue 23 May 2023 19:01:39 +0000
ROA not before: Mon 22 May 2023 19:01:38 +0000
ROA not after: Tue 23 May 2028 19:01:38 +0000
asID: 23383
IP address blocks: 190.4.0.0/21 maxlen: 24
190.4.8.0/23 maxlen: 24
190.4.11.0/24 maxlen: 24
190.4.12.0/22 maxlen: 24
190.4.16.0/23 maxlen: 24
190.4.18.0/24 maxlen: 24
190.4.20.0/22 maxlen: 24
190.4.25.0/24 maxlen: 24
190.4.26.0/23 maxlen: 24
190.4.28.0/22 maxlen: 24
190.4.32.0/20 maxlen: 24
190.4.48.0/21 maxlen: 24
190.4.56.0/23 maxlen: 24
190.4.58.0/24 maxlen: 24
190.4.60.0/22 maxlen: 24
200.35.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157922 (0x20ed62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
Validity
Not Before: May 22 19:01:38 2023 GMT
Not After : May 23 19:01:38 2028 GMT
Subject: CN=06cb2a2d79597b724fc3344aa22cd70a30eda79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:03:0f:55:c0:f0:ba:ac:66:91:a8:d6:f5:
99:de:5e:bc:e4:d6:0b:6f:16:fc:30:24:f2:f1:ed:
03:94:e4:d1:90:43:c3:88:9c:8b:0a:7f:c2:a3:fc:
22:b4:ce:a0:a8:85:09:85:30:44:62:f8:7e:41:b3:
b6:2b:e1:23:31:2b:4b:33:c4:cb:67:06:89:74:14:
63:d1:e2:c7:ef:d5:60:74:0b:de:0d:d9:54:a8:f6:
8a:69:ac:0b:79:e8:09:ee:ad:c1:de:fa:6e:81:53:
09:cd:dc:02:0a:9e:c5:2a:f1:9d:91:04:1e:23:f4:
d3:fc:e9:74:e1:a8:ea:02:df:81:e3:07:7f:66:a9:
69:c2:91:e1:cd:1f:57:72:7b:d6:3c:92:b7:10:34:
f1:41:f5:40:ce:35:d2:bc:f9:bc:58:7d:65:37:e0:
ad:9f:be:35:5f:58:cc:f5:54:eb:f5:75:af:ce:31:
cb:e0:57:43:4c:d2:9b:56:8b:1b:08:48:eb:11:35:
10:ec:94:f6:e0:a8:12:86:f7:0c:fd:20:7f:d7:c1:
a5:2c:14:d4:c3:b7:a3:b2:f0:2c:b6:70:39:1e:ed:
aa:23:bb:2a:86:be:b2:d1:b0:ee:fa:55:21:1b:02:
c4:41:68:a1:9f:39:08:a3:f6:32:e5:4c:8f:fe:da:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BA:C6:C2:D5:77:51:FE:3A:4C:37:17:A8:07:DD:CC:AD:27:E4:EC
X509v3 Authority Key Identifier:
keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/06cb2a2d79597b724fc3344aa22cd70a30eda79f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.0.0-190.4.9.255
190.4.11.0-190.4.18.255
190.4.20.0/22
190.4.25.0-190.4.58.255
190.4.60.0/22
200.35.165.0/24
Signature Algorithm: sha256WithRSAEncryption
20:52:ac:fd:c4:e3:f9:07:0f:fa:89:9b:3f:d2:48:b1:23:a8:
14:00:f3:15:94:7d:1b:f7:db:cf:4d:8b:4c:f7:b1:c6:2f:fa:
35:ab:65:70:89:d2:05:b9:ab:5d:21:5d:9c:79:c8:1f:03:a7:
89:03:5e:a7:b5:ba:fb:79:53:6e:e6:27:1b:6e:5f:19:2d:c8:
88:17:c6:04:3c:60:58:50:a4:bc:e9:93:6a:a1:9a:00:fd:5b:
54:4c:b6:16:92:d8:14:51:cd:d1:d2:62:71:bf:02:ce:71:ac:
cc:36:f2:4e:e6:5e:7d:b2:39:89:c5:28:6c:69:c2:d7:98:60:
b1:34:7d:44:a2:c7:88:3b:7b:49:bc:e3:e9:e2:68:20:ef:86:
1f:00:95:1c:29:fd:38:a1:e8:37:0c:99:ac:64:02:ff:f7:42:
c7:81:26:84:03:a7:07:28:c6:a5:41:43:cf:06:84:b1:8a:d5:
3a:73:4c:ca:53:e6:b9:0d:03:69:a2:27:fb:70:20:8e:00:56:
9e:02:d2:f7:e3:52:15:ee:2e:f7:2f:3d:f8:fe:6b:98:86:4f:
c0:3f:50:9e:f3:9c:af:91:7e:c6:38:d9:9e:48:66:34:ef:3f:
c2:c7:c4:4f:02:8e:9c:a7:5d:ca:55:06:8c:86:3b:ab:9e:d4:
f5:66:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org