Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/e406ce600b2ec41138825b1fefc41f0b5a30f9d7.roa
File: e406ce600b2ec41138825b1fefc41f0b5a30f9d7.roa (raw, json)
Hash identifier: 9tO/r02gvXfTEwHJNx+e7npDQUnyihG7/Q7XdSanqHY=
Subject key identifier: 3A:02:C6:3B:1A:D8:C4:C1:24:49:DD:FE:7F:13:88:FC:52:AF:72:2D
Certificate issuer: /CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Certificate serial: 1122F7
Authority key identifier: EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/e406ce600b2ec41138825b1fefc41f0b5a30f9d7.roa
Signing time: Tue 06 Dec 2022 12:43:19 +0000
ROA not before: Mon 21 Jun 2021 03:00:00 +0000
ROA not after: Thu 29 Jun 2023 03:00:00 +0000
asID: 27775
IP address blocks: 138.186.208.0/22 maxlen: 22
186.179.128.0/17 maxlen: 24
190.98.0.0/17 maxlen: 24
190.98.0.0/19 maxlen: 24
190.98.32.0/19 maxlen: 24
190.98.64.0/19 maxlen: 24
190.98.96.0/19 maxlen: 24
200.1.156.0/22 maxlen: 24
200.2.160.0/20 maxlen: 24
200.2.176.0/20 maxlen: 24
2803:a200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123063 (0x1122f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Validity
Not Before: Jun 21 03:00:00 2021 GMT
Not After : Jun 29 03:00:00 2023 GMT
Subject: CN=e406ce600b2ec41138825b1fefc41f0b5a30f9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:34:1e:75:b6:16:f0:36:cc:23:bb:1e:6d:
2d:5b:61:70:b3:8e:7a:8e:f6:9b:5d:83:ad:01:35:
4e:5c:63:6a:e7:2e:ee:40:f1:1a:d9:76:69:4f:00:
b5:15:56:19:cd:37:31:98:6b:9e:84:ca:d2:9f:ab:
63:42:0d:7c:f1:4e:f9:0b:ed:76:24:17:54:0c:34:
8d:a1:06:ba:37:b9:1a:54:b8:b6:9f:f4:fd:e3:4e:
bb:e7:41:88:1e:64:fa:28:c2:51:b3:7a:41:21:09:
a2:99:50:7d:d9:01:69:64:a8:79:08:f1:73:bc:6f:
50:bd:87:b7:be:5c:f3:33:82:9f:63:ad:36:f1:45:
0a:ec:6d:b9:56:ac:d4:3b:f4:7f:d1:f3:e0:52:4e:
52:50:83:f2:46:a1:8a:01:b5:95:fd:ea:f7:15:d3:
d5:e5:78:77:28:4f:c5:9a:8e:01:1c:80:b2:f5:00:
db:31:a6:68:44:68:43:78:ad:d6:92:67:f2:69:4e:
40:4c:39:da:83:f5:39:13:1b:46:bc:c7:1b:4c:ec:
59:4a:ce:33:8d:c3:6c:7b:e4:ac:1e:14:55:45:97:
79:d9:7f:f5:54:6d:06:da:c3:08:c4:fb:43:c0:4d:
47:13:b2:fb:9e:9e:8d:62:40:37:fa:f3:d9:a4:5f:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:02:C6:3B:1A:D8:C4:C1:24:49:DD:FE:7F:13:88:FC:52:AF:72:2D
X509v3 Authority Key Identifier:
keyid:EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/e406ce600b2ec41138825b1fefc41f0b5a30f9d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/5f073dc50d388f5e4b8416173329e5c9fb55bacc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.208.0/22
186.179.128.0/17
190.98.0.0/17
200.1.156.0/22
200.2.160.0/19
IPv6:
2803:a200::/32
Signature Algorithm: sha256WithRSAEncryption
07:97:ef:23:31:ab:7c:3f:a0:bb:1c:e1:ce:65:60:9d:ef:a6:
54:ea:17:e0:d5:81:a0:d7:14:04:72:5a:ba:ff:f3:36:9d:53:
90:1c:50:b9:a8:8f:20:df:df:1a:d0:b1:72:44:5f:9c:51:fd:
f5:d9:09:37:2d:29:49:2e:5e:af:35:13:f3:7f:bd:24:09:33:
e1:33:4d:d1:36:d7:5f:d2:f0:95:1c:7d:00:77:da:6f:1c:b4:
04:99:13:39:80:99:04:e8:9e:98:78:23:72:92:5a:77:25:76:
38:77:1d:cf:46:f2:db:e9:e7:46:3b:23:e3:de:8b:ca:60:32:
04:87:96:47:e4:11:27:b9:fc:fe:8e:60:8d:52:98:85:b0:e0:
f8:86:02:f7:41:90:f5:e8:2e:8c:7e:fe:78:0b:17:99:54:74:
82:13:1e:6c:a0:96:4f:66:b0:a8:f3:80:51:3e:43:0f:c5:01:
49:00:6d:32:44:98:d3:2d:90:45:bc:3c:7d:6f:35:cb:c4:f1:
45:15:12:20:2c:22:c2:8c:d1:f4:39:78:84:4e:64:1a:ce:6c:
b0:d7:ea:1d:ea:12:f4:2f:8e:12:4e:fa:31:5e:7b:99:9d:c7:
e4:31:13:88:0e:94:0a:6e:2f:db:6e:49:89:a6:dc:23:77:12:
59:50:93:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org