Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/66fd456523218e1aa6501bc2cf8c36de47d55255.roa
File: 66fd456523218e1aa6501bc2cf8c36de47d55255.roa (raw, json)
Hash identifier: +zHsjHWh0fraYqpPPQFZ5opYUwaIginyiPhbuFIlfs0=
Subject key identifier: 8C:E8:72:AC:40:9E:F1:EB:B7:0A:E6:11:32:C2:72:20:B8:CF:32:E3
Certificate issuer: /CN=c804815bcdfef674dc896f6b3f2e0b169560053d
Certificate serial: 147652
Authority key identifier: 50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/66fd456523218e1aa6501bc2cf8c36de47d55255.roa
Signing time: Thu 11 Jan 2024 19:36:36 +0000
ROA not before: Thu 11 Jan 2024 19:36:35 +0000
ROA not after: Sun 11 Jan 2026 19:36:35 +0000
asID: 263740
IP address blocks: 170.246.52.0/22 maxlen: 22
143.137.164.0/22 maxlen: 22
161.0.0.0/19 maxlen: 19
168.205.160.0/22 maxlen: 22
138.99.36.0/22 maxlen: 22
186.65.112.0/20 maxlen: 20
2803:6c00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1341010 (0x147652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c804815bcdfef674dc896f6b3f2e0b169560053d
Validity
Not Before: Jan 11 19:36:35 2024 GMT
Not After : Jan 11 19:36:35 2026 GMT
Subject: CN=66fd456523218e1aa6501bc2cf8c36de47d55255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:36:81:0f:14:1b:69:a0:e1:ad:98:43:b9:
31:74:b8:7c:7c:b4:85:7a:ca:66:7b:a1:f1:16:59:
ae:30:22:c7:9b:67:24:a2:99:57:df:3a:bc:08:8e:
61:46:e7:5a:d8:3a:3c:16:af:e7:dc:d6:25:6e:29:
ef:12:c4:68:a2:ba:2e:e1:f8:7f:3d:34:65:55:de:
38:9e:9b:3c:ae:c9:cd:db:95:7d:ba:94:fd:73:34:
94:05:22:45:15:0c:39:77:ab:8d:ea:92:ea:1c:ef:
ce:41:c7:83:14:0a:fe:67:f7:15:9c:d7:57:4a:ee:
5c:de:7a:d6:b1:78:b3:c1:24:df:86:a7:d7:8f:f4:
74:ca:20:d5:cc:05:16:be:e1:ee:1b:93:3a:48:91:
7b:b6:e8:7c:f3:f7:7f:a1:f3:5d:40:27:c1:c0:e1:
16:17:1e:e5:d5:8f:63:f6:12:20:a5:f9:6a:73:aa:
d4:d6:b1:1f:6f:b1:fb:8a:b1:ee:b0:84:56:0b:a0:
05:7b:d1:f6:b3:d7:07:e3:7d:8f:12:2d:21:be:db:
ff:1b:d7:2f:31:63:2c:8d:3f:50:4b:73:ad:3b:18:
6d:d3:fd:ad:54:83:0e:25:42:3c:67:b2:bc:88:1f:
b8:92:84:29:3d:3c:81:4f:58:23:12:c4:da:57:66:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E8:72:AC:40:9E:F1:EB:B7:0A:E6:11:32:C2:72:20:B8:CF:32:E3
X509v3 Authority Key Identifier:
keyid:50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/66fd456523218e1aa6501bc2cf8c36de47d55255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/c804815bcdfef674dc896f6b3f2e0b169560053d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.36.0/22
143.137.164.0/22
161.0.0.0/19
168.205.160.0/22
170.246.52.0/22
186.65.112.0/20
IPv6:
2803:6c00::/32
Signature Algorithm: sha256WithRSAEncryption
82:57:1f:bc:19:e9:0d:b7:3b:c9:81:7f:7d:84:88:04:fd:1e:
a9:76:24:6a:e0:b7:8f:27:2e:a3:69:8c:3a:56:a6:92:be:8e:
fc:50:0f:e7:75:39:0e:0f:bb:8c:e6:78:8a:b4:bf:6d:f5:04:
fb:88:db:27:86:eb:a6:8e:ac:8c:0b:96:65:7b:d3:40:29:4c:
5b:84:b2:f2:5f:90:59:d8:c2:f5:a7:c9:95:ee:6b:c8:31:e9:
47:56:5c:bc:6e:5c:90:2b:f9:ac:f5:1a:51:5f:c1:53:86:ef:
95:ea:a8:c7:2b:40:e8:db:0d:bf:0b:1e:53:82:61:1b:37:78:
a7:1a:73:e3:16:35:46:92:5b:df:7c:e2:26:69:e0:0a:f8:a0:
da:e1:52:7f:ec:63:76:1d:18:b8:a0:67:e6:91:1e:83:52:06:
b1:af:1b:61:31:87:d1:0d:3b:49:e3:de:09:5e:98:02:ab:a9:
6e:9d:4e:31:e1:f4:ee:4f:81:cd:c9:ff:66:1d:78:78:9a:e4:
be:6d:c7:29:c4:64:6a:d2:24:a6:a8:9d:ca:20:8f:5e:76:5c:
6d:d0:ac:d0:fe:99:22:2a:d1:d9:c1:ee:6d:17:d9:1f:36:fd:
af:cf:cc:c7:da:c1:50:0e:80:2e:47:11:6f:5f:49:45:91:3a:
1c:5e:9a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org