Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/107bdb1e61207bb5ca1b81345d11d6ee66506fd5.roa
File: 107bdb1e61207bb5ca1b81345d11d6ee66506fd5.roa (raw, json)
Hash identifier: dz5V5bzSEXbKkPwiqlSAsR9c6OFQor4ndpJfv+BM3GQ=
Subject key identifier: A4:88:50:6B:E4:BD:5F:2E:97:26:03:6E:86:E0:11:52:FD:4B:79:92
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 1E11A2
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/107bdb1e61207bb5ca1b81345d11d6ee66506fd5.roa
Signing time: Tue 23 Aug 2022 15:05:15 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 14080
IP address blocks: 186.86.28.0/22 maxlen: 24
186.144.124.0/22 maxlen: 24
190.147.138.0/23 maxlen: 24
186.144.32.0/22 maxlen: 24
190.156.206.0/23 maxlen: 24
181.51.20.0/22 maxlen: 24
186.87.108.0/22 maxlen: 24
186.145.0.0/16 maxlen: 24
186.81.102.0/23 maxlen: 24
186.81.196.0/22 maxlen: 22
190.84.28.0/22 maxlen: 22
190.156.48.0/22 maxlen: 22
190.159.136.0/22 maxlen: 22
200.118.236.0/22 maxlen: 22
190.144.224.0/19 maxlen: 19
181.56.28.0/22 maxlen: 22
186.83.68.0/22 maxlen: 22
186.85.83.0/24 maxlen: 24
186.87.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970594 (0x1e11a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=107bdb1e61207bb5ca1b81345d11d6ee66506fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:49:1b:6b:69:d9:bd:f4:bc:91:a3:d1:a3:
a4:9f:d3:5b:94:b1:40:c9:3a:fa:c4:27:6b:c6:15:
ed:06:a4:06:71:90:1e:04:85:ac:f2:6c:3a:2c:43:
61:15:f1:e7:dd:9b:02:84:08:3c:3d:c9:db:d7:1e:
1f:88:ce:11:c0:65:23:69:d6:de:37:00:3f:a1:91:
bd:e4:a1:1e:58:ef:0b:cc:40:f8:91:d8:d5:8d:be:
f7:6d:44:40:45:f6:d2:83:b8:f1:b5:38:61:33:eb:
01:43:4a:0c:7c:2e:35:48:36:0b:7c:9b:a9:2f:e7:
58:70:b4:b8:08:9e:f9:cc:73:60:b6:ee:8c:01:52:
69:1a:ca:07:fc:6d:6e:39:a3:ed:25:67:0f:3c:81:
1f:a7:17:8d:be:35:ae:5d:3e:c7:a0:ed:fe:82:d0:
8d:86:53:da:e8:32:df:cd:6e:30:36:29:57:79:2b:
51:4a:02:bc:01:b0:45:1a:11:aa:40:db:6d:88:be:
41:a8:72:2b:bb:6d:98:b1:71:7f:7d:f6:65:b8:77:
50:2d:9b:1b:64:c2:92:ac:b6:44:8d:6b:0e:18:3c:
f9:d7:53:5c:dc:77:be:46:fe:1d:19:5e:3a:6a:57:
8e:e1:f5:dc:92:76:30:7d:73:0a:b6:58:b2:9a:66:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:88:50:6B:E4:BD:5F:2E:97:26:03:6E:86:E0:11:52:FD:4B:79:92
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/107bdb1e61207bb5ca1b81345d11d6ee66506fd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.51.20.0/22
181.56.28.0/22
186.81.102.0/23
186.81.196.0/22
186.83.68.0/22
186.85.83.0/24
186.86.28.0/22
186.87.108.0/22
186.87.228.0/22
186.144.32.0/22
186.144.124.0/22
186.145.0.0/16
190.84.28.0/22
190.144.224.0/19
190.147.138.0/23
190.156.48.0/22
190.156.206.0/23
190.159.136.0/22
200.118.236.0/22
Signature Algorithm: sha256WithRSAEncryption
07:56:26:d2:92:b6:08:d2:9c:75:df:3d:3f:3e:a7:71:e1:76:
b9:78:07:e8:fb:9b:ff:69:04:77:e8:30:3b:1e:32:5b:13:0c:
4d:00:f9:86:a5:de:09:c8:1d:a1:10:cd:d2:70:03:07:1d:e3:
50:1c:be:66:f4:9f:6e:78:57:bb:4e:ea:e3:60:9d:6b:ce:46:
e4:da:6c:7c:22:9a:6f:b4:c4:db:50:83:a9:4c:2f:15:68:e2:
a7:9d:30:a5:79:6d:85:43:86:53:d4:f0:75:3f:04:cd:de:59:
36:e4:57:7d:84:c1:9c:bd:cb:77:be:36:ba:29:9f:74:87:ff:
3b:48:54:84:70:05:57:cc:96:ae:9a:7f:fd:6e:9d:8f:05:4c:
dc:bc:82:0d:76:ad:7e:2a:d6:52:ec:a5:88:e3:c1:8a:23:f2:
df:14:01:bb:86:51:6b:10:67:fb:c1:4c:ec:f4:8f:48:7e:e4:
9f:34:c6:3b:23:f1:11:08:9c:3a:7a:71:31:fe:66:64:13:96:
9f:d7:52:d9:82:85:14:3c:47:08:95:be:8a:9e:13:8a:8a:a0:
36:b7:4a:a5:91:e1:cf:9e:3e:59:9d:2c:2e:5f:4f:bf:0b:f8:
62:53:55:11:89:13:bd:35:f4:2a:0e:d4:d0:ac:bf:da:df:07:
8b:1c:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org