Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/6ac927c2f23c41b24816450a1044704bf040fb99.roa
File: 6ac927c2f23c41b24816450a1044704bf040fb99.roa (raw, json)
Hash identifier: LbOdFbNtLNRxL2+Z6UMYNsjF1tfcZXO4uTo3LNXGjy0=
Subject key identifier: 4E:BF:FA:E5:5A:6E:64:93:54:46:3C:C0:A7:FB:CB:B4:72:BB:39:F1
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 1C3E95
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/6ac927c2f23c41b24816450a1044704bf040fb99.roa
Signing time: Thu 16 Jun 2022 22:52:24 +0000
ROA not before: Fri 25 Jun 2021 03:00:00 +0000
ROA not after: Fri 25 Jun 2060 03:00:00 +0000
asID: 14080
IP address blocks: 190.144.62.0/24 maxlen: 24
181.49.92.0/22 maxlen: 22
186.86.140.0/22 maxlen: 22
186.86.155.0/24 maxlen: 24
190.144.169.0/24 maxlen: 24
190.144.177.0/24 maxlen: 24
190.144.196.0/24 maxlen: 24
190.144.201.0/24 maxlen: 24
190.144.202.0/24 maxlen: 24
190.144.203.0/24 maxlen: 24
190.144.204.0/24 maxlen: 24
190.144.205.0/24 maxlen: 24
190.144.209.0/24 maxlen: 24
190.145.116.0/24 maxlen: 24
190.145.126.0/24 maxlen: 24
190.145.224.0/22 maxlen: 22
190.145.230.0/23 maxlen: 23
190.145.232.0/21 maxlen: 21
190.145.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851029 (0x1c3e95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Jun 25 03:00:00 2021 GMT
Not After : Jun 25 03:00:00 2060 GMT
Subject: CN=6ac927c2f23c41b24816450a1044704bf040fb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:6d:c4:41:57:86:2f:5c:42:bd:f4:e4:10:
74:e4:0c:ed:32:44:ae:84:e9:ec:b1:98:5d:52:f4:
69:48:bf:80:1b:5a:ed:d4:8c:ee:e4:f4:5a:ce:cf:
3a:38:52:94:5c:14:a3:a9:6f:b0:0d:2d:06:68:08:
d6:f6:79:b1:36:b8:0e:d2:aa:10:16:16:0d:be:44:
76:a0:66:f5:02:cc:62:65:f5:68:93:9a:e9:ac:11:
d0:79:b7:8c:66:fe:be:5e:11:ed:97:71:ce:07:85:
94:00:78:00:e0:ea:c5:7e:dc:91:13:22:e2:5a:cb:
a0:ea:db:a6:33:89:f2:16:5d:65:5f:fe:49:06:38:
11:d1:b6:19:02:d6:84:73:b0:98:1d:d9:1d:c5:e3:
88:7e:87:7d:da:d1:08:a4:4d:a4:06:6a:22:52:e7:
0f:d5:cc:fb:78:1b:3f:07:26:12:44:19:06:40:31:
e4:14:04:21:ba:71:ca:af:28:cd:02:6d:e1:3b:89:
74:78:0d:81:e7:77:30:bc:6c:8f:e6:76:26:39:a8:
91:7e:24:91:e2:cb:4f:fd:91:11:06:bd:f5:5d:a7:
62:1c:a5:fc:4e:cd:22:4b:1a:8e:e1:33:db:6c:7b:
a1:c7:e2:a0:c6:c4:37:77:82:88:ed:ab:8d:5a:b8:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:FA:E5:5A:6E:64:93:54:46:3C:C0:A7:FB:CB:B4:72:BB:39:F1
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/6ac927c2f23c41b24816450a1044704bf040fb99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.49.92.0/22
186.86.140.0/22
186.86.155.0/24
190.144.62.0/24
190.144.169.0/24
190.144.177.0/24
190.144.196.0/24
190.144.201.0-190.144.205.255
190.144.209.0/24
190.145.116.0/24
190.145.126.0/24
190.145.224.0/22
190.145.230.0-190.145.255.255
Signature Algorithm: sha256WithRSAEncryption
27:ae:e0:7d:fe:cf:89:09:12:8d:8f:0f:f7:f7:b2:3e:7e:eb:
6a:f0:91:16:11:42:01:2f:a9:ba:77:fd:07:c9:9d:84:13:30:
c6:7f:4d:55:08:d6:b3:8f:7c:3a:fc:a5:5b:df:bf:05:14:12:
25:4c:e8:17:ce:90:cb:64:ec:1e:70:b8:0b:aa:8b:fe:aa:c6:
6a:a0:70:86:35:16:56:3c:d9:26:8c:3d:d2:e8:05:c8:fb:b8:
47:c2:b5:3a:0a:85:5b:36:5c:37:64:be:33:31:a5:11:6f:ac:
5f:58:7b:b7:11:4c:cd:49:96:ca:20:39:c9:f7:df:ee:95:74:
f7:5d:5a:06:85:5b:80:45:2c:78:f8:33:d4:f2:6f:f1:ec:a4:
89:b4:5b:cc:68:05:2c:2a:d5:a8:0c:08:93:8f:b5:5e:de:ee:
66:17:d6:26:0e:00:d9:a1:95:b0:ec:0b:51:75:ba:d3:f1:8a:
6c:34:eb:71:66:9f:11:ba:1f:6c:fa:e1:c8:da:90:0e:3a:85:
bb:dc:e8:4e:ca:a4:52:30:19:bb:92:e7:60:cf:75:76:24:c3:
3e:56:88:70:fc:bb:a9:fa:7a:0a:d0:9c:18:49:af:03:0c:6d:
43:7d:39:0c:19:2a:18:b4:fe:01:d6:2f:70:1e:ac:48:3b:c4:
37:59:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org