Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8f56932e3491683641f9ef8a7b575969b3b4299b.roa
File: 8f56932e3491683641f9ef8a7b575969b3b4299b.roa (raw, json)
Hash identifier: a/HKokJxyqBboC17iJrpANocMwPrRiWWQSX4a8m8nz8=
Subject key identifier: 5B:6B:3C:B0:66:B4:83:B1:1B:D3:DE:4F:85:09:E1:04:37:CA:6F:DD
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 229FD9
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8f56932e3491683641f9ef8a7b575969b3b4299b.roa
Signing time: Wed 08 Feb 2023 01:27:28 +0000
ROA not before: Thu 22 Apr 2021 03:00:00 +0000
ROA not after: Thu 27 Apr 2023 03:00:00 +0000
asID: 14080
IP address blocks: 190.144.192.0/19 maxlen: 19
181.49.224.0/19 maxlen: 29
186.85.72.0/22 maxlen: 24
200.118.0.0/16 maxlen: 24
186.145.4.0/22 maxlen: 24
190.84.213.0/24 maxlen: 24
190.84.214.0/24 maxlen: 24
190.158.6.0/24 maxlen: 24
190.158.7.0/24 maxlen: 24
190.158.10.0/24 maxlen: 24
190.158.11.0/24 maxlen: 24
190.159.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2269145 (0x229fd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Apr 22 03:00:00 2021 GMT
Not After : Apr 27 03:00:00 2023 GMT
Subject: CN=8f56932e3491683641f9ef8a7b575969b3b4299b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8b:7f:e8:31:b3:d5:96:3f:36:2a:00:a2:b8:
14:72:02:2a:c3:77:77:f5:d4:cb:11:8c:f2:2f:eb:
c6:d1:25:f7:aa:5b:6f:70:c1:a4:41:1f:20:bb:0d:
73:fe:08:52:8f:e2:a2:a5:67:39:d8:57:47:07:23:
d4:c7:b3:08:1b:95:43:5b:b2:85:7b:62:bc:ce:c6:
32:e3:74:9f:35:e8:a3:f9:2a:95:c2:c1:9c:d4:4f:
a5:d6:82:1c:42:27:f4:3b:fb:3b:79:cc:c2:a7:1c:
61:93:77:cf:21:e5:e2:27:c1:c0:73:06:05:26:3c:
70:4c:bf:35:50:f2:61:c2:91:6a:f3:6e:7b:b4:10:
9f:a0:3d:4d:a5:e0:60:d8:f9:fc:a3:d6:05:fb:89:
ae:b8:97:93:9f:4a:d0:39:75:5c:c7:9a:0c:5e:9f:
52:54:aa:3a:45:90:24:fe:ff:e8:e5:b9:30:c5:6e:
06:2e:dc:2b:64:12:7c:5d:6e:59:77:7a:ee:22:c1:
c7:22:50:67:e4:cf:01:86:22:83:9c:42:f3:0f:be:
5f:75:c1:c9:ef:5c:14:4c:80:88:62:4a:d0:88:cb:
18:14:a5:d5:19:f5:82:78:2e:82:bd:7c:b2:13:eb:
43:5a:c5:37:15:f7:67:b2:56:59:64:87:b5:70:a9:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6B:3C:B0:66:B4:83:B1:1B:D3:DE:4F:85:09:E1:04:37:CA:6F:DD
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8f56932e3491683641f9ef8a7b575969b3b4299b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.49.224.0/19
186.85.72.0/22
186.145.4.0/22
190.84.213.0-190.84.214.255
190.144.192.0/19
190.158.6.0/23
190.158.10.0/23
190.159.0.0/16
200.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:49:b8:66:3e:59:64:8c:54:25:3f:16:a2:73:0b:bd:8f:34:
e5:25:bd:c6:b7:fc:8c:5f:a8:1c:5e:22:0d:b9:10:79:12:e6:
1d:c5:f2:76:4a:6d:76:d9:02:4b:4f:bb:02:89:c8:0b:3e:90:
51:3b:f7:cd:1b:8e:40:56:5f:62:c1:39:5c:83:41:aa:3b:52:
e3:1f:f0:65:ba:ee:86:bc:15:88:c4:13:8b:ea:f3:c1:8b:56:
3e:e4:17:af:ba:50:fc:d0:ae:23:3e:b5:07:43:e5:75:56:79:
2b:05:fa:b7:a1:b2:60:9e:8d:1a:70:b4:b0:e0:cb:43:ee:e5:
bd:bb:4c:42:90:ba:e3:a8:1b:8b:65:cd:2d:6a:0c:f0:fb:28:
76:e8:7b:ad:6c:56:c6:86:b6:0c:a1:95:d1:f6:42:69:95:cd:
57:9a:c8:ab:b9:45:59:e3:9e:99:29:be:db:4d:ae:53:63:28:
ee:f8:79:84:7d:9b:7b:ed:0c:5d:aa:81:e6:db:04:40:c6:af:
9f:67:f4:9f:b6:de:3b:0f:48:89:bb:59:18:fc:58:28:e8:68:
be:de:5a:27:7e:f1:d3:29:05:be:3b:a4:fb:6e:a0:ec:46:e4:
0b:18:2a:1d:4e:ab:f5:80:4e:52:29:5c:cd:d4:f8:ff:ae:5b:
ff:8c:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:54 2024 by rpki-client on console-ams.rpki-client.org