Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bbbd5c0b14010fb4108f477a199cf71d0b0cc631.roa
File: bbbd5c0b14010fb4108f477a199cf71d0b0cc631.roa (raw, json)
Hash identifier: WUgv8Kb457ijZCPV+VsnUovUc5b/K3YYjg3bLBkcVlg=
Subject key identifier: 14:19:38:6C:00:18:07:C4:29:C2:2C:E9:55:39:F2:AC:A6:8D:AE:1A
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 22599D
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bbbd5c0b14010fb4108f477a199cf71d0b0cc631.roa
Signing time: Thu 26 Jan 2023 15:40:27 +0000
ROA not before: Fri 23 Apr 2021 03:00:00 +0000
ROA not after: Thu 27 Apr 2023 03:00:00 +0000
asID: 14080
IP address blocks: 190.144.192.0/19 maxlen: 19
181.49.224.0/19 maxlen: 29
186.85.72.0/22 maxlen: 24
200.118.0.0/16 maxlen: 24
186.145.4.0/22 maxlen: 24
190.84.213.0/24 maxlen: 24
190.84.214.0/24 maxlen: 24
190.158.6.0/24 maxlen: 24
190.158.7.0/24 maxlen: 24
190.158.10.0/24 maxlen: 24
190.158.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251165 (0x22599d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Apr 23 03:00:00 2021 GMT
Not After : Apr 27 03:00:00 2023 GMT
Subject: CN=bbbd5c0b14010fb4108f477a199cf71d0b0cc631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:66:42:02:db:98:89:b5:98:72:1a:1d:44:
d5:77:a3:0d:ab:c6:74:35:6b:be:32:22:ca:76:99:
ef:99:a1:b8:e5:ff:84:8a:85:d5:24:77:11:38:06:
dc:3a:f3:ae:18:8c:54:e0:69:19:ac:52:92:1d:2b:
b4:15:ea:4d:e4:a6:a3:c5:20:33:64:8c:86:b0:3f:
5f:f4:a8:fd:5d:8c:e0:21:6f:d1:a3:41:17:51:31:
fc:4c:cd:70:c5:60:1f:78:44:b2:7a:25:bc:80:dc:
9b:75:bd:60:0d:c0:72:cc:75:8c:e2:ee:9a:77:c6:
69:20:88:37:3e:f5:40:8a:d3:1a:1a:99:6a:ae:30:
cd:a8:0b:89:f1:1b:ee:65:cb:a7:f4:07:ea:ae:c2:
f8:a3:52:99:86:38:fb:a2:b9:bf:93:87:3a:5b:92:
27:e3:dc:e8:18:a3:c3:7b:54:80:ed:a7:69:4a:3f:
f2:04:14:00:da:69:60:87:29:fe:75:4b:cf:27:84:
a5:8c:7d:ad:bb:de:ba:69:1e:4d:70:10:aa:05:cd:
99:e1:fb:f3:79:47:6d:62:33:3b:d9:c9:1c:2f:ab:
b6:bd:f4:c1:d7:21:29:ab:31:5c:39:42:f5:dc:d8:
16:22:d2:0c:82:ee:ef:27:6b:c9:58:22:53:f0:3e:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:19:38:6C:00:18:07:C4:29:C2:2C:E9:55:39:F2:AC:A6:8D:AE:1A
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bbbd5c0b14010fb4108f477a199cf71d0b0cc631.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.49.224.0/19
186.85.72.0/22
186.145.4.0/22
190.84.213.0-190.84.214.255
190.144.192.0/19
190.158.6.0/23
190.158.10.0/23
200.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:14:66:ad:c5:30:a1:cc:3f:25:99:4d:f1:95:82:88:be:8b:
5f:18:2f:24:16:36:65:e2:c1:16:00:a5:9e:7f:f0:52:9e:93:
aa:73:31:27:cc:85:fe:c4:e5:74:10:14:0d:18:db:53:ef:0a:
59:e0:0a:7f:81:2d:16:03:b2:8a:b5:dd:3a:64:5a:1a:9c:ec:
cb:ae:4c:ba:5d:5d:fb:e3:93:ee:02:7d:f8:02:d9:c5:55:90:
a8:19:a2:ad:c7:e1:86:ed:d3:18:ea:1b:1d:c3:59:00:ee:b0:
3d:9e:be:1f:73:7f:1e:b8:00:28:91:3f:d4:1c:20:3b:95:a0:
59:08:ee:2a:16:0a:51:94:9c:08:f4:1e:86:da:f8:06:62:61:
a3:43:72:4c:9c:39:a7:f7:ac:95:f3:26:a6:f8:0a:a8:16:d3:
13:70:fc:94:d7:fd:fb:99:b1:80:56:9a:c6:11:75:c2:42:57:
4a:43:06:91:7b:7a:d5:85:66:a5:52:c9:97:19:63:0e:1a:03:
16:2e:ac:cd:aa:0f:7b:15:84:0f:71:aa:0b:d1:48:42:01:8c:
de:75:92:b8:6a:58:74:6c:f1:c4:d8:0b:e6:a6:5c:13:1f:af:
37:2f:14:06:2a:6f:8b:4e:8c:cb:e5:c2:d9:7e:6a:b2:8b:97:
c4:eb:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org