Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/cea1eaf50748364a6e6058c8d5e88873d86fbdf8.roa
File: cea1eaf50748364a6e6058c8d5e88873d86fbdf8.roa (raw, json)
Hash identifier: 6Azl91i98Q6JxmZ0Dv3/uuwgFrQJwisbldZCuPhkbHA=
Subject key identifier: E6:EF:E8:C3:6B:3C:86:68:35:2B:64:96:70:90:3B:8A:7E:7D:64:95
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 1F366E
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/cea1eaf50748364a6e6058c8d5e88873d86fbdf8.roa
Signing time: Mon 10 Oct 2022 15:51:06 +0000
ROA not before: Thu 18 Nov 2021 03:00:00 +0000
ROA not after: Thu 18 Nov 2060 03:00:00 +0000
asID: 14080
IP address blocks: 186.82.62.0/23 maxlen: 23
190.158.112.0/22 maxlen: 24
201.221.164.0/22 maxlen: 24
201.216.12.0/22 maxlen: 24
190.84.115.0/24 maxlen: 24
200.118.96.0/22 maxlen: 24
200.118.187.0/24 maxlen: 24
200.118.198.0/24 maxlen: 24
200.118.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045550 (0x1f366e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Nov 18 03:00:00 2021 GMT
Not After : Nov 18 03:00:00 2060 GMT
Subject: CN=cea1eaf50748364a6e6058c8d5e88873d86fbdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:29:74:03:71:a9:93:27:bd:42:31:f2:3b:
a2:17:89:48:92:55:68:28:42:5b:87:9b:24:c0:0d:
2a:03:66:5f:2e:bb:1d:b9:55:2e:31:e1:9c:ee:86:
3c:c2:13:8a:5a:de:98:33:5c:a3:ce:3d:8f:45:f0:
a2:56:85:f5:ce:53:85:19:95:28:4f:92:39:7a:38:
63:08:83:d7:9b:12:96:a2:44:2f:f8:74:5b:c4:0a:
8d:f2:d8:4c:b2:71:43:3e:0f:0c:7c:41:1b:f0:5e:
7b:69:98:47:cc:81:b6:29:f0:8c:93:cd:e9:b0:2c:
41:bc:2a:37:2e:15:c0:5e:5c:f5:32:2d:2b:77:44:
60:57:ef:3d:45:02:57:56:55:d6:cd:e6:e6:72:b3:
a5:d2:e9:f1:0a:98:b5:fe:95:01:b8:10:4e:2c:e2:
8e:cc:a1:e8:88:4f:ff:0c:52:c3:e6:b3:32:e6:68:
b2:7a:f7:ff:61:31:54:1d:16:f8:eb:ac:50:cd:e5:
eb:8b:46:9a:5e:39:24:33:85:72:53:65:0a:ce:8f:
28:08:1d:1b:e4:b0:b2:c1:dd:aa:79:6d:66:73:ef:
da:c9:d1:dd:03:3d:6c:4c:3a:de:e7:fb:25:56:a3:
8c:43:b3:bb:38:2a:58:42:35:ac:87:4a:26:4c:c6:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EF:E8:C3:6B:3C:86:68:35:2B:64:96:70:90:3B:8A:7E:7D:64:95
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/cea1eaf50748364a6e6058c8d5e88873d86fbdf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.82.62.0/23
190.84.115.0/24
190.158.112.0/22
200.118.96.0/22
200.118.187.0/24
200.118.194.0/24
200.118.198.0/24
201.216.12.0/22
201.221.164.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:45:e6:03:9b:16:89:ef:bf:41:f7:1c:51:3a:71:eb:c3:7c:
91:64:c3:d2:67:7b:a1:87:02:68:71:e5:68:da:c5:d1:56:39:
43:f0:1f:73:f5:92:f0:1a:b2:99:e3:b2:4d:f1:a1:45:85:c9:
52:6c:b3:06:fd:c0:06:7f:12:ee:50:03:f6:99:a3:3d:af:c6:
ab:7a:33:00:c0:60:26:fa:a4:60:46:e5:e4:c5:67:47:5e:ab:
c4:61:6e:63:40:f7:ba:0e:52:01:06:2e:76:22:48:df:f3:a2:
4f:b6:3b:48:b6:85:8f:aa:20:3e:28:69:69:2f:54:1a:6c:27:
ee:fc:f9:10:c9:83:43:ea:04:96:f4:00:c2:f7:0e:2e:20:7f:
ff:6c:23:d2:7a:b4:84:28:d7:71:db:31:9b:6b:7d:6d:1d:74:
76:4c:a4:4e:0e:cb:c2:80:ae:a4:85:75:14:1c:4d:a8:1b:99:
df:ad:b3:11:e9:e9:77:70:3b:d6:5f:f3:ca:40:54:cc:d3:8f:
0f:d3:5c:31:d2:ed:3c:68:c9:23:ce:74:61:c0:bd:ed:11:32:
22:7d:e7:a3:d6:90:20:6a:b6:da:f8:91:df:e6:32:b8:09:e5:
09:a4:90:e4:f2:63:96:23:68:04:9b:35:ad:74:ad:13:49:ad:
ff:75:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org