Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/db31a90d585e6cd3cc174dfa328fda1829360c09.roa
File: db31a90d585e6cd3cc174dfa328fda1829360c09.roa (raw, json)
Hash identifier: vmlZ4glWp05v5x+WovknH0coFdZ+9EdovMoKEhi5jE8=
Subject key identifier: 48:27:C8:D0:87:41:2A:2A:4D:BB:28:6C:0F:D9:0E:32:E6:B5:9C:B2
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 18C3D5
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/db31a90d585e6cd3cc174dfa328fda1829360c09.roa
Signing time: Thu 17 Feb 2022 16:15:12 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 14080
IP address blocks: 186.80.44.0/24 maxlen: 24
186.80.45.0/24 maxlen: 24
186.80.46.0/24 maxlen: 24
186.80.47.0/24 maxlen: 24
186.86.255.0/24 maxlen: 24
186.147.142.0/24 maxlen: 24
186.147.143.0/24 maxlen: 24
190.158.112.0/24 maxlen: 24
190.158.113.0/24 maxlen: 24
190.158.114.0/24 maxlen: 24
190.158.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622997 (0x18c3d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=db31a90d585e6cd3cc174dfa328fda1829360c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ee:e9:bc:b6:88:5c:69:e4:1c:a3:b7:81:4b:
f1:85:19:30:33:98:2f:58:2b:08:b2:d5:57:3f:18:
cc:18:d8:a7:e0:b4:fa:09:4e:0a:37:f8:b8:e5:1d:
95:06:8e:66:75:02:3a:86:35:01:3f:c6:a0:76:62:
09:f6:c3:35:56:fd:6d:63:f8:cd:c5:ed:28:39:bb:
c7:10:9e:6c:38:cb:c8:71:4e:25:c5:91:48:8c:12:
70:cc:65:f3:80:5b:c2:2a:cf:e6:43:cc:1a:d7:fd:
88:a5:95:cf:14:23:0c:8a:d3:f7:33:7d:b3:28:af:
2a:34:3d:d8:d4:5a:dd:de:11:da:89:e4:50:ff:50:
11:b1:7b:65:6e:87:24:7e:71:54:78:2d:64:26:66:
95:3e:5e:be:2f:1e:48:8c:f2:27:cc:bb:7e:8d:ce:
e7:8c:ad:26:d6:c1:13:62:88:f3:2b:dd:d3:d9:38:
46:5e:77:74:07:5a:2c:e9:b5:2b:d8:2e:6d:2e:87:
10:26:35:8e:23:4a:10:12:ae:e3:1a:6f:84:85:98:
26:1d:7d:6e:90:7f:94:2c:13:b6:25:92:a1:78:02:
31:33:e3:68:e6:8d:26:12:52:cb:7d:2c:bf:e4:5d:
93:ca:9a:0d:13:ba:81:2a:dd:46:98:e4:2f:80:a3:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:27:C8:D0:87:41:2A:2A:4D:BB:28:6C:0F:D9:0E:32:E6:B5:9C:B2
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/db31a90d585e6cd3cc174dfa328fda1829360c09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.80.44.0/22
186.86.255.0/24
186.147.142.0/23
190.158.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:27:19:02:32:83:2d:df:eb:89:ea:04:56:76:0f:38:91:40:
5b:52:e2:d8:36:23:cd:bf:9f:a2:de:ef:93:cc:f2:39:1d:a4:
22:18:60:b8:f5:b1:dc:ee:8f:6f:43:17:ca:9b:85:2d:e8:7e:
4e:7f:4a:af:75:37:df:e7:b8:7b:51:d4:64:60:90:f8:3c:da:
50:65:df:ef:36:8a:b6:cb:70:87:ed:0a:22:ea:0a:35:0e:5e:
97:e5:09:92:5e:fe:c8:05:c0:3e:11:49:47:db:83:db:e1:a6:
3c:a0:7c:6c:64:82:0c:7f:ed:f3:f1:95:ae:17:aa:27:eb:5d:
d4:fe:a9:81:19:e8:16:43:37:83:d8:ed:05:30:c2:d5:b6:b2:
eb:78:f5:cb:09:db:f7:be:08:7b:2f:80:8b:61:fe:1a:9b:33:
41:ad:d3:25:1a:2d:75:06:c7:5b:48:89:78:27:04:ca:b4:c0:
19:b7:77:79:38:0e:df:f8:ce:65:3d:6e:33:dd:87:a2:2d:ef:
4e:45:b7:31:38:cf:15:66:9b:c1:e2:75:d5:76:d2:8e:cd:e4:
00:41:6f:a0:5a:d7:28:35:c4:67:f8:2a:ed:c2:4a:b6:39:b2:
8a:04:96:a5:9c:30:d3:de:4f:74:4f:06:10:a6:a6:e7:3e:25:
9e:5f:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org