Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/584a59eea740c6aa9df4e7238c44ea3b7aaff69e.roa
File: 584a59eea740c6aa9df4e7238c44ea3b7aaff69e.roa (raw, json)
Hash identifier: koHAdPsYUQQVEQ+JH+qos/NGVk7bKdbl6HmG80lTFoA=
Subject key identifier: 23:62:59:6C:A9:BE:AD:CC:B9:43:D1:74:15:46:30:9F:8D:FF:6F:38
Certificate issuer: /CN=a12940490bd588d04ca6f10e67f9895c773999a9
Certificate serial: 1ABD9C
Authority key identifier: 11:C9:5F:39:0F:5A:14:33:8F:15:FA:7E:F1:D9:12:5E:4D:A7:C6:D6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a12940490bd588d04ca6f10e67f9895c773999a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/584a59eea740c6aa9df4e7238c44ea3b7aaff69e.roa
Signing time: Fri 09 Feb 2024 14:19:55 +0000
ROA not before: Fri 09 Feb 2024 14:19:55 +0000
ROA not after: Mon 09 Feb 2026 14:19:55 +0000
asID: 52233
IP address blocks: 161.0.96.0/20 maxlen: 24
170.245.0.0/22 maxlen: 24
190.112.224.0/19 maxlen: 24
131.221.144.0/22 maxlen: 24
186.2.176.0/20 maxlen: 24
138.219.140.0/22 maxlen: 24
2800:530::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1752476 (0x1abd9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12940490bd588d04ca6f10e67f9895c773999a9
Validity
Not Before: Feb 9 14:19:55 2024 GMT
Not After : Feb 9 14:19:55 2026 GMT
Subject: CN=584a59eea740c6aa9df4e7238c44ea3b7aaff69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:de:39:39:bf:ab:c1:1b:33:4b:4f:fe:91:
15:d4:f3:d0:8e:8d:cb:b0:77:96:11:25:89:5e:7b:
c2:e1:0e:84:e4:52:e4:56:59:33:64:b4:97:d1:bf:
47:c0:96:10:f0:1f:6e:9c:2f:1d:f4:b7:de:f9:bc:
7d:93:62:da:e3:2e:62:29:b8:1d:9b:e3:58:ec:22:
2b:98:ff:cd:e2:6e:64:44:af:8c:08:3c:37:e6:b4:
4e:e1:30:3a:e9:b8:c9:4d:e8:37:94:9a:b9:8b:2d:
33:ba:31:eb:40:6c:7a:36:c6:0b:b9:21:fa:e6:71:
70:1f:40:2a:a2:fc:0c:52:ad:8a:61:e5:8f:41:e4:
05:e4:96:c6:5a:da:04:ac:fd:14:2c:11:a8:ec:93:
4f:ba:62:fe:55:5c:c3:cb:14:e3:64:4a:12:2e:14:
fc:76:9d:1d:4b:be:83:71:95:bb:6c:72:ad:df:3f:
23:8d:c2:78:6f:84:e9:9d:0e:9b:da:9b:c1:f7:3f:
a2:20:5b:c5:29:cf:cf:60:08:84:60:2b:62:59:4f:
81:be:be:82:34:1f:b2:d6:6c:0a:25:1c:a3:8e:44:
4a:ee:35:d5:7d:1c:70:ee:24:7d:4a:3d:37:5a:99:
e6:c8:2d:f3:98:a2:b4:fe:5c:9b:4b:a8:11:a9:ca:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:62:59:6C:A9:BE:AD:CC:B9:43:D1:74:15:46:30:9F:8D:FF:6F:38
X509v3 Authority Key Identifier:
keyid:11:C9:5F:39:0F:5A:14:33:8F:15:FA:7E:F1:D9:12:5E:4D:A7:C6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a12940490bd588d04ca6f10e67f9895c773999a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/584a59eea740c6aa9df4e7238c44ea3b7aaff69e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/a12940490bd588d04ca6f10e67f9895c773999a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.144.0/22
138.219.140.0/22
161.0.96.0/20
170.245.0.0/22
186.2.176.0/20
190.112.224.0/19
IPv6:
2800:530::/32
Signature Algorithm: sha256WithRSAEncryption
77:7b:7b:f4:95:6c:fe:64:a5:b8:7b:fa:04:3c:91:45:4f:bf:
35:0b:ba:7a:c6:47:42:39:79:ed:a3:88:d9:aa:31:69:b9:9f:
3e:74:0a:ce:cc:86:56:7a:09:fe:bb:7b:ec:05:49:c7:1b:7e:
16:65:84:b3:f6:2d:9b:1f:e6:66:73:19:11:ea:57:a4:b6:e9:
2b:47:00:55:0e:ec:16:40:5c:2f:6e:d7:c3:73:19:44:f7:34:
22:0c:48:53:3a:a2:5f:ad:2f:a9:97:06:29:6d:48:44:03:7e:
ac:45:49:7a:eb:4f:19:94:50:92:a9:29:0e:cf:c0:14:71:b2:
af:30:8a:d3:c5:0f:89:f8:52:5c:99:9d:4c:8d:54:8e:bf:06:
b8:81:5a:73:a1:91:d1:5a:5f:e5:b4:4f:a8:f4:ad:71:5a:54:
3e:26:bc:02:7f:49:6c:5d:b1:65:03:1f:03:db:2a:6b:8c:93:
68:e8:b1:d3:cb:0e:6c:13:bc:3e:37:68:cc:8e:39:25:2b:24:
80:01:03:0d:ca:2f:88:5d:6c:5c:c0:86:27:da:20:1c:ff:a9:
e2:97:87:5a:a4:23:cb:c7:68:d5:b1:ba:ec:3d:ee:1e:0d:c9:
2f:17:35:90:34:ca:6b:7a:8f:e5:88:37:a5:4a:8c:ab:48:92:
12:aa:af:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org