Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/6d5e5209baa5f10eb479385cdc6c4754907b1b3c.roa
File: 6d5e5209baa5f10eb479385cdc6c4754907b1b3c.roa (raw, json)
Hash identifier: XmEBEMgpKnl2RtdSqKGqQ1X8MqRJhJhyyXSvvGRFRb8=
Subject key identifier: 5C:31:10:60:69:F4:36:A1:4E:8B:8E:B6:0B:ED:2A:97:77:A3:9F:07
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 0504BB
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/6d5e5209baa5f10eb479385cdc6c4754907b1b3c.roa
Signing time: Tue 15 Feb 2022 19:41:29 +0000
ROA not before: Wed 09 Feb 2022 03:00:00 +0000
ROA not after: Fri 09 Feb 2024 03:00:00 +0000
asID: 26617
IP address blocks: 190.104.113.0/24 maxlen: 24
190.104.117.0/24 maxlen: 24
200.12.37.0/24 maxlen: 24
200.12.36.0/24 maxlen: 24
200.12.38.0/24 maxlen: 24
200.12.41.0/24 maxlen: 24
200.12.44.0/24 maxlen: 24
200.12.45.0/24 maxlen: 24
200.12.46.0/24 maxlen: 24
200.12.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328891 (0x504bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Feb 9 03:00:00 2022 GMT
Not After : Feb 9 03:00:00 2024 GMT
Subject: CN=6d5e5209baa5f10eb479385cdc6c4754907b1b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:37:1c:6a:26:eb:ed:54:b9:13:6b:88:2c:
5d:09:80:3a:5a:e9:00:ec:d4:1b:74:35:87:6b:3c:
59:a5:16:18:e7:a5:f1:71:52:3a:d1:76:16:79:12:
60:9d:20:e2:33:e6:2b:43:39:ff:36:88:cd:3d:47:
c0:ab:5b:83:e6:08:a9:c0:09:fa:84:56:9d:97:2c:
74:f3:42:72:b4:d6:90:65:1d:b7:56:88:cd:34:15:
46:fa:84:1f:2a:97:b9:54:e4:14:ca:62:82:23:83:
db:d6:cd:71:c1:f9:df:10:fd:50:ca:92:01:c6:ef:
ad:cf:36:d4:a8:77:6c:2d:eb:81:59:43:ff:cd:c9:
6f:fb:33:34:6e:bf:27:44:4f:39:7a:48:33:c0:2b:
ca:41:7a:77:83:b7:33:5d:7c:e2:51:20:e3:f2:80:
3e:e8:fd:29:b0:53:be:f1:46:32:89:5c:52:23:49:
40:f4:d2:56:17:01:68:f9:31:9c:84:c1:03:4d:29:
d6:a2:db:be:aa:05:1a:53:f0:5b:e5:d4:e5:6e:82:
59:4e:3c:dd:59:9d:ea:af:5c:27:c0:e5:d2:7a:d7:
5d:77:c9:f6:d8:c4:bf:11:a5:33:64:0f:bb:49:d9:
86:3d:17:b5:e8:fd:fa:a6:cd:84:d3:25:cf:3f:14:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:31:10:60:69:F4:36:A1:4E:8B:8E:B6:0B:ED:2A:97:77:A3:9F:07
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/6d5e5209baa5f10eb479385cdc6c4754907b1b3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.113.0/24
190.104.117.0/24
200.12.36.0-200.12.38.255
200.12.41.0/24
200.12.44.0-200.12.46.255
200.12.56.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5e:3b:55:11:22:3f:65:65:b1:d3:17:c7:93:2b:13:a9:c1:
6b:26:86:7d:c7:7f:23:dc:cc:50:14:e5:38:4e:0e:ee:3b:5e:
04:6f:51:86:a1:0a:b0:f8:18:39:26:db:19:fd:e7:52:a2:40:
34:d2:d2:58:0a:ed:d7:b0:7f:a0:be:25:ae:1d:5c:03:f1:d7:
47:72:3d:40:2b:74:44:33:ba:22:2a:af:80:25:c1:62:83:dd:
61:01:5b:57:45:bf:52:2e:75:37:68:bf:de:32:07:90:cd:62:
9f:ad:8d:c9:65:37:8d:1c:d5:b8:3e:7f:17:a4:a3:7c:28:4c:
43:cb:b3:5e:b2:69:9a:fd:a9:1c:75:9a:81:98:a8:a6:5a:20:
a1:58:32:03:1c:f6:bc:0c:84:21:9c:83:c1:33:f4:13:76:57:
3a:5e:98:ab:ff:78:04:3f:f2:41:6e:e5:8a:55:42:43:b0:00:
7d:c3:1c:57:72:ca:8a:24:55:e0:1b:9a:26:1e:75:24:4a:b7:
71:23:44:c4:29:9d:5b:3b:df:f1:83:f2:51:2e:f9:93:4a:fb:
6c:92:c6:64:bd:26:c0:76:08:fc:9b:a9:e5:d3:a6:6a:74:e6:
0f:f9:51:61:c6:0b:0f:0f:99:a9:11:91:2f:0c:a9:ad:c5:8d:
71:5e:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org