Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/d6fdc31543079b58014724a9df550f0309848825.roa
File: d6fdc31543079b58014724a9df550f0309848825.roa (raw, json)
Hash identifier: taBv03pIHhRR2OuBnE2JILmkeBkJIEKBadacrgZpE5o=
Subject key identifier: E2:DE:CB:B8:8D:3B:80:CB:56:41:34:42:03:E3:E0:B6:AB:6A:FD:26
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 07A21C
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/d6fdc31543079b58014724a9df550f0309848825.roa
Signing time: Tue 31 May 2022 16:20:42 +0000
ROA not before: Wed 09 Feb 2022 03:00:00 +0000
ROA not after: Fri 09 Feb 2024 03:00:00 +0000
asID: 26617
IP address blocks: 190.104.113.0/24 maxlen: 24
190.104.117.0/24 maxlen: 24
200.12.36.0/24 maxlen: 24
200.12.37.0/24 maxlen: 24
200.12.38.0/24 maxlen: 24
200.12.39.0/24 maxlen: 24
200.12.40.0/24 maxlen: 24
200.12.41.0/24 maxlen: 24
200.12.44.0/24 maxlen: 24
200.12.45.0/24 maxlen: 24
200.12.46.0/24 maxlen: 24
200.12.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500252 (0x7a21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Feb 9 03:00:00 2022 GMT
Not After : Feb 9 03:00:00 2024 GMT
Subject: CN=d6fdc31543079b58014724a9df550f0309848825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:e6:35:7e:29:d5:40:81:c5:78:4d:7c:35:
15:03:f4:2d:c2:29:4e:b3:47:bc:79:d8:70:ae:b8:
ac:8f:95:f1:86:08:b0:c1:cd:5b:26:51:2c:7b:54:
8b:de:e3:06:59:67:57:1d:67:d2:98:8b:7d:57:cb:
61:86:46:e3:d4:72:59:e9:e1:7a:91:42:18:dc:81:
b6:8d:f7:56:55:60:9c:cb:b9:81:f1:f4:21:5b:6e:
60:2f:03:9c:89:b4:34:2e:1f:06:f9:ee:39:e5:84:
0c:5a:1f:10:58:8b:83:b7:fb:41:e3:f3:de:07:90:
20:df:1f:4f:39:8b:e5:84:53:db:55:0d:4d:42:37:
b2:a3:b6:56:a6:9b:37:fe:6d:4e:8c:b4:fb:00:37:
2e:cf:36:e1:9b:78:c3:8a:c7:2f:8c:ac:8b:9b:72:
9f:9c:89:45:54:9f:87:09:67:c3:64:36:33:28:6c:
d4:7d:df:6e:a4:05:63:a5:2e:c7:8b:ff:10:36:7e:
d4:54:0a:6e:a0:56:47:4a:30:44:b6:4f:5d:9a:10:
45:b2:e8:15:95:3f:41:6b:88:95:4c:ac:64:86:f9:
50:0c:5a:24:1b:be:1b:9f:14:dd:3f:dd:d3:d9:85:
3f:ba:79:de:f0:6f:2e:c0:8e:5c:3a:d1:a9:60:4d:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DE:CB:B8:8D:3B:80:CB:56:41:34:42:03:E3:E0:B6:AB:6A:FD:26
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/d6fdc31543079b58014724a9df550f0309848825.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.113.0/24
190.104.117.0/24
200.12.36.0-200.12.41.255
200.12.44.0-200.12.46.255
200.12.56.0/24
Signature Algorithm: sha256WithRSAEncryption
31:81:4c:b7:5b:47:a7:9a:6b:33:dd:79:42:ba:e7:de:6f:5e:
a3:e1:cf:cf:30:91:2f:31:5a:f9:c1:6b:f6:ba:ce:34:66:8c:
84:6e:eb:6e:bc:37:7f:0b:bb:42:38:34:61:d8:fa:1b:c2:2d:
56:02:da:9e:b2:e2:21:e1:7d:57:2f:cb:6e:11:4d:d2:44:84:
86:c6:f3:ed:34:ef:a7:45:2c:2a:bb:1d:12:28:17:80:3a:71:
44:f0:7d:e3:10:77:b2:75:b9:f4:92:18:c4:36:c4:27:f2:93:
d4:1c:b4:44:00:18:0c:88:6f:6f:51:2e:87:56:1f:06:0b:b3:
e5:f3:5a:cf:46:b4:e3:7f:ea:67:30:58:3a:0a:af:43:33:eb:
1c:6b:16:32:f0:4a:2d:a9:83:93:af:6c:c1:9e:38:f6:41:e4:
1d:b5:23:c9:d2:bb:25:28:37:09:11:2d:38:29:93:f4:f8:91:
d8:bd:54:49:b0:c9:2d:8b:cc:01:81:47:d7:d5:b8:8b:c0:e3:
53:90:96:48:3f:65:0d:c2:7a:6c:04:5e:5e:e7:f3:62:48:ab:
d1:64:82:54:f6:41:22:b7:6c:15:42:a4:0a:10:49:fd:d0:56:
60:ae:7b:ed:6b:87:2a:e6:eb:7a:78:43:f3:19:b8:fb:c2:b0:
2f:a0:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org