Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/926608b62753baaedfd435dfd7644ddaad341e4b.roa
File: 926608b62753baaedfd435dfd7644ddaad341e4b.roa (raw, json)
Hash identifier: nZTf4JFzhfAp9Q8pMfEE/TdUt3RSOFeYvyt9p98uvso=
Subject key identifier: 76:0D:EB:07:AD:64:FE:AF:DE:B8:80:6A:3A:47:42:0D:A3:E8:9D:43
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 2230CC
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/926608b62753baaedfd435dfd7644ddaad341e4b.roa
Signing time: Tue 25 Apr 2023 15:05:24 +0000
ROA not before: Mon 24 Apr 2023 15:04:37 +0000
ROA not after: Fri 25 Apr 2025 15:04:37 +0000
asID: 27755
IP address blocks: 190.2.224.0/20 maxlen: 24
200.3.200.0/21 maxlen: 24
186.179.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240716 (0x2230cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 15:04:37 2023 GMT
Not After : Apr 25 15:04:37 2025 GMT
Subject: CN=926608b62753baaedfd435dfd7644ddaad341e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:d8:ff:33:bc:9b:b6:1a:b3:e5:eb:db:b2:
af:56:98:23:3b:f7:8f:2e:62:48:59:78:c8:aa:0a:
41:00:03:cb:68:6d:7b:bd:69:bf:fa:49:37:47:11:
b2:15:85:69:29:8e:76:49:8d:20:08:49:00:e2:5c:
e3:80:e9:61:7e:9b:a9:0f:0f:03:32:ea:2a:f7:33:
20:e1:62:11:a9:ab:f9:38:ac:d1:b0:93:74:5e:e2:
c3:39:de:b9:ba:b3:f9:a6:58:54:92:48:26:e8:cf:
d7:43:b6:45:c4:77:2e:f9:85:11:97:59:75:fb:0d:
33:81:51:d8:69:48:82:3f:2e:ef:32:d2:a0:bd:1b:
f6:da:63:6b:78:2b:b7:5e:26:6f:41:f5:f1:60:57:
7f:7e:6d:c8:3c:bb:8e:28:51:a6:07:d0:9a:b9:d4:
bb:2c:23:c6:1e:bd:e5:87:fe:6d:0e:5f:c0:ad:92:
c6:12:e6:67:2d:42:5b:d8:a6:5b:9b:44:c7:32:bb:
50:63:7f:30:b2:41:31:93:ef:a5:c9:9c:dd:c9:86:
1f:fc:b0:02:c2:26:b4:30:bf:a4:3a:6c:f3:3d:92:
7c:53:9d:7d:76:8c:f9:0c:38:74:9c:38:86:0a:fd:
01:e4:e6:8c:e8:3c:0d:d3:b8:b3:9d:fb:79:45:1a:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0D:EB:07:AD:64:FE:AF:DE:B8:80:6A:3A:47:42:0D:A3:E8:9D:43
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/926608b62753baaedfd435dfd7644ddaad341e4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.179.112.0/20
190.2.224.0/20
200.3.200.0/21
Signature Algorithm: sha256WithRSAEncryption
60:7f:bc:0b:79:fc:ec:64:36:cf:ea:2c:88:b8:e0:57:68:28:
e8:1d:47:43:91:e3:41:ed:c8:8a:11:a9:bd:ce:ef:7e:da:37:
65:84:f9:70:27:df:12:bd:98:9d:57:4d:45:cf:10:53:e9:9a:
bb:87:2e:ce:b4:e4:da:82:e2:9e:6a:5f:93:7c:d7:f0:0a:43:
2d:13:e0:9b:8a:e3:69:71:5d:61:bc:e1:6f:1c:97:72:cb:3a:
4f:74:a5:62:11:39:d7:d4:85:ee:ce:1a:9d:20:e7:bf:33:4d:
2f:c8:f2:19:19:0e:54:ff:d5:a4:c0:2a:39:9b:c2:5a:29:c0:
77:f0:d5:96:49:a4:29:c9:07:7b:58:b0:5b:15:b7:d3:1f:38:
c8:22:a4:53:01:6b:e5:e1:2c:bd:18:0a:9a:ac:57:51:56:c4:
c5:76:c0:47:29:df:2c:1f:32:59:fd:d1:c9:70:8e:f6:2d:6b:
34:47:25:32:4f:f1:54:10:b5:37:03:21:1a:c0:a7:e3:8d:df:
f2:aa:f7:ad:42:11:ab:94:a3:70:51:3c:11:11:c2:e9:6c:7d:
87:05:c6:9d:35:68:cc:9e:ca:ff:ac:2b:3b:a5:25:83:9b:7a:
93:6b:12:8b:7e:3b:f5:8a:34:29:e7:10:cf:1e:2c:01:4e:ac:
44:08:63:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org