Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/ed8d23b174f49bfccc2ed8287dfb7d3c0ebd1b81.roa
File: ed8d23b174f49bfccc2ed8287dfb7d3c0ebd1b81.roa (raw, json)
Hash identifier: 9MnCp8fJMpjBf0XwLTmuv5i9KXVAdrcmM5zaL0hZK6A=
Subject key identifier: 77:7C:C4:80:F9:61:C1:F3:EF:24:3A:3B:74:C4:A4:AF:42:9F:19:EB
Certificate issuer: /CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Certificate serial: 0CAC01
Authority key identifier: 2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/ed8d23b174f49bfccc2ed8287dfb7d3c0ebd1b81.roa
Signing time: Wed 24 Mar 2021 14:35:09 +0000
ROA not before: Wed 24 Mar 2021 14:35:09 +0000
ROA not after: Tue 24 Mar 2026 14:35:09 +0000
asID: 13489
IP address blocks: 168.0.244.0/22 maxlen: 22
181.128.0.0/12 maxlen: 12
186.0.0.0/17 maxlen: 17
190.0.0.0/18 maxlen: 18
190.7.128.0/19 maxlen: 19
190.9.192.0/18 maxlen: 18
190.28.0.0/15 maxlen: 15
190.70.0.0/15 maxlen: 15
190.128.0.0/17 maxlen: 17
190.151.192.0/18 maxlen: 18
190.165.0.0/16 maxlen: 16
190.240.0.0/16 maxlen: 16
190.248.0.0/14 maxlen: 14
191.98.0.0/17 maxlen: 17
200.6.160.0/19 maxlen: 19
200.13.224.0/19 maxlen: 19
200.24.32.0/19 maxlen: 19
200.30.64.0/19 maxlen: 19
200.31.192.0/19 maxlen: 19
200.58.192.0/20 maxlen: 20
200.58.208.0/20 maxlen: 20
200.58.224.0/20 maxlen: 20
200.75.64.0/19 maxlen: 19
200.114.0.0/18 maxlen: 18
200.116.0.0/16 maxlen: 16
200.122.192.0/18 maxlen: 18
201.184.0.0/15 maxlen: 15
201.190.64.0/18 maxlen: 18
201.232.0.0/15 maxlen: 15
201.236.192.0/18 maxlen: 18
2800:e0::/28 maxlen: 28
2803:d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830465 (0xcac01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Validity
Not Before: Mar 24 14:35:09 2021 GMT
Not After : Mar 24 14:35:09 2026 GMT
Subject: CN=ed8d23b174f49bfccc2ed8287dfb7d3c0ebd1b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:4e:6a:23:45:15:ba:ca:b8:cb:88:f8:52:
76:29:e0:c7:b5:b1:85:5b:da:9b:98:89:33:9d:7c:
73:fa:63:4b:18:d4:bc:e5:88:ea:e2:2d:1e:c8:1f:
af:8e:a5:b8:cb:5d:de:fb:8b:16:ab:b5:eb:be:57:
c1:4d:75:e7:a7:2f:ee:01:0d:8f:78:09:cc:7f:e4:
be:05:bd:b3:05:ee:8a:f5:10:e7:65:88:2c:0d:50:
c8:aa:b3:47:e4:05:8e:0f:3b:c8:d4:d0:57:19:79:
f5:ca:a6:a2:bc:f2:e5:77:be:b0:93:cc:76:c4:d1:
31:3a:cd:c7:64:72:42:3e:ea:19:c8:92:f6:ec:d1:
1f:5c:c6:24:ee:92:84:8e:5d:56:44:5e:b6:9c:74:
ab:d0:1b:a8:e0:51:47:9c:83:60:70:9e:7a:4f:70:
09:bb:b6:39:91:3d:dc:9f:ba:c3:69:f3:da:cb:39:
8d:da:d7:c0:20:4f:fd:00:ed:8c:a8:46:eb:c0:5e:
67:3c:5e:cc:d9:a9:96:1a:71:ea:5d:ea:2f:06:e0:
4f:70:17:dd:7b:f6:21:fd:91:25:86:4e:ed:bc:7e:
ff:e3:99:a7:50:dd:96:ad:9c:88:90:8c:03:2f:5f:
2f:f1:19:0f:fd:8b:57:f4:74:ed:2d:f3:69:ae:8a:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7C:C4:80:F9:61:C1:F3:EF:24:3A:3B:74:C4:A4:AF:42:9F:19:EB
X509v3 Authority Key Identifier:
keyid:2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/ed8d23b174f49bfccc2ed8287dfb7d3c0ebd1b81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.244.0/22
181.128.0.0/12
186.0.0.0/17
190.0.0.0/18
190.7.128.0/19
190.9.192.0/18
190.28.0.0/15
190.70.0.0/15
190.128.0.0/17
190.151.192.0/18
190.165.0.0/16
190.240.0.0/16
190.248.0.0/14
191.98.0.0/17
200.6.160.0/19
200.13.224.0/19
200.24.32.0/19
200.30.64.0/19
200.31.192.0/19
200.58.192.0-200.58.239.255
200.75.64.0/19
200.114.0.0/18
200.116.0.0/16
200.122.192.0/18
201.184.0.0/15
201.190.64.0/18
201.232.0.0/15
201.236.192.0/18
IPv6:
2800:e0::/28
2803:d80::/29
Signature Algorithm: sha256WithRSAEncryption
2c:4d:bc:46:47:ec:b6:25:ee:70:8b:99:53:2b:d9:12:ff:ab:
b7:a0:23:e0:02:e8:23:9e:b6:04:a6:83:3c:08:29:70:ee:af:
fd:7d:08:1d:50:d9:df:59:8e:08:57:d3:66:dd:16:40:f4:bc:
e3:9b:83:fb:bd:72:2d:06:6f:61:d1:6d:f7:fa:5b:fb:fc:d6:
05:36:d8:81:2f:ef:7f:b5:bb:3c:ac:bd:44:0b:63:db:95:34:
cd:91:ba:c6:ce:08:55:82:03:ce:6b:96:53:1c:03:11:61:73:
08:26:45:d2:8b:2b:d4:31:49:9c:3f:77:2c:78:f8:87:6f:cf:
28:71:00:f4:c5:66:0e:9e:36:fc:8f:07:14:13:e1:d8:64:50:
48:a8:80:9a:80:80:39:08:8d:4c:ec:95:c7:4a:d9:a0:09:14:
d4:0a:75:51:ce:cf:4e:fd:5d:f4:74:4c:e0:f2:fb:e2:57:53:
de:5a:83:ab:72:ab:cc:61:ca:d0:4f:c4:fb:a2:8b:f4:fb:8f:
b2:26:28:84:b0:f3:89:72:e7:cc:33:b2:5f:90:38:a7:2b:d0:
58:9c:42:9c:a8:46:9f:74:77:96:6e:6e:76:5e:b3:a2:62:62:
c5:af:06:bc:5e:13:28:9e:72:ba:14:77:fa:99:cd:a0:bb:9f:
9b:f8:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org