Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/82bcabb2abc1cfefb014999f751368c1e8e48e99.roa
File: 82bcabb2abc1cfefb014999f751368c1e8e48e99.roa (raw, json)
Hash identifier: QbjVNeAp0cIt2m6GE1XRlZ9zAgNFWhJGHC/YDqMbj6s=
Subject key identifier: 40:CF:B2:5B:11:67:B5:C2:1A:6D:C5:32:79:A6:7D:67:B8:0E:0E:CD
Certificate issuer: /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial: 27F116
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/82bcabb2abc1cfefb014999f751368c1e8e48e99.roa
Signing time: Thu 01 Feb 2024 22:11:10 +0000
ROA not before: Thu 01 Feb 2024 22:11:10 +0000
ROA not after: Sun 01 Feb 2026 22:11:10 +0000
asID: 52228
IP address blocks: 186.64.128.0/17 maxlen: 24
186.15.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2617622 (0x27f116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Validity
Not Before: Feb 1 22:11:10 2024 GMT
Not After : Feb 1 22:11:10 2026 GMT
Subject: CN=82bcabb2abc1cfefb014999f751368c1e8e48e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:7b:bc:d8:60:4e:d0:c2:94:d9:67:66:9a:
85:21:90:ed:09:cb:95:a8:bd:fd:69:34:4f:83:07:
5c:5e:05:9c:1d:e7:2f:3f:d8:a8:b7:1c:1c:a3:05:
36:db:08:c9:e9:ba:d6:8d:14:34:f0:2d:f1:c6:dc:
44:0f:f5:f8:8b:3b:3d:64:dd:a1:6d:64:5f:ba:e2:
02:8d:ff:a7:5d:e0:e7:0d:f9:2e:b1:44:ce:86:bf:
f8:08:3a:14:07:c3:72:4c:2a:03:06:b8:c4:1c:58:
07:30:0a:54:21:6e:3c:c6:91:a4:9f:ee:85:27:5d:
9f:3b:6e:b4:0c:ab:0d:02:85:d6:c7:bf:3d:49:7d:
f9:fd:b2:c9:f3:52:06:bf:fc:51:02:49:7d:57:0b:
35:14:33:76:31:72:6a:52:6a:e3:87:ee:69:8b:0b:
1c:d4:fc:9e:f8:c3:74:88:4f:df:84:0e:cc:ed:6f:
21:2f:3b:23:27:2b:91:c2:93:48:03:09:7b:e7:ee:
60:b1:dc:9f:0a:a7:87:a7:9b:1c:0d:7f:ce:c8:15:
5d:b9:c5:b0:18:4d:05:06:0c:5b:33:0b:28:51:70:
39:45:b6:1e:cb:80:f5:44:ea:52:b0:a8:03:7e:00:
43:07:3a:90:7c:45:26:3c:d6:3a:7a:63:74:a1:81:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CF:B2:5B:11:67:B5:C2:1A:6D:C5:32:79:A6:7D:67:B8:0E:0E:CD
X509v3 Authority Key Identifier:
keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/82bcabb2abc1cfefb014999f751368c1e8e48e99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.15.192.0/18
186.64.128.0/17
Signature Algorithm: sha256WithRSAEncryption
44:d8:0b:66:05:f8:a0:cb:19:0b:2a:70:9b:d6:d6:c3:e2:6a:
d1:b5:5d:cb:dd:54:82:36:4b:6d:52:a9:8e:3f:50:e0:cd:c5:
e5:7f:08:4f:14:8d:71:97:d6:52:37:33:74:da:17:50:9e:e7:
d6:aa:28:b3:41:74:a0:13:0b:53:39:5b:31:2e:d2:e5:a7:60:
c9:33:12:0d:ed:f0:1a:97:b7:60:6f:2e:b6:5e:c7:a9:47:36:
23:06:37:64:82:fc:2b:68:83:62:56:d1:05:92:d9:aa:99:bf:
37:2f:1f:76:86:df:60:60:ac:2c:93:1d:1c:88:e0:a1:a8:7e:
c0:0e:0a:a7:46:e3:d4:83:40:22:06:dc:eb:8b:32:e5:91:a8:
48:9e:25:6b:03:89:08:b9:a2:85:48:e1:71:f6:5b:32:0d:e7:
c1:7e:f2:ae:e2:bb:d2:fa:55:5d:68:32:4e:95:18:3b:43:ac:
ea:d3:d7:b9:d9:9f:b4:92:dc:d7:01:05:51:02:0d:3b:37:0d:
4c:0e:07:67:33:15:ba:9a:cb:56:e8:fa:14:9d:15:a4:bf:2e:
e7:46:ca:b2:43:7f:ea:1f:10:41:6c:27:4a:dd:bc:8f:c3:8c:
ae:ef:69:73:41:78:9e:62:09:a6:88:31:a7:7c:eb:6e:aa:44:
2c:0e:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org