Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/886fd80b74652e0fe60cfbff946f47b175455816.roa
File: 886fd80b74652e0fe60cfbff946f47b175455816.roa (raw, json)
Hash identifier: iDzHhn6qpF87Vzjbd6di4wv2KuPI92oK4SAXGnxr+BY=
Subject key identifier: F7:FE:40:5B:EE:C5:7A:B1:17:E6:66:07:05:71:A8:68:93:43:69:E7
Certificate issuer: /CN=429f210b98677033fc9a53a0399f1ebe43c09997
Certificate serial: 1FD599
Authority key identifier: 46:E3:01:7B:00:E8:72:F1:93:B3:E8:09:E9:FF:C3:4E:C4:0F:31:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429f210b98677033fc9a53a0399f1ebe43c09997.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/886fd80b74652e0fe60cfbff946f47b175455816.roa
Signing time: Mon 08 May 2023 15:32:04 +0000
ROA not before: Sun 07 May 2023 15:32:04 +0000
ROA not after: Thu 08 May 2025 15:32:04 +0000
asID: 11556
IP address blocks: 186.72.0.0/14 maxlen: 24
190.32.0.0/14 maxlen: 24
201.224.0.0/14 maxlen: 24
2800:350::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2086297 (0x1fd599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429f210b98677033fc9a53a0399f1ebe43c09997
Validity
Not Before: May 7 15:32:04 2023 GMT
Not After : May 8 15:32:04 2025 GMT
Subject: CN=886fd80b74652e0fe60cfbff946f47b175455816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:e1:1b:5d:d7:40:cf:58:60:60:1c:ce:ac:
7b:28:ed:32:f6:ec:93:4c:83:0d:6f:da:ba:37:56:
f9:02:3d:42:88:01:af:b6:c5:c6:5a:ea:93:4c:f9:
da:39:01:d0:32:e0:f0:5f:dd:52:f2:d7:19:25:aa:
c6:76:d6:d4:c6:65:aa:c9:f2:e8:f7:22:31:ed:7c:
dc:51:e5:62:df:02:e3:69:79:8a:39:1d:46:ad:7f:
49:a5:ff:1e:4d:7c:04:55:05:02:75:d4:88:6e:a8:
77:b3:e8:fa:55:e3:41:6c:39:24:bf:4c:92:a9:d3:
47:1f:da:1c:6b:40:fc:b8:26:41:27:3d:f5:1f:bd:
d8:cf:09:20:77:8c:32:69:32:e2:1c:4f:ec:66:eb:
47:95:e0:69:b5:4d:2b:0f:3b:0b:e5:7a:ca:e0:07:
bf:11:90:4f:96:0e:e4:92:3b:0c:95:88:51:3b:95:
0a:2b:59:f3:29:14:68:6f:5a:3a:ec:cd:77:31:6c:
9f:70:dd:34:4c:d6:14:33:48:75:59:b6:7d:aa:5b:
e2:87:3a:93:de:f6:28:c0:4c:0d:64:33:af:a8:47:
e7:c5:c7:05:37:51:b7:61:66:61:61:b8:2c:6a:cc:
f8:0c:66:ea:87:6b:54:be:8c:57:4a:27:fc:0f:21:
f2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FE:40:5B:EE:C5:7A:B1:17:E6:66:07:05:71:A8:68:93:43:69:E7
X509v3 Authority Key Identifier:
keyid:46:E3:01:7B:00:E8:72:F1:93:B3:E8:09:E9:FF:C3:4E:C4:0F:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429f210b98677033fc9a53a0399f1ebe43c09997.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/886fd80b74652e0fe60cfbff946f47b175455816.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/429f210b98677033fc9a53a0399f1ebe43c09997.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.72.0.0/14
190.32.0.0/14
201.224.0.0/14
IPv6:
2800:350::/29
Signature Algorithm: sha256WithRSAEncryption
a5:17:29:b8:da:85:39:f4:f6:51:68:26:d1:01:e8:bd:ab:9a:
1c:6f:c4:a6:ef:38:7c:cd:81:ab:26:af:cc:9c:c5:cd:c7:ee:
0a:ba:fb:8f:10:1b:19:72:7f:f0:46:c2:1f:a7:7f:59:b7:b6:
09:ab:f2:86:5d:2d:f3:fc:ed:a0:e7:af:7b:a2:cc:99:f9:b4:
01:0b:42:b0:8a:6b:b5:4f:7d:39:49:3f:60:30:14:36:ad:17:
d6:cb:a8:50:2a:6d:48:ca:f7:26:47:64:9a:26:f4:ee:fe:40:
d7:0c:7c:10:29:70:8d:63:ff:d9:cc:d1:93:c3:86:c3:f2:a0:
77:b1:e3:dc:1f:40:a2:03:e4:01:22:fc:f7:bf:98:94:0a:2d:
4f:39:de:6b:43:da:70:87:34:05:7e:9f:62:80:b3:95:31:54:
6e:4c:64:5c:04:1e:66:66:cd:2a:47:f7:ac:5d:3f:f9:88:2e:
76:8e:53:59:3b:43:f6:ff:d9:64:b5:e5:5b:ab:67:e6:e5:15:
a1:c2:d9:f4:43:06:56:71:1c:07:df:58:1c:65:30:0a:14:84:
73:09:6f:5b:81:4d:b0:63:95:49:9f:c7:c1:e8:b3:39:a0:38:
61:ec:b9:61:d2:25:ff:9e:f1:89:f7:07:bd:81:09:cc:e8:07:
de:a2:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org