Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/f8f81e3c42ab2e15d82f7aed6a23010c2ab68d1c.roa
File: f8f81e3c42ab2e15d82f7aed6a23010c2ab68d1c.roa (raw, json)
Hash identifier: 5b6cPuqYnDdG1w9aIT/cLABx2oZHj20tnfK8zfoOLpc=
Subject key identifier: 3C:4D:CD:F9:DC:D4:52:F3:4C:82:A2:F9:BE:E6:E9:D8:81:12:AC:FB
Certificate issuer: /CN=0ab335413c1ba3baeef4f7410d98340c0e6acd4c
Certificate serial: 2263CB
Authority key identifier: 9E:F2:09:99:59:88:69:41:CF:8E:62:1B:AF:18:6F:BC:93:40:DB:16
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ab335413c1ba3baeef4f7410d98340c0e6acd4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/f8f81e3c42ab2e15d82f7aed6a23010c2ab68d1c.roa
Signing time: Mon 16 Oct 2023 21:42:11 +0000
ROA not before: Sun 15 Oct 2023 21:42:11 +0000
ROA not after: Thu 16 Oct 2025 21:42:11 +0000
asID: 23201
IP address blocks: 190.2.192.0/20 maxlen: 24
186.2.192.0/19 maxlen: 24
186.2.224.0/20 maxlen: 24
190.114.224.0/21 maxlen: 21
190.121.160.0/20 maxlen: 20
186.16.0.0/15 maxlen: 24
200.85.32.0/19 maxlen: 24
181.120.0.0/13 maxlen: 24
186.0.188.0/22 maxlen: 24
181.40.0.0/16 maxlen: 24
190.128.128.0/17 maxlen: 24
200.26.176.0/21 maxlen: 24
2800:c70::/32 maxlen: 48
2800:3a0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2253771 (0x2263cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab335413c1ba3baeef4f7410d98340c0e6acd4c
Validity
Not Before: Oct 15 21:42:11 2023 GMT
Not After : Oct 16 21:42:11 2025 GMT
Subject: CN=f8f81e3c42ab2e15d82f7aed6a23010c2ab68d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:bc:07:f1:25:e6:60:61:99:7f:38:88:17:
18:a6:57:e6:dd:96:b2:42:bc:c9:78:43:bb:ca:5c:
83:83:7a:49:a0:b1:ef:8e:d5:61:c9:8a:64:90:7f:
1f:6d:ea:3f:48:df:6a:65:c0:63:d1:12:e0:bc:13:
a0:7a:b9:f5:be:e3:c1:bf:25:1c:a3:83:ba:05:95:
c1:8c:cd:cc:a0:33:d8:7d:09:70:79:e6:2d:8c:a7:
d7:7a:a8:e1:b1:c4:cf:9b:66:de:33:7a:b6:cb:ba:
52:a7:62:e2:d1:e9:7e:2b:80:17:c2:d5:21:5f:5b:
da:50:17:a0:5c:d4:19:1e:89:c0:f8:f6:d5:1f:9f:
a7:52:9d:1b:03:da:44:55:1f:84:ba:3f:8d:20:bd:
35:7a:8f:94:12:13:5b:a7:06:ca:1a:b8:77:1c:35:
4b:a8:ef:7d:7b:21:5e:32:41:ab:5f:94:bf:e5:e4:
b3:f4:0d:a5:7a:6f:1a:10:ee:46:79:b5:c3:da:d8:
c7:04:b5:55:a3:d4:b8:ce:a9:3d:b8:9f:7d:da:47:
fb:c1:1e:17:87:de:af:89:93:dc:32:2a:1d:3f:40:
e2:ca:df:d0:a3:d3:be:10:d9:3d:e4:1c:a9:00:e7:
86:f1:d7:e2:5f:c5:53:c8:c3:cb:e0:c6:d3:f3:86:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4D:CD:F9:DC:D4:52:F3:4C:82:A2:F9:BE:E6:E9:D8:81:12:AC:FB
X509v3 Authority Key Identifier:
keyid:9E:F2:09:99:59:88:69:41:CF:8E:62:1B:AF:18:6F:BC:93:40:DB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ab335413c1ba3baeef4f7410d98340c0e6acd4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/f8f81e3c42ab2e15d82f7aed6a23010c2ab68d1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/0ab335413c1ba3baeef4f7410d98340c0e6acd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.40.0.0/16
181.120.0.0/13
186.0.188.0/22
186.2.192.0-186.2.239.255
186.16.0.0/15
190.2.192.0/20
190.114.224.0/21
190.121.160.0/20
190.128.128.0/17
200.26.176.0/21
200.85.32.0/19
IPv6:
2800:3a0::/32
2800:c70::/32
Signature Algorithm: sha256WithRSAEncryption
7a:98:12:98:48:6d:c5:09:97:e9:07:35:a7:a3:30:20:8f:e4:
4f:5f:35:8f:ed:f3:eb:46:99:b9:8d:c3:1d:53:e1:e2:93:00:
dc:a0:6e:ef:3e:e5:29:50:c4:b6:a6:4c:73:7d:91:08:67:9d:
d5:d1:ab:bc:1c:c7:ab:f9:09:4a:be:dc:6e:40:ed:67:81:1c:
30:d6:98:7a:70:af:4d:43:f2:55:22:cd:4e:60:54:b2:a5:77:
d8:bd:b1:18:a0:98:96:d3:d7:2b:8e:32:7e:81:42:7f:21:01:
7e:6c:67:62:31:82:e5:df:49:9f:46:5c:a9:05:0b:d4:3b:e9:
d6:fd:45:d1:ee:09:23:ac:f3:c3:de:bb:ed:19:7a:df:56:94:
9f:8f:8d:0d:c0:6b:c4:81:83:88:66:a2:2f:ea:e5:ef:77:12:
47:cd:a6:7a:8d:14:44:d6:a2:71:00:dd:47:a6:13:0e:28:66:
0c:ed:09:f9:f3:61:8d:09:a2:98:00:32:7c:01:30:ad:c8:86:
9c:e4:d4:bf:8e:04:6b:08:d9:a0:e0:6f:c5:7e:6c:84:4f:c8:
92:b7:70:7f:63:8f:c1:3e:4c:6a:9c:63:20:6d:3d:a8:a2:46:
7e:ad:5f:be:75:07:00:61:41:8a:4a:3e:09:d4:5d:83:b2:b6:
bd:81:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org