Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/7faf133ed4ffdf39a079ceca8f442d7f6db5d7aa.roa
File: 7faf133ed4ffdf39a079ceca8f442d7f6db5d7aa.roa (raw, json)
Hash identifier: pSH8Mih+ZI25Y5yMcV76uXyMdPLqoe+pR4aEQqYtf/0=
Subject key identifier: AA:4B:8B:25:68:D9:59:FE:6B:2A:A1:2E:90:42:5E:CD:65:54:3E:1D
Certificate issuer: /CN=7cd1ba1c4f2170f7f3f283070d2f069edc42eeef
Certificate serial: 3245
Authority key identifier: 8F:31:10:80:6C:2F:2C:5B:E3:65:90:C1:B5:59:B5:9F:E3:15:DC:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/7faf133ed4ffdf39a079ceca8f442d7f6db5d7aa.roa
Signing time: Thu 13 Oct 2022 16:30:56 +0000
ROA not before: Wed 05 Oct 2022 22:13:33 +0000
ROA not after: Mon 07 Oct 2024 22:13:33 +0000
asID: 10778
IP address blocks: 168.196.184.0/22 maxlen: 22
168.196.184.0/23 maxlen: 24
168.196.186.0/23 maxlen: 24
168.196.184.0/24 maxlen: 24
168.196.185.0/24 maxlen: 24
168.196.186.0/24 maxlen: 24
168.196.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12869 (0x3245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd1ba1c4f2170f7f3f283070d2f069edc42eeef
Validity
Not Before: Oct 5 22:13:33 2022 GMT
Not After : Oct 7 22:13:33 2024 GMT
Subject: CN=7faf133ed4ffdf39a079ceca8f442d7f6db5d7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:c2:c7:34:81:18:57:53:5f:d2:29:1a:4d:
aa:1a:dd:d8:b2:20:d8:6c:04:84:ae:22:b0:8f:d5:
ae:0f:fe:ad:73:27:a3:48:c3:e5:c0:19:4f:cf:bc:
4e:9e:db:94:3d:a2:2e:52:fe:e3:a9:76:9f:7c:69:
cb:a3:b7:a0:e8:fc:dd:b8:65:47:b3:f3:f7:b0:fb:
d9:a0:8d:16:3a:9a:ee:ed:40:5a:ae:94:db:1f:44:
68:83:80:43:03:bb:be:1a:06:35:d3:82:54:89:68:
b6:d7:9a:bf:c4:3d:cb:70:67:38:e3:80:53:0d:ef:
4a:1f:2f:e3:d1:64:56:36:9d:34:42:33:a1:93:8c:
38:a3:16:5a:d3:cc:63:20:e1:30:7d:b1:b9:8e:d9:
63:7a:5c:c3:0a:ac:75:ba:3b:0b:2b:b9:32:29:f4:
d7:27:0e:5c:7b:2e:77:6c:0f:1f:8c:9d:b8:45:dd:
2b:94:e7:07:5c:03:34:bc:a1:52:2b:9c:e0:14:a8:
d2:99:94:90:93:48:4a:0b:65:f3:5e:c5:c1:3d:88:
e2:fa:84:1c:55:06:5b:a4:ba:dd:d0:9b:9b:03:a4:
55:62:b3:8f:52:78:80:d7:2b:19:df:de:03:36:e3:
2b:36:67:bc:ff:a1:08:59:47:c4:47:dd:92:42:62:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:8B:25:68:D9:59:FE:6B:2A:A1:2E:90:42:5E:CD:65:54:3E:1D
X509v3 Authority Key Identifier:
keyid:8F:31:10:80:6C:2F:2C:5B:E3:65:90:C1:B5:59:B5:9F:E3:15:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/7faf133ed4ffdf39a079ceca8f442d7f6db5d7aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.184.0/22
Signature Algorithm: sha256WithRSAEncryption
77:dc:8b:49:b1:4c:2f:ac:f1:89:c4:83:06:64:58:05:e5:47:
d5:46:dd:fa:3b:0b:16:80:a1:36:30:a2:48:23:da:2b:77:41:
4f:f1:44:b1:54:a3:e0:de:c6:cc:6c:f0:5b:1d:95:6f:a1:af:
90:24:ae:0b:05:9c:e1:6b:dc:52:b1:d4:7c:a4:18:0a:e6:60:
bc:be:17:fd:77:9a:06:88:56:35:18:f6:cc:a5:12:6d:33:2b:
19:b9:74:db:47:36:c0:75:db:6b:46:b2:d8:71:d0:e2:e9:f2:
98:7c:e3:c4:3b:6a:94:73:f8:ee:77:1a:a7:1b:97:65:40:2b:
ad:e2:b4:20:94:27:81:c8:b3:5f:7e:2c:62:db:c2:54:45:0a:
39:24:13:77:3a:b2:4e:55:4e:73:b8:d4:b8:e9:51:1c:4a:d4:
54:ca:4f:88:b4:91:03:21:2b:2d:05:78:79:16:97:d9:66:73:
df:b1:61:8a:78:a8:e9:f0:26:40:77:fb:05:8b:5b:3f:b7:36:
a4:b4:25:21:c5:18:99:4d:2b:98:92:59:ac:83:b9:bf:8a:43:
2f:d0:a0:73:50:6f:5c:83:d6:54:6b:bd:3b:5a:cc:af:f9:a2:
cb:47:42:9e:2a:63:ad:03:f9:35:60:73:96:97:af:4f:76:bc:
7b:a5:6b:cc
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICMkUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN2Nk
MWJhMWM0ZjIxNzBmN2YzZjI4MzA3MGQyZjA2OWVkYzQyZWVlZjAeFw0yMjEwMDUy
MjEzMzNaFw0yNDEwMDcyMjEzMzNaMDMxMTAvBgNVBAMTKDdmYWYxMzNlZDRmZmRm
MzlhMDc5Y2VjYThmNDQyZDdmNmRiNWQ3YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClTsLHNIEYV1Nf0ikaTaoa3diyINhsBISuIrCP1a4P/q1zJ6NI
w+XAGU/PvE6e25Q9oi5S/uOpdp98acujt6Do/N24ZUez8/ew+9mgjRY6mu7tQFqu
lNsfRGiDgEMDu74aBjXTglSJaLbXmr/EPctwZzjjgFMN70ofL+PRZFY2nTRCM6GT
jDijFlrTzGMg4TB9sbmO2WN6XMMKrHW6OwsruTIp9NcnDlx7LndsDx+MnbhF3SuU
5wdcAzS8oVIrnOAUqNKZlJCTSEoLZfNexcE9iOL6hBxVBlukut3Qm5sDpFVis49S
eIDXKxnf3gM24ys2Z7z/oQhZR8RH3ZJCYvXjAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUqkuLJWjZWf5rKqEukEJezWVUPh0wHwYDVR0jBBgwFoAUjzEQgGwvLFvjZZDB
tVm1n+MV3OcwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS83Y2QxYmEx
YzRmMjE3MGY3ZjNmMjgzMDcwZDJmMDY5ZWRjNDJlZWVmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8yZWE3YTQ1MC04OTE4LTQ4N2QtYTAxZS02ZDU5ZWYz
M2UxYTAvN2ZhZjEzM2VkNGZmZGYzOWEwNzljZWNhOGY0NDJkN2Y2ZGI1ZDdhYS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzJlYTdhNDUwLTg5MTgtNDg3ZC1hMDFlLTZkNTll
ZjMzZTFhMC83Y2QxYmExYzRmMjE3MGY3ZjNmMjgzMDcwZDJmMDY5ZWRjNDJlZWVm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCqMS4MA0GCSqGSIb3DQEBCwUAA4IBAQB33ItJsUwvrPGJxIMG
ZFgF5UfVRt36OwsWgKE2MKJII9ord0FP8USxVKPg3sbMbPBbHZVvoa+QJK4LBZzh
a9xSsdR8pBgK5mC8vhf9d5oGiFY1GPbMpRJtMysZuXTbRzbAddtrRrLYcdDi6fKY
fOPEO2qUc/judxqnG5dlQCut4rQglCeByLNffixi28JURQo5JBN3OrJOVU5zuNS4
6VEcStRUyk+ItJEDISstBXh5FpfZZnPfsWGKeKjp8CZAd/sFi1s/tzaktCUhxRiZ
TSuYklmsg7m/ikMv0KBzUG9cg9ZUa707Wsyv+aLLR0KeKmOtA/k1YHOWl69Pdrx7
pWvM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-ams.rpki-client.org