Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/a98f1ef9da5e6009151b572036320c1805216294.roa
File: a98f1ef9da5e6009151b572036320c1805216294.roa (raw, json)
Hash identifier: 6cM45FpIplRNfNTTmnrwi0SQrCncdgctWIdTtSaG7oo=
Subject key identifier: 60:B6:32:E9:6A:32:9D:C9:37:90:4F:70:8D:B9:28:55:A8:AC:D1:D6
Certificate issuer: /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial: 0DB709
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/a98f1ef9da5e6009151b572036320c1805216294.roa
Signing time: Wed 24 Mar 2021 14:37:02 +0000
ROA not before: Wed 24 Mar 2021 14:37:01 +0000
ROA not after: Tue 24 Mar 2026 14:37:01 +0000
asID: 20299
IP address blocks: 186.4.0.0/18 maxlen: 24
186.32.0.0/18 maxlen: 24
186.32.160.0/19 maxlen: 24
186.32.192.0/19 maxlen: 24
186.176.0.0/17 maxlen: 24
186.176.128.0/17 maxlen: 24
186.177.0.0/17 maxlen: 24
186.177.128.0/18 maxlen: 24
2800:860::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898825 (0xdb709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Validity
Not Before: Mar 24 14:37:01 2021 GMT
Not After : Mar 24 14:37:01 2026 GMT
Subject: CN=a98f1ef9da5e6009151b572036320c1805216294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:f4:3f:ca:99:e6:18:5f:0c:a1:ea:49:78:
e3:02:34:37:47:43:c3:9d:08:1c:1a:20:d5:f8:e8:
df:6c:df:25:b2:f6:f3:67:d1:9a:2b:f9:3e:ef:63:
64:5b:f5:ce:34:23:46:42:7b:ca:71:2b:13:4c:5f:
dd:01:a3:53:68:00:18:c2:d7:81:a9:80:36:fa:3b:
fe:3d:da:2f:59:af:ea:f6:c8:2d:1e:12:d6:64:f1:
4a:ad:01:6f:91:fc:56:11:79:ec:d2:ae:ca:cb:bd:
e0:40:1d:8c:b0:88:7a:a5:fd:74:98:86:8b:c4:be:
24:c7:e3:a6:bb:65:e8:da:85:a1:51:32:a1:7b:cb:
7b:86:a3:09:08:77:b5:76:4f:b1:e4:03:5a:8d:90:
e6:2f:06:14:d9:06:16:a2:e3:15:e5:b2:8c:c6:94:
5c:72:87:b9:3f:33:84:b4:f9:89:2a:f7:5b:25:bc:
59:9a:11:95:97:6e:fe:dd:4d:2a:98:8c:42:c6:12:
82:31:af:29:d5:85:ac:8c:af:90:3f:c6:9e:ea:44:
39:25:16:cd:c6:c0:c1:21:c2:e7:e8:f5:50:0f:7a:
17:c7:68:49:87:6f:8b:89:db:29:e8:d2:da:85:33:
64:b5:c4:de:55:b8:04:f2:8f:bd:8a:90:77:65:43:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B6:32:E9:6A:32:9D:C9:37:90:4F:70:8D:B9:28:55:A8:AC:D1:D6
X509v3 Authority Key Identifier:
keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/a98f1ef9da5e6009151b572036320c1805216294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.4.0.0/18
186.32.0.0/18
186.32.160.0-186.32.223.255
186.176.0.0-186.177.191.255
IPv6:
2800:860::/32
Signature Algorithm: sha256WithRSAEncryption
b2:64:a5:67:0e:ca:f4:37:5a:88:cb:d7:54:2c:c1:63:79:62:
f8:b6:4b:3b:e8:bc:a4:e6:87:2b:12:76:a8:7b:ef:2f:b1:ab:
60:f0:89:30:60:5b:6a:32:1a:8d:84:c2:1c:51:0e:55:b2:75:
d2:1d:f8:4d:a8:88:c4:59:49:61:06:e1:f4:ee:f2:a3:0b:7b:
07:4f:a2:89:e4:48:14:0f:6e:9a:79:a7:71:80:dd:af:b8:e4:
ac:31:50:c9:c8:2f:af:6d:ae:98:bd:38:48:ef:4f:a7:7b:35:
22:96:61:f5:fb:23:7d:34:a2:56:23:7d:a2:dd:45:10:bb:21:
c3:7a:82:6a:5a:e5:26:0d:42:1e:e2:e2:15:e4:f6:4d:10:76:
2d:e2:f9:99:45:81:00:e1:3d:b2:53:e7:3c:1b:87:80:a3:2f:
d8:3d:51:89:00:a5:11:51:3d:d7:3c:4a:3b:05:9d:4a:55:60:
6a:b2:6d:3c:6b:ab:aa:7e:29:3a:c6:89:dd:2a:da:6a:ab:d8:
d2:46:52:01:f0:db:6d:0b:b1:65:96:76:e8:7b:ca:76:1c:06:
f4:32:7e:a8:e6:b2:c8:4b:3b:f8:3d:e4:7b:51:aa:9d:c1:4c:
83:2e:12:3e:46:90:d1:c1:7f:e9:70:1c:df:1c:ee:ba:30:b1:
30:be:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org