Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/4c052f47beeeb5cd69c78f54ab89bc98b8fb141d.roa
File: 4c052f47beeeb5cd69c78f54ab89bc98b8fb141d.roa (raw, json)
Hash identifier: pMiVurTmz7g5OBhShigmIhdzIdLK6D3dAc8ccN+ZGgs=
Subject key identifier: 5F:28:36:08:8F:B5:D7:77:75:A2:5A:D7:57:4B:16:28:C2:FA:83:CF
Certificate issuer: /CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Certificate serial: 21BD7E
Authority key identifier: 4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/4c052f47beeeb5cd69c78f54ab89bc98b8fb141d.roa
Signing time: Fri 25 Aug 2023 12:30:53 +0000
ROA not before: Thu 24 Aug 2023 12:30:53 +0000
ROA not after: Mon 25 Aug 2025 12:30:53 +0000
asID: 52436
IP address blocks: 132.255.112.0/22 maxlen: 22
168.181.208.0/22 maxlen: 24
168.196.32.0/22 maxlen: 24
138.97.176.0/22 maxlen: 24
207.248.124.0/22 maxlen: 24
190.120.244.0/22 maxlen: 22
179.42.168.0/22 maxlen: 24
190.122.180.0/22 maxlen: 24
2803:b900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211198 (0x21bd7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Validity
Not Before: Aug 24 12:30:53 2023 GMT
Not After : Aug 25 12:30:53 2025 GMT
Subject: CN=4c052f47beeeb5cd69c78f54ab89bc98b8fb141d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9a:75:58:5b:f6:e0:05:c2:81:31:b5:8e:f7:
f3:79:da:28:04:43:94:f9:97:b9:fa:c2:64:d6:8f:
16:a9:16:ea:a3:da:8b:30:e3:2a:0b:21:c2:b1:d2:
cf:10:e0:4e:8f:d9:1f:2c:f3:c8:50:d6:ed:b1:f3:
8c:5d:01:4d:95:4f:8f:b9:f1:e2:dc:0c:94:2c:50:
dd:3c:80:84:34:0a:de:24:c7:17:06:63:86:e5:22:
7d:95:4b:73:1d:c8:28:cd:f1:7b:54:fd:be:94:8c:
86:5f:41:6b:df:c2:6c:5f:f9:25:85:cb:2e:9f:a9:
3f:18:c1:63:8e:3a:a7:48:e1:05:96:35:c3:18:f3:
09:e8:88:e4:e9:df:20:84:64:57:5d:52:59:fa:40:
a0:00:ec:7c:0b:94:7d:55:33:27:9e:0f:6f:c6:48:
3a:d2:e9:05:cf:71:bd:73:5b:ca:b9:52:41:d3:70:
fe:54:cd:6c:7e:d6:f4:e3:09:71:0f:dc:a9:44:96:
91:f2:f2:67:d3:15:f0:bd:dc:94:3c:08:21:a9:9c:
84:ad:f2:48:7e:75:57:40:2c:66:4d:c0:49:d8:76:
52:b1:ed:d3:02:be:30:17:31:70:33:4f:84:95:e1:
18:5d:c1:5a:52:07:bc:41:77:06:8e:0a:9d:67:0c:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:28:36:08:8F:B5:D7:77:75:A2:5A:D7:57:4B:16:28:C2:FA:83:CF
X509v3 Authority Key Identifier:
keyid:4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/4c052f47beeeb5cd69c78f54ab89bc98b8fb141d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.112.0/22
138.97.176.0/22
168.181.208.0/22
168.196.32.0/22
179.42.168.0/22
190.120.244.0/22
190.122.180.0/22
207.248.124.0/22
IPv6:
2803:b900::/32
Signature Algorithm: sha256WithRSAEncryption
5f:79:65:f1:60:a6:2b:c7:91:8e:c2:e9:09:5e:13:2c:1f:92:
c2:94:ed:44:fe:dd:ec:b2:c7:15:46:c6:f9:49:59:f2:72:06:
18:f5:41:4d:50:28:5f:40:4e:08:ad:34:58:33:78:ec:e4:5d:
4c:be:c9:6b:d1:68:3e:4e:8c:e1:c6:d1:ad:9e:cd:80:83:68:
02:a9:b4:68:32:e9:48:ba:a4:6d:18:78:10:1a:77:85:32:f2:
cb:56:ce:e1:bd:0b:6f:a3:83:c4:68:3a:7c:d8:3a:7e:03:34:
24:30:96:a1:99:78:37:8d:5f:f4:ef:a3:08:96:2e:99:83:b8:
34:41:be:14:78:6c:f6:de:f9:85:64:34:53:a1:41:20:77:31:
f0:83:66:64:bd:fe:3e:39:f9:1c:2e:b7:13:21:90:9a:ae:68:
74:96:ec:e4:bb:03:bb:76:d6:dd:64:ef:89:c7:bf:8f:c7:37:
e3:33:d5:4d:b7:35:26:1f:a5:48:ca:f3:f7:0a:4b:43:39:2e:
6b:96:e3:90:26:a5:41:0b:0e:5d:a0:b0:36:54:d1:c3:2c:d8:
21:a4:f7:76:53:b5:0c:5b:69:ba:4e:5b:d3:fe:87:07:dc:47:
48:d4:0b:fa:ea:96:43:02:71:9b:ac:05:2a:d3:b0:f3:2c:a4:
e1:b4:f7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org