Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cbf373a-055e-4035-b035-f752b0ba5013/180544d48b257eecd3fda73346cb31ec5f2152ea.roa
File: 180544d48b257eecd3fda73346cb31ec5f2152ea.roa (raw, json)
Hash identifier: U03MEY64Yta7T5/HbgTW5NY8f3TzC3kGluP3jjUwsP8=
Subject key identifier: BC:BC:AF:53:10:59:F3:4B:AE:14:9A:A0:D8:B8:20:BF:1F:C9:51:A6
Certificate issuer: /CN=4b4c5765f74fbd78fb02b1160119afeb4a096d71
Certificate serial: 0DE8AF
Authority key identifier: 29:47:4A:87:AC:6D:B5:04:5C:58:EB:56:12:B3:12:49:24:5A:17:AB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b4c5765f74fbd78fb02b1160119afeb4a096d71.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3cbf373a-055e-4035-b035-f752b0ba5013/180544d48b257eecd3fda73346cb31ec5f2152ea.roa
Signing time: Wed 24 Mar 2021 14:30:11 +0000
ROA not before: Wed 24 Mar 2021 14:30:11 +0000
ROA not after: Tue 24 Mar 2026 14:30:11 +0000
asID: 52473
IP address blocks: 186.148.120.0/21 maxlen: 24
190.8.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911535 (0xde8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4c5765f74fbd78fb02b1160119afeb4a096d71
Validity
Not Before: Mar 24 14:30:11 2021 GMT
Not After : Mar 24 14:30:11 2026 GMT
Subject: CN=180544d48b257eecd3fda73346cb31ec5f2152ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:02:a8:98:5a:1a:e5:e8:57:85:32:59:fe:6d:
ae:b7:3c:71:71:8b:b8:fc:29:0b:c6:8e:e7:44:bd:
0a:3d:29:14:44:55:61:24:db:cb:0b:da:16:cf:19:
20:46:ff:26:54:d7:3c:b0:90:10:56:a2:b3:8d:66:
d9:32:57:37:c9:82:d4:ec:d2:f5:73:7d:3f:19:27:
b4:05:b6:75:64:6c:2b:67:0a:54:7a:eb:4a:c6:9c:
21:28:dc:3a:fd:46:82:93:bb:79:86:6f:4e:c9:20:
97:a6:a0:5f:4e:3a:4f:39:e2:f5:c0:ef:1d:99:8f:
74:6e:b4:fe:26:1a:fe:62:93:d2:c1:7d:f8:f2:a7:
a3:73:96:ad:42:44:99:37:95:d6:bc:85:ed:47:84:
29:c5:b2:d5:e5:97:71:57:93:bd:d0:98:1d:a8:54:
6b:1a:d3:d3:cf:cf:cd:23:d5:5d:09:90:ec:87:f1:
85:9b:93:fd:94:d1:2f:33:31:61:8c:93:ed:98:e1:
6b:30:52:fc:59:c6:06:bc:ed:dc:e8:e6:8f:f6:60:
1e:86:41:ff:97:fd:24:5b:11:51:fd:64:11:fd:49:
9c:87:05:6c:3a:ce:83:90:f2:ff:e2:e3:22:e2:b8:
7c:e9:f5:bb:7a:77:c6:c6:8c:21:74:c4:12:fd:b6:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BC:AF:53:10:59:F3:4B:AE:14:9A:A0:D8:B8:20:BF:1F:C9:51:A6
X509v3 Authority Key Identifier:
keyid:29:47:4A:87:AC:6D:B5:04:5C:58:EB:56:12:B3:12:49:24:5A:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b4c5765f74fbd78fb02b1160119afeb4a096d71.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cbf373a-055e-4035-b035-f752b0ba5013/180544d48b257eecd3fda73346cb31ec5f2152ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3cbf373a-055e-4035-b035-f752b0ba5013/4b4c5765f74fbd78fb02b1160119afeb4a096d71.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.148.120.0/21
190.8.184.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:f1:eb:16:6c:da:fa:45:a0:cf:90:17:a9:e0:72:e9:5e:9c:
31:ed:e2:aa:d7:62:26:77:c8:54:d3:70:a1:21:f9:23:0d:ec:
0f:d5:fc:25:a0:58:36:71:9e:44:c6:1d:cf:ff:c9:9b:82:cb:
bb:9b:71:10:95:10:e3:9f:55:c4:0c:c0:06:d8:31:44:38:6b:
4b:52:31:4d:5e:f6:55:45:ad:56:2a:cc:a9:29:01:16:76:24:
cd:7b:0c:20:08:1b:c0:b0:11:8d:6f:a8:13:c9:9b:b0:6e:b2:
6a:87:2f:eb:9d:a1:1e:52:ff:51:f7:e8:cf:fd:3d:c1:16:60:
82:d3:1c:b8:0e:9f:f6:bf:8f:72:cb:d2:b7:92:d3:97:35:03:
07:94:50:4f:e5:9d:50:32:da:c0:22:0e:0d:b7:50:62:e2:1b:
88:62:24:0c:f5:13:00:57:54:3c:23:07:61:22:16:65:8c:1f:
80:98:cb:83:9a:ed:f8:9a:25:a1:51:d4:46:17:8e:46:76:20:
c2:99:01:8d:a5:24:63:d3:37:cc:e7:2f:c9:7f:1e:f8:bd:4b:
7e:75:a2:3a:ce:8b:08:67:56:b7:c0:76:62:7e:fb:cd:22:56:
45:72:a6:86:14:32:0b:d3:f0:e1:af:79:48:05:f0:e4:9b:58:
ec:54:0b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org