Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/771c7cb38fd9c60d25b033ff16a6b97f3d073eb8.roa
File: 771c7cb38fd9c60d25b033ff16a6b97f3d073eb8.roa (raw, json)
Hash identifier: tJJDxbEJU/47wHfDChLJc4l+w+hKDm+b5WQrtmjHXNE=
Subject key identifier: 56:C4:95:FD:D8:7F:02:1E:DE:3B:F4:4A:4C:49:CB:20:B9:39:F7:D2
Certificate issuer: /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial: 1748AA
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/771c7cb38fd9c60d25b033ff16a6b97f3d073eb8.roa
Signing time: Wed 06 Apr 2022 17:08:58 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 06 Apr 2032 03:00:00 +0000
asID: 52347
IP address blocks: 186.177.228.0/22 maxlen: 22
186.177.232.0/21 maxlen: 21
186.177.240.0/24 maxlen: 24
190.93.40.0/23 maxlen: 24
190.93.43.0/24 maxlen: 24
190.111.56.0/24 maxlen: 24
190.111.60.0/24 maxlen: 24
190.111.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525930 (0x1748aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Apr 6 03:00:00 2032 GMT
Subject: CN=771c7cb38fd9c60d25b033ff16a6b97f3d073eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:62:42:dd:71:62:18:89:5c:f1:45:d4:f9:
c1:95:ce:75:cb:51:a5:fb:7d:e6:29:a5:c0:bf:7d:
ef:39:c4:11:fb:b0:a4:71:b0:e0:ff:88:6f:09:a3:
c5:e7:21:68:d5:47:3e:40:a9:42:ec:dc:aa:bc:6b:
4e:62:a9:7a:33:9f:10:02:d1:0b:09:29:85:6b:0d:
8f:39:86:77:78:a7:3e:16:18:fd:e9:73:3b:38:4c:
b6:09:47:8b:08:f8:cd:a2:79:61:7b:0c:43:af:79:
ab:f7:cd:e4:37:b8:8f:50:cc:27:ad:ce:f8:05:ce:
27:b6:c3:f4:bf:82:90:12:c7:cf:bb:e1:4b:03:64:
74:ce:e7:6f:3c:5a:5b:de:c1:2d:fd:9d:04:f2:ea:
3f:a3:d5:c4:16:ea:3a:0d:06:0e:a1:37:66:07:ef:
f6:99:9b:40:24:a6:2f:3f:cd:e7:d4:c0:db:21:11:
df:cc:7c:35:bc:b4:e1:e9:89:6a:b1:8b:32:66:3e:
73:68:a5:fc:06:07:f8:3e:8e:00:2d:ff:15:ce:db:
4d:66:7b:9b:4a:d0:b8:df:c2:79:1e:d7:f7:bd:8b:
fa:ff:1d:6d:b5:fd:c3:2a:48:00:e2:aa:72:eb:bd:
b6:82:6f:f9:7a:31:cd:96:29:1a:65:b6:a7:10:9d:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C4:95:FD:D8:7F:02:1E:DE:3B:F4:4A:4C:49:CB:20:B9:39:F7:D2
X509v3 Authority Key Identifier:
keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/771c7cb38fd9c60d25b033ff16a6b97f3d073eb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.177.228.0-186.177.240.255
190.93.40.0/23
190.93.43.0/24
190.111.56.0/24
190.111.60.0/24
190.111.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a2:58:50:28:17:3e:ed:67:16:97:5b:7b:45:1f:b3:94:fb:
c3:d0:5c:2a:fb:12:81:09:b9:15:98:f3:d5:89:1d:ce:e1:a3:
85:4e:24:d4:f8:a8:75:67:f9:41:76:bb:ce:80:f4:81:be:0e:
22:6d:6f:aa:3b:d0:a2:78:83:23:9b:3b:6a:51:99:a9:3a:b9:
b2:26:65:db:55:a1:ca:37:f9:75:8e:c3:42:3b:b4:97:30:e1:
b4:2d:bb:3d:75:b9:7f:d8:d2:d8:51:c5:ce:01:f2:5a:50:39:
0c:1e:d7:25:89:7a:e4:ca:e8:98:d3:9c:2a:b2:40:37:c6:1b:
5a:bf:97:4f:25:14:70:3f:15:ac:c7:bb:4f:69:82:ad:ca:bd:
16:8b:e8:f2:03:df:a1:55:5f:ad:92:98:7c:98:ec:e3:41:ab:
18:49:23:e8:6a:65:7d:7b:fe:26:14:9b:11:a9:05:53:61:d0:
4f:20:3e:93:f7:b4:4d:af:79:91:bc:34:f7:ac:f5:99:e8:58:
39:c4:48:57:cf:ca:8f:1f:c0:29:e7:82:e5:c2:89:3a:3f:16:
f4:0a:c3:0a:61:e4:b4:01:63:9a:07:08:94:34:b0:ff:d7:a3:
4b:0a:99:9e:94:94:c4:97:67:07:65:2d:1e:c6:3f:cf:00:7f:
5c:c4:8d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org