Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/9bd3f86a8e58238d21d4fdafd95d6f513b3aeb4e.roa
File: 9bd3f86a8e58238d21d4fdafd95d6f513b3aeb4e.roa (raw, json)
Hash identifier: 3wKGRn0a2aXrcf6GR320saD+4/d9FOR73giz5uiOFWU=
Subject key identifier: 3C:25:CD:BF:8B:56:3D:03:BE:1B:ED:00:8C:AC:60:FD:16:5B:7A:D7
Certificate issuer: /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial: 1D34B4
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/9bd3f86a8e58238d21d4fdafd95d6f513b3aeb4e.roa
Signing time: Fri 18 Nov 2022 01:09:55 +0000
ROA not before: Sun 21 Mar 2021 03:00:00 +0000
ROA not after: Tue 06 Apr 2032 03:00:00 +0000
asID: 52347
IP address blocks: 186.177.228.0/22 maxlen: 22
186.177.232.0/21 maxlen: 21
186.177.240.0/24 maxlen: 24
190.93.40.0/24 maxlen: 24
190.93.41.0/24 maxlen: 24
190.93.42.0/24 maxlen: 24
190.93.43.0/24 maxlen: 24
190.111.40.0/21 maxlen: 21
190.111.56.0/24 maxlen: 24
190.111.60.0/24 maxlen: 24
190.111.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914036 (0x1d34b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
Validity
Not Before: Mar 21 03:00:00 2021 GMT
Not After : Apr 6 03:00:00 2032 GMT
Subject: CN=9bd3f86a8e58238d21d4fdafd95d6f513b3aeb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:b4:bb:ed:cb:5f:ac:cc:25:ac:11:87:51:
6b:65:f2:ab:d3:cb:c8:96:3d:65:ec:18:8d:5f:0e:
ff:dd:6b:76:f6:65:f5:df:62:0b:ff:2a:f8:3f:f1:
60:ef:9c:ba:33:23:53:ea:04:60:0a:1a:dd:94:0e:
36:87:32:3e:90:da:f8:17:14:fb:bc:fe:9b:45:a3:
85:93:ec:22:ee:dd:fa:4b:6f:c4:96:4e:74:40:bc:
ed:6e:6e:04:b7:d2:7a:42:57:cf:21:82:ff:c0:dd:
5c:6a:c8:ed:84:95:a1:94:6b:81:fd:bb:5b:ed:89:
2e:e6:0c:44:03:08:67:02:78:75:81:2f:51:03:21:
0c:3c:3d:bd:10:cd:01:79:5e:09:e7:58:66:a5:96:
65:db:64:fc:63:01:5c:e9:70:69:b6:ae:66:e6:ad:
61:90:28:df:81:a1:29:b9:82:88:27:59:5d:7d:70:
32:38:d4:b7:78:48:5d:bf:4f:99:c8:ed:14:06:ac:
11:1d:8a:d9:6c:22:f5:81:3e:01:1e:4b:a1:03:18:
5c:99:c3:32:f3:79:b5:18:d3:ef:7a:3b:51:e1:15:
d1:bd:c6:b7:ca:3a:c6:63:bb:f9:6a:fa:fa:db:1b:
34:87:58:0e:fb:68:99:37:52:b3:da:45:88:6d:84:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:CD:BF:8B:56:3D:03:BE:1B:ED:00:8C:AC:60:FD:16:5B:7A:D7
X509v3 Authority Key Identifier:
keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/9bd3f86a8e58238d21d4fdafd95d6f513b3aeb4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.177.228.0-186.177.240.255
190.93.40.0/22
190.111.40.0/21
190.111.56.0/24
190.111.60.0/24
190.111.63.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2f:cd:fe:a7:e4:bd:f3:5e:9a:a8:bb:d3:0e:06:fd:13:24:
50:e7:c7:2d:2d:f2:49:7d:eb:e9:87:7d:23:69:54:9c:90:e9:
7a:4a:cb:b7:8a:f8:c3:98:19:d3:75:4e:21:d7:24:13:22:29:
df:ad:7c:63:2f:2c:b4:21:4b:56:51:6d:1a:81:d6:82:b4:2f:
0d:ce:e1:85:3d:bc:a6:97:8a:34:84:ab:e5:cc:60:7a:59:59:
19:98:9b:11:b1:11:5b:c9:41:80:3f:14:5b:db:e1:8f:2d:3a:
fa:63:0d:47:32:2f:45:f2:25:d6:2c:21:38:83:fc:d8:a8:6a:
ce:58:11:4f:08:ea:25:84:41:86:c6:8c:6d:1a:c6:6e:fb:d9:
b2:2a:39:11:8c:b6:e2:6e:8b:44:d0:1b:6d:e4:2f:55:a4:22:
12:44:05:45:97:16:7e:8e:f1:bb:f2:6d:b5:2c:27:ab:1e:34:
cb:00:7a:4d:d6:0f:a5:f9:15:70:20:90:8d:7c:1a:0a:07:ec:
b1:67:45:b9:44:5e:70:22:8f:d9:bf:c4:22:9b:b6:02:c9:20:
58:d2:5f:19:41:36:66:97:b6:00:f3:c2:3d:cb:52:9f:18:4b:
e7:c2:e9:86:ab:5a:68:ad:c5:f8:f8:31:03:d5:76:2f:3f:96:
9c:e1:76:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org