Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/9b188666bd603cd74404dd3b9c590ecc576ad289.roa
File: 9b188666bd603cd74404dd3b9c590ecc576ad289.roa (raw, json)
Hash identifier: qCLvbuqObCTYE1ZYU6YJGTVHlBNHW8iqD2zmCWvmm8s=
Subject key identifier: 8E:1D:17:B4:98:2D:16:76:79:6A:DE:9C:19:00:55:F3:47:FD:A1:F1
Certificate issuer: /CN=d9e912e96bbf3562ad510bb79dcae95926afc83d
Certificate serial: 0F362B
Authority key identifier: 99:13:4D:E8:7E:A8:F2:1E:EA:9D:7D:E1:50:8C:83:C8:9B:07:33:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9e912e96bbf3562ad510bb79dcae95926afc83d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/9b188666bd603cd74404dd3b9c590ecc576ad289.roa
Signing time: Fri 18 Jun 2021 15:51:26 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 14754
IP address blocks: 186.26.112.0/20 maxlen: 32
186.151.94.0/24 maxlen: 32
190.148.85.0/24 maxlen: 32
190.149.134.0/24 maxlen: 32
190.149.152.0/24 maxlen: 32
200.119.151.0/24 maxlen: 32
200.119.152.0/23 maxlen: 32
2803:f340::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996907 (0xf362b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e912e96bbf3562ad510bb79dcae95926afc83d
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=9b188666bd603cd74404dd3b9c590ecc576ad289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:82:f9:a7:ed:0c:85:0b:f1:bc:bd:66:be:cd:
30:4d:80:9f:49:a7:c3:f7:48:0e:ff:08:00:4f:bb:
32:ee:1d:e7:b6:37:15:3a:0a:ac:9c:1b:45:fb:06:
fb:25:ff:83:9f:a1:9b:65:dc:8e:69:8c:77:e3:74:
c3:4b:fd:3b:77:fa:81:a7:6e:7e:a8:49:18:9c:e3:
fa:4b:17:43:85:bd:e2:e2:33:b8:9c:4c:d6:2f:02:
be:36:96:a9:97:14:15:b4:31:0a:83:85:1e:19:c6:
5e:5c:ab:ae:9c:a9:32:7e:b1:99:69:7c:b0:49:b1:
c4:24:3d:46:d4:e5:fe:cc:04:23:1f:90:31:e8:4d:
83:59:96:1a:fe:e6:8e:4e:ac:3b:f6:60:d4:62:b9:
ac:a8:88:07:5c:14:6b:ff:97:34:74:57:9a:3a:d1:
3b:f0:d8:a4:4f:84:72:68:6d:74:54:56:75:d5:6d:
b3:86:7a:ce:90:1f:55:35:b6:c4:04:f4:fc:e9:80:
2b:d4:8e:75:52:9c:0a:16:95:9c:3c:07:69:bd:90:
85:a6:16:db:4f:ff:da:fa:bd:f3:69:e1:6f:b4:cc:
08:eb:5b:90:8b:ac:29:8f:54:a8:9b:75:a0:5a:78:
3d:66:84:90:65:f6:13:67:db:d4:8d:e3:3d:10:38:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1D:17:B4:98:2D:16:76:79:6A:DE:9C:19:00:55:F3:47:FD:A1:F1
X509v3 Authority Key Identifier:
keyid:99:13:4D:E8:7E:A8:F2:1E:EA:9D:7D:E1:50:8C:83:C8:9B:07:33:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9e912e96bbf3562ad510bb79dcae95926afc83d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/9b188666bd603cd74404dd3b9c590ecc576ad289.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/d9e912e96bbf3562ad510bb79dcae95926afc83d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.26.112.0/20
186.151.94.0/24
190.148.85.0/24
190.149.134.0/24
190.149.152.0/24
200.119.151.0-200.119.153.255
IPv6:
2803:f340::/32
Signature Algorithm: sha256WithRSAEncryption
0c:60:f6:ce:99:25:34:4f:1e:bf:fb:19:48:8f:d3:61:a8:78:
58:94:ee:86:43:50:4a:a3:38:e2:8a:24:0d:fe:b6:eb:3c:df:
a8:a7:4a:79:21:82:dd:fc:d6:1f:7e:67:fd:2e:a8:54:64:e9:
0e:db:48:d6:80:b8:db:fd:e7:58:fb:0e:61:39:3c:bc:7a:77:
0d:f8:7d:c6:95:fa:32:cd:05:ea:b1:04:8d:25:20:e1:4b:ec:
13:11:69:31:e1:1b:8a:2c:43:6e:6f:b6:19:93:52:de:b3:38:
74:da:68:f2:24:65:38:81:a0:6f:3e:58:e3:00:07:9f:e0:f0:
51:c8:09:87:5d:5a:48:e9:05:f3:be:c2:d1:8c:e3:bc:08:93:
30:aa:36:23:1f:2e:b1:38:70:90:16:c8:70:81:52:9e:28:11:
27:76:90:82:b9:e4:f0:68:18:74:66:4e:e6:bf:66:23:e1:55:
d1:a1:12:b7:fb:85:fe:25:c2:a6:e4:a9:28:89:34:22:1f:f8:
80:77:43:88:59:dd:22:55:51:5e:6c:ef:e4:2c:51:2e:7c:08:
4e:3b:83:07:54:02:78:ef:44:86:92:1f:d8:c1:4d:1f:76:ca:
67:c6:44:be:f2:63:67:8d:4d:12:6f:a3:60:92:b5:52:a5:a9:
04:2f:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org