Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/d8a7a7f1915e6ee6d6b7d4c44229fdf42e1b2dfb.roa
File: d8a7a7f1915e6ee6d6b7d4c44229fdf42e1b2dfb.roa (raw, json)
Hash identifier: YXS4pKPk8jdP4CKoyxDmsZHOVjy/v/Tmh/+ClYPn6ac=
Subject key identifier: C8:55:9F:6A:F1:38:8C:F5:70:C5:0C:38:77:89:5B:A4:43:73:99:30
Certificate issuer: /CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Certificate serial: 1E9E30
Authority key identifier: 0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/d8a7a7f1915e6ee6d6b7d4c44229fdf42e1b2dfb.roa
Signing time: Thu 07 Mar 2024 16:19:09 +0000
ROA not before: Thu 07 Mar 2024 16:19:08 +0000
ROA not after: Sat 07 Mar 2026 16:19:08 +0000
asID: 28110
IP address blocks: 131.196.32.0/22 maxlen: 24
181.174.168.0/22 maxlen: 24
190.124.248.0/22 maxlen: 24
190.184.196.0/22 maxlen: 24
138.59.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2006576 (0x1e9e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Validity
Not Before: Mar 7 16:19:08 2024 GMT
Not After : Mar 7 16:19:08 2026 GMT
Subject: CN=d8a7a7f1915e6ee6d6b7d4c44229fdf42e1b2dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:96:1a:8d:40:cd:2c:6b:26:d0:4b:b4:47:71:
6e:27:cd:0e:76:fb:64:86:9f:f3:4b:55:cf:7e:29:
56:1a:6f:72:ab:9e:a5:ca:bf:7b:b4:63:dd:b1:1b:
47:f8:3c:c9:b0:88:24:94:50:a1:a9:2c:46:af:d7:
ee:7c:fb:70:39:1d:9a:78:40:7b:be:96:c1:42:69:
6f:e5:87:3c:d8:1b:9c:3b:bd:bd:84:87:42:f1:3a:
f7:68:18:88:99:4c:b3:c1:24:93:00:f9:ab:8e:07:
12:a7:69:04:07:a6:34:4a:e8:6c:7e:8a:ad:9d:23:
4a:51:53:2a:69:04:a7:5d:04:fa:6c:6c:b6:f0:5f:
20:d1:47:50:eb:ff:60:38:94:0a:4d:09:bf:c1:0e:
6b:ea:6c:d6:f5:cf:41:4d:6a:37:62:b9:ca:d4:4e:
a1:b4:75:22:a8:f0:cd:02:6b:f8:2b:08:37:12:ca:
04:ff:82:76:a4:ce:c8:6c:20:02:cf:4b:9e:e8:f0:
5e:94:8a:28:ac:23:19:f9:00:28:09:d7:85:32:46:
5c:89:89:15:fa:9d:bd:6e:91:e0:e8:9b:14:42:ea:
8b:7f:aa:c6:71:73:89:68:d6:ed:42:4c:53:9e:47:
fe:54:64:83:89:da:5d:fb:40:17:76:8d:02:0c:d3:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:9F:6A:F1:38:8C:F5:70:C5:0C:38:77:89:5B:A4:43:73:99:30
X509v3 Authority Key Identifier:
keyid:0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/d8a7a7f1915e6ee6d6b7d4c44229fdf42e1b2dfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8c9dca33c362bedd76cf28490675e1556f7d1835.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.32.0/22
138.59.132.0/22
181.174.168.0/22
190.124.248.0/22
190.184.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:0c:47:48:c6:1b:c6:e2:5a:42:63:28:eb:b1:57:bd:c1:e3:
f7:73:0f:99:2d:7e:31:97:0e:f6:5b:7e:eb:65:1f:f6:12:09:
97:22:8d:1c:6f:0d:80:b5:b3:e7:31:7d:e1:24:d5:76:a6:fe:
99:cc:aa:ab:bf:59:9f:f4:f8:69:a8:7a:5b:e8:c7:61:04:44:
fd:b1:1c:9a:5c:b5:ff:e4:3a:ba:b8:4c:d1:8a:34:2c:47:ba:
cf:0c:a4:cb:d1:e1:52:79:0e:6a:a2:d9:b5:a8:bc:96:25:40:
34:4f:b7:a0:dd:fe:69:24:07:e1:f0:69:1e:ba:be:6c:90:74:
d5:b7:67:cf:95:69:68:e9:52:13:3a:63:b0:bc:ba:e0:84:62:
eb:13:d2:b5:e7:03:07:08:14:6e:fe:9f:3e:b9:59:e5:29:6d:
8a:ae:89:dc:d0:cb:47:bb:fb:c7:09:50:12:e3:a3:f5:f3:cf:
42:36:95:45:f2:6e:07:7c:ed:30:5b:3e:ab:75:65:b6:02:56:
b3:f7:3d:72:43:b1:47:e3:19:a5:0e:bc:02:11:14:23:8b:a1:
0f:38:29:a3:9a:fe:16:cb:d2:d0:aa:34:a6:37:32:18:6c:78:
a3:fb:46:f1:6a:0b:f8:47:44:90:7a:b7:e3:f5:e9:79:fd:07:
dc:fe:79:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org