Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/326645830d033d619ced6ace8f8c7195259d0caf.roa
File: 326645830d033d619ced6ace8f8c7195259d0caf.roa (raw, json)
Hash identifier: VGvHE+E3vHItcORkXh+1BsmxHt73zmW5NNlIbTlOnV4=
Subject key identifier: 90:1A:B9:6D:7B:0C:44:FD:D2:F1:A6:A8:A2:C3:84:D8:34:76:7A:85
Certificate issuer: /CN=6410162b16fe94fd0a84d5440b3138f11f80bb21
Certificate serial: 11E087
Authority key identifier: 45:38:AC:6C:70:78:61:AD:60:CF:D1:72:57:29:A5:05:C4:00:13:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6410162b16fe94fd0a84d5440b3138f11f80bb21.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/326645830d033d619ced6ace8f8c7195259d0caf.roa
Signing time: Tue 05 Oct 2021 21:37:54 +0000
ROA not before: Tue 05 Oct 2021 03:00:00 +0000
ROA not after: Thu 31 Jan 2041 03:00:00 +0000
asID: 25607
IP address blocks: 161.0.32.0/19 maxlen: 24
190.106.48.0/20 maxlen: 24
191.103.112.0/20 maxlen: 24
200.85.160.0/20 maxlen: 24
2803:800::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1171591 (0x11e087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6410162b16fe94fd0a84d5440b3138f11f80bb21
Validity
Not Before: Oct 5 03:00:00 2021 GMT
Not After : Jan 31 03:00:00 2041 GMT
Subject: CN=326645830d033d619ced6ace8f8c7195259d0caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:fa:52:f6:8a:ac:be:92:fd:13:ba:0f:6a:
cb:e0:8d:af:07:6a:a6:14:1c:80:f6:53:e2:bf:a2:
74:ec:bd:cd:c1:23:17:0a:5a:5c:47:bf:d0:47:fc:
e1:dc:24:ed:62:48:08:dd:37:e2:0c:2c:ff:a8:2d:
a0:3c:97:da:3c:19:f3:d5:dd:0e:b5:5a:2f:7b:e6:
83:b1:ad:ba:e1:3a:e4:95:5e:ab:b8:ed:97:9b:45:
df:58:af:57:50:d7:b9:ad:24:73:b3:3f:d4:e3:71:
57:1a:99:d9:52:b9:2f:ad:88:06:52:a1:17:13:c3:
4c:f6:76:f1:b8:99:b6:c5:64:40:4f:15:79:fd:1d:
f2:96:cf:a4:e7:e4:f6:e9:8a:06:c7:e8:94:02:65:
81:68:94:f2:64:80:e9:cf:db:a5:89:b1:2a:cf:91:
a7:98:d7:9d:a9:a3:a8:91:13:2d:3a:05:a4:8f:3a:
90:c2:79:8c:a8:3a:61:8f:8b:6b:97:c3:5e:25:f4:
dc:8e:69:28:17:61:61:14:e4:79:1e:cd:91:3f:31:
7d:c6:68:52:0d:b0:b0:8a:8a:e3:48:8f:32:9a:63:
a9:4f:8a:81:30:a8:d3:e5:62:91:46:8d:08:f0:3c:
dd:d9:88:85:9c:24:0f:72:a2:bc:a1:26:45:d8:9a:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:B9:6D:7B:0C:44:FD:D2:F1:A6:A8:A2:C3:84:D8:34:76:7A:85
X509v3 Authority Key Identifier:
keyid:45:38:AC:6C:70:78:61:AD:60:CF:D1:72:57:29:A5:05:C4:00:13:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6410162b16fe94fd0a84d5440b3138f11f80bb21.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/326645830d033d619ced6ace8f8c7195259d0caf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/6410162b16fe94fd0a84d5440b3138f11f80bb21.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.0.32.0/19
190.106.48.0/20
191.103.112.0/20
200.85.160.0/20
IPv6:
2803:800::/32
Signature Algorithm: sha256WithRSAEncryption
26:08:69:50:4b:85:5d:a6:a1:16:10:e4:ad:ac:91:7d:2c:e2:
72:14:4a:74:5b:65:af:17:15:d2:55:42:ad:27:06:f3:10:0e:
e9:3a:94:ea:16:08:dc:60:85:0d:12:46:d6:5c:b6:4d:82:f4:
75:6f:93:15:06:2e:b8:4d:ee:11:d8:ab:49:ba:8b:52:05:68:
df:fa:21:ae:6b:1a:0a:fd:33:bf:3b:69:f3:e9:a7:54:14:bf:
a1:bd:c9:a2:9c:29:43:24:aa:ca:24:ac:4f:91:43:44:e0:a7:
ae:74:a1:62:17:84:4e:b5:a8:c9:cd:e4:47:58:b0:a2:e7:39:
2a:13:00:47:89:40:7d:69:81:4f:7e:d8:cd:c5:85:30:e3:1c:
ac:48:b6:10:3d:1f:b8:30:ee:9e:53:e6:a4:36:17:d2:f0:1e:
71:28:3b:51:fa:04:80:ec:b6:15:0d:b0:90:ba:cc:2b:e6:d7:
c3:0a:32:fb:e7:19:3c:67:c4:3a:04:ab:bd:8d:82:59:18:39:
84:d9:6a:ac:30:9c:29:a2:a7:69:e7:12:9e:fb:4e:4d:13:19:
8a:9b:fe:c6:60:cb:6e:bd:66:3e:ce:11:cb:79:74:2c:ef:8c:
13:1a:6a:d2:01:a0:27:88:11:cc:8e:ad:24:1c:9b:ec:0c:6f:
14:74:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org