Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/06f6bc579db3220343fcce9b1b1e6a49dd850e5b.roa
File: 06f6bc579db3220343fcce9b1b1e6a49dd850e5b.roa (raw, json)
Hash identifier: 0ng9R1oQ6969pm3mHCCrjtCsbAkj27Bq4lyBEhnUqSE=
Subject key identifier: FE:AA:15:55:C7:6B:E1:C0:25:E2:E9:24:47:F5:98:03:5E:1E:34:D9
Certificate issuer: /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial: 2EA3E5
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/06f6bc579db3220343fcce9b1b1e6a49dd850e5b.roa
Signing time: Thu 07 Dec 2023 13:02:05 +0000
ROA not before: Thu 07 Dec 2023 13:00:46 +0000
ROA not after: Thu 07 Dec 2028 13:00:46 +0000
asID: 10481
IP address blocks: 190.194.205.0/24 maxlen: 24
201.213.24.0/24 maxlen: 24
181.167.167.0/24 maxlen: 24
201.212.182.0/24 maxlen: 24
201.212.205.0/24 maxlen: 24
201.212.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3056613 (0x2ea3e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Validity
Not Before: Dec 7 13:00:46 2023 GMT
Not After : Dec 7 13:00:46 2028 GMT
Subject: CN=06f6bc579db3220343fcce9b1b1e6a49dd850e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:95:bf:7d:02:6f:42:ff:2d:e4:dd:95:70:37:
ee:b7:00:73:94:8e:ea:ef:68:22:f7:d4:9b:ee:76:
77:e0:c7:e1:67:f1:8c:cb:8c:8f:ce:8f:76:d7:53:
59:5f:65:89:a5:42:fa:c7:54:b3:eb:b3:cd:9b:5e:
06:78:41:0d:75:b2:35:93:0c:51:34:ff:93:f9:6e:
69:38:36:76:c5:95:b3:4c:63:e5:ea:37:c4:12:74:
b0:d6:7f:a1:ce:1e:c0:a4:17:47:2a:f9:95:7a:6a:
92:49:c2:43:5f:be:61:32:28:3f:20:f4:dc:8f:77:
3e:b5:0f:39:dc:30:30:c6:1c:25:ae:8f:e9:20:7c:
7a:fd:6f:a9:7c:12:f8:d4:80:c0:f4:11:01:15:05:
ce:cb:61:7b:af:6f:89:5a:ad:0b:50:34:1c:13:4b:
b9:96:2e:23:39:e8:e0:84:7b:39:fd:0d:5d:75:08:
a2:d1:5c:1b:2d:d4:59:75:54:3b:88:32:5d:f7:f7:
56:33:69:c0:65:e0:11:10:13:60:06:79:04:90:45:
38:3c:62:7c:02:54:6e:02:3d:fc:26:36:ea:a1:1b:
fd:3e:92:b1:6f:02:39:df:1b:32:8e:b7:72:77:d1:
fc:d7:64:0e:2f:23:cc:d8:7d:28:27:75:bc:fc:49:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AA:15:55:C7:6B:E1:C0:25:E2:E9:24:47:F5:98:03:5E:1E:34:D9
X509v3 Authority Key Identifier:
keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/06f6bc579db3220343fcce9b1b1e6a49dd850e5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.167.167.0/24
190.194.205.0/24
201.212.182.0/24
201.212.205.0-201.212.207.255
201.213.24.0/24
Signature Algorithm: sha256WithRSAEncryption
70:58:5a:a1:a2:81:cc:05:36:f2:32:a7:80:cc:17:ee:4e:d3:
4c:67:66:3e:93:45:06:f1:3e:63:2e:66:6c:f3:9f:36:1d:d4:
8e:2d:99:aa:84:eb:95:c1:08:d4:7e:7f:0b:aa:a5:02:d5:f9:
47:c5:30:a8:22:b2:92:ba:f3:ef:0a:23:c4:0f:6f:e9:fd:a2:
64:f7:9c:fe:a6:29:e5:8e:63:cc:d2:d9:0c:fa:89:a9:1e:70:
51:a4:f7:1f:b3:2f:4d:e6:55:4b:ac:4f:3b:b8:10:00:c4:a0:
71:1f:52:bd:5f:78:1a:56:e8:23:52:e8:35:cd:f3:fc:5f:1c:
51:6e:df:2e:e7:27:3f:ea:35:94:7f:dc:4d:cb:e2:fa:d0:40:
cc:e5:31:66:22:3f:5f:23:0c:a5:b3:11:ab:1e:e3:a5:87:0b:
ec:7a:c6:63:7d:83:5c:04:80:ad:98:f4:5d:ff:68:10:ff:59:
06:bf:cc:6b:06:9e:89:2e:af:b3:fa:77:1e:b5:b9:7c:64:19:
08:f3:d6:5a:3d:13:8b:39:d7:4c:ff:2e:a0:32:60:d2:05:c1:
54:e0:96:3c:75:83:99:49:93:97:d6:75:bd:60:1a:39:e1:5a:
b2:23:c7:db:a6:73:a6:0e:83:f2:41:43:c7:7c:b1:b4:50:bf:
9d:6b:cb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org