Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4d1bb8d663e50c69f61896999e64f911ebe11ae9.roa
File: 4d1bb8d663e50c69f61896999e64f911ebe11ae9.roa (raw, json)
Hash identifier: mh+jsRKABH4+cfGEI+bvU75kqg2ClV44VG8wSYeyKp0=
Subject key identifier: 5B:8B:B7:DA:0C:F6:FB:C8:BF:D7:B4:EA:9F:B7:3E:29:5C:93:8A:61
Certificate issuer: /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial: 2E766A
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4d1bb8d663e50c69f61896999e64f911ebe11ae9.roa
Signing time: Thu 07 Dec 2023 13:01:32 +0000
ROA not before: Thu 07 Dec 2023 13:00:46 +0000
ROA not after: Thu 07 Dec 2028 13:00:46 +0000
asID: 264767
IP address blocks: 181.13.185.0/24 maxlen: 24
181.13.186.0/24 maxlen: 24
190.228.126.0/24 maxlen: 24
190.228.132.0/24 maxlen: 24
190.228.73.0/24 maxlen: 24
190.228.74.0/24 maxlen: 24
181.13.151.0/24 maxlen: 24
181.13.153.0/24 maxlen: 24
186.125.160.0/24 maxlen: 24
190.228.99.0/24 maxlen: 24
190.228.100.0/24 maxlen: 24
181.13.239.0/24 maxlen: 24
190.136.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3044970 (0x2e766a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Validity
Not Before: Dec 7 13:00:46 2023 GMT
Not After : Dec 7 13:00:46 2028 GMT
Subject: CN=4d1bb8d663e50c69f61896999e64f911ebe11ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:b8:48:ca:5f:ff:11:2a:33:76:b0:aa:d0:
e1:f2:26:e0:c7:af:9f:a6:e6:42:31:a7:10:6b:fb:
01:3c:55:4a:dd:9a:80:1f:91:ee:82:09:03:12:6e:
6b:f1:8e:68:d3:4c:8a:cf:b1:1b:26:08:eb:80:09:
41:97:a7:0a:bd:0e:20:d1:30:fe:02:16:19:f1:5c:
b9:66:41:54:9f:5a:ec:97:18:05:fb:38:d9:4d:4d:
16:b6:37:81:2b:83:83:bc:95:3f:29:83:a3:e6:b1:
e9:2d:01:5b:7c:4d:69:c8:d3:f9:0a:29:13:23:7c:
5b:9d:2c:37:c5:e3:9b:b9:65:46:d3:03:af:77:97:
23:5f:a7:bf:7e:65:b4:9f:d9:72:e7:9d:a4:03:9e:
37:62:8e:5e:14:55:0d:26:97:7a:48:fc:17:d0:a1:
65:fb:f3:ca:fa:49:f6:e1:c8:55:0e:1f:2f:94:5f:
72:59:f6:ba:8b:6c:18:01:21:fd:7a:3a:b3:e7:0c:
ed:7d:b7:6d:81:40:c3:10:29:de:fd:2d:e6:38:19:
15:de:e7:62:d5:d1:e9:9e:9f:cd:1a:74:32:96:1f:
b6:ff:9c:03:8a:fa:c9:56:6f:e9:cf:66:b4:98:54:
5e:12:ca:88:ae:12:8e:42:79:b7:62:39:68:b2:76:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8B:B7:DA:0C:F6:FB:C8:BF:D7:B4:EA:9F:B7:3E:29:5C:93:8A:61
X509v3 Authority Key Identifier:
keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4d1bb8d663e50c69f61896999e64f911ebe11ae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.13.151.0/24
181.13.153.0/24
181.13.185.0-181.13.186.255
181.13.239.0/24
186.125.160.0/24
190.136.18.0/24
190.228.73.0-190.228.74.255
190.228.99.0-190.228.100.255
190.228.126.0/24
190.228.132.0/24
Signature Algorithm: sha256WithRSAEncryption
54:84:1f:de:6a:c0:55:24:cf:d0:b0:de:f2:25:ea:5f:c7:ad:
0d:d6:1a:0d:0d:24:f3:6f:3f:b0:ba:88:99:d7:fc:89:f8:11:
51:c9:fa:f4:0a:48:95:61:0f:5b:57:14:a9:99:3e:38:39:23:
20:72:47:7f:2c:3d:16:fb:17:ed:fd:c8:3e:92:84:72:e5:22:
e4:6c:95:2c:f9:24:64:19:b4:61:49:23:7e:03:8f:33:ee:e4:
52:b3:c2:f3:d3:24:cf:20:93:f9:b6:d3:1a:da:b4:00:30:07:
3a:f8:36:4b:6a:20:27:a8:8d:f8:90:47:30:6b:0c:b2:16:18:
ea:20:f1:5f:69:b5:c1:bd:75:c7:2e:2b:77:99:fe:5b:88:07:
5d:c7:9e:d8:1d:f8:a8:84:9e:a3:a4:01:f1:04:f3:cf:f0:49:
20:5a:5d:3a:9e:e1:df:53:36:c1:c5:b1:c2:1c:fe:4e:b8:c3:
8b:04:f1:f7:75:81:a8:ba:43:b8:0f:8f:10:4a:ad:aa:44:b6:
2f:37:97:1b:ba:1d:c1:02:ae:17:08:fe:a8:91:8c:9f:50:4e:
e4:77:58:5b:64:65:2a:5a:da:81:32:68:69:6e:81:a0:aa:70:
07:7f:94:6b:05:5d:79:07:db:f0:5d:15:d9:43:2f:66:fc:43:
5c:83:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org