Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b69da19814bc33bb02c6663a2a14e07a2e3b874d.roa
File: b69da19814bc33bb02c6663a2a14e07a2e3b874d.roa (raw, json)
Hash identifier: FCe3G4MD2XytcZPX27CjSrCx2Y16w7c9TR/IIt3ehHo=
Subject key identifier: 0F:70:AA:19:36:F5:DB:E4:A7:D6:BC:EF:7D:6B:67:54:00:2A:35:C5
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 273795
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b69da19814bc33bb02c6663a2a14e07a2e3b874d.roa
Signing time: Mon 17 Apr 2023 13:00:40 +0000
ROA not before: Sun 16 Apr 2023 13:00:28 +0000
ROA not after: Thu 17 Apr 2025 13:00:28 +0000
asID: 265686
IP address blocks: 181.105.233.0/24 maxlen: 24
181.94.252.0/22 maxlen: 24
181.105.234.0/23 maxlen: 24
190.228.177.0/24 maxlen: 24
200.43.0.0/22 maxlen: 22
181.105.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2570133 (0x273795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Apr 16 13:00:28 2023 GMT
Not After : Apr 17 13:00:28 2025 GMT
Subject: CN=b69da19814bc33bb02c6663a2a14e07a2e3b874d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:e1:d6:5a:15:8c:f1:df:1b:20:cc:3c:0a:
77:13:1c:98:46:b7:ea:53:2f:32:44:46:bd:81:41:
2f:20:e4:c2:25:24:ad:18:d9:8c:8a:d1:c6:06:e2:
3e:21:e0:c5:66:51:92:16:93:28:b5:4c:40:db:8a:
57:cd:71:21:5a:cb:14:42:8e:c6:3c:50:32:fe:2a:
57:71:a0:7f:16:4a:08:db:d2:b8:31:d5:5e:54:5d:
a6:60:7f:0c:47:d9:88:d3:ba:54:52:1f:11:82:46:
ea:cb:b4:6f:ca:e9:b7:fb:d1:eb:dd:28:d5:52:95:
3b:53:e2:3b:ae:5b:db:67:f5:93:7e:fb:78:23:2d:
61:75:3c:ba:b1:39:1a:74:74:52:8d:c5:d8:8b:17:
b9:11:2d:b6:db:ab:c1:68:4f:8d:39:35:50:a1:c0:
f3:12:f2:51:76:a2:5b:ad:53:bd:39:fd:5a:21:20:
9e:e8:8e:ce:1d:37:21:95:09:36:cd:42:fc:3e:da:
c3:a5:28:56:78:fa:9a:ef:8b:24:ca:04:7f:5b:59:
a4:60:4b:be:49:66:38:18:00:12:44:3b:78:4e:9f:
96:d1:95:f7:7a:66:71:6d:29:75:e2:fe:82:f0:db:
7c:d0:f9:93:96:1d:46:3c:4a:c5:db:54:f2:5a:7c:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:70:AA:19:36:F5:DB:E4:A7:D6:BC:EF:7D:6B:67:54:00:2A:35:C5
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b69da19814bc33bb02c6663a2a14e07a2e3b874d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.94.252.0/22
181.105.221.0/24
181.105.233.0-181.105.235.255
190.228.177.0/24
200.43.0.0/22
Signature Algorithm: sha256WithRSAEncryption
38:20:d7:d9:27:a4:9c:8a:db:4c:93:e5:69:55:9b:63:54:6c:
10:e7:aa:68:b4:2c:bb:92:4e:da:db:b8:23:23:2e:94:39:5d:
c6:d5:cc:c2:f6:0d:fe:fc:72:ee:3f:70:39:83:ef:10:ad:8c:
af:ae:a3:8b:4b:a0:2a:18:b6:16:2c:36:40:aa:fa:60:9e:19:
17:9f:a7:af:7d:9a:c4:b1:bc:cc:a5:c2:a7:23:f8:35:c0:6b:
e2:e2:ad:0c:46:af:a5:c6:c1:3d:af:1a:83:82:55:b1:17:2c:
9c:d0:5d:b0:03:07:5c:9e:a2:6a:fe:04:d0:a0:fb:2b:c3:c9:
28:ca:cf:ee:84:fa:be:89:08:0c:19:97:0f:6b:00:65:51:91:
ce:86:09:c5:98:ce:f8:6c:8a:aa:46:f7:c2:d4:0d:6d:35:6f:
57:e1:ee:93:5f:87:f8:6e:eb:8a:cb:2a:48:de:bd:3e:80:7f:
22:25:d8:a2:a7:ac:bf:0d:42:a3:b2:d4:95:1b:00:08:34:83:
d4:6a:a2:b8:d5:30:23:8d:32:9f:e8:f0:a6:71:cf:d8:37:54:
ae:e8:d3:49:fa:af:8c:0d:85:52:d4:b6:48:4e:aa:ff:d8:17:
0b:55:8b:6a:b7:6b:10:e0:eb:2b:ea:11:9d:7b:dd:8d:6f:f0:
23:3b:5c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org