Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/928ae900f84e3c8b32501bd6f03367a674f837da.roa
File: 928ae900f84e3c8b32501bd6f03367a674f837da.roa (raw, json)
Hash identifier: /HPSitmCXPsurZyx9MuN6AheG+NzJqiZDll73BU4Xb0=
Subject key identifier: C0:EE:EB:7E:9B:4D:32:E1:BD:ED:31:EB:49:86:F0:19:F9:45:7A:F4
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 12816C
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/928ae900f84e3c8b32501bd6f03367a674f837da.roa
Signing time: Wed 29 Nov 2023 21:25:52 +0000
ROA not before: Wed 29 Nov 2023 21:25:51 +0000
ROA not after: Sat 29 Nov 2025 21:25:51 +0000
asID: 22927
IP address blocks: 186.128.0.0/14 maxlen: 24
186.132.0.0/14 maxlen: 24
201.255.0.0/17 maxlen: 24
201.255.128.0/17 maxlen: 24
190.172.0.0/15 maxlen: 24
190.174.0.0/15 maxlen: 24
190.176.0.0/15 maxlen: 24
190.178.0.0/15 maxlen: 24
190.48.0.0/16 maxlen: 24
190.49.0.0/16 maxlen: 24
190.50.0.0/16 maxlen: 24
190.51.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212780 (0x12816c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 21:25:51 2023 GMT
Not After : Nov 29 21:25:51 2025 GMT
Subject: CN=928ae900f84e3c8b32501bd6f03367a674f837da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:3a:5b:5d:52:d8:15:1a:3c:49:d5:13:66:
72:25:54:41:56:e0:d6:68:70:1d:cd:a8:a2:a7:3d:
49:31:33:bb:84:bc:98:31:21:9f:93:36:77:60:fe:
76:3e:82:28:bd:3b:05:4a:0f:95:24:73:4c:3f:fd:
9c:16:51:3e:ef:16:4b:66:42:98:a2:00:28:dd:45:
6a:0b:5a:63:63:8a:a2:33:77:f4:49:9a:e1:17:4a:
c1:4d:ac:25:b7:d1:29:8d:71:40:7f:92:80:d8:b9:
95:f9:05:8d:81:ea:b4:bb:4c:d1:30:fb:c6:ec:fb:
02:c0:6c:eb:71:2f:53:16:c3:53:c0:59:fe:e7:f5:
6c:79:d0:ed:de:2c:45:e5:da:e1:b3:a2:8f:1a:92:
84:cb:99:38:5c:a9:5e:82:42:50:54:36:d6:f8:ab:
8b:ee:4f:24:ea:d6:8b:84:a2:ab:fa:e1:90:63:4e:
a2:33:34:a0:bc:2a:0e:31:59:03:0c:3b:d5:a1:5a:
08:f7:a6:87:45:d9:22:10:e6:68:78:d3:81:04:5f:
ba:52:ac:59:29:d0:4b:6d:dc:83:19:52:fb:f7:81:
1c:64:97:e9:7f:72:c5:b5:c6:27:3b:a6:c5:d3:55:
af:ca:6f:cf:c2:15:94:95:30:bb:71:10:ac:f6:19:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EE:EB:7E:9B:4D:32:E1:BD:ED:31:EB:49:86:F0:19:F9:45:7A:F4
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/928ae900f84e3c8b32501bd6f03367a674f837da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.128.0.0/13
190.48.0.0/14
190.172.0.0-190.179.255.255
201.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:7f:54:1d:ea:27:b8:55:97:d0:35:5d:a9:2f:2c:11:de:09:
13:81:b1:4f:63:53:48:19:ca:10:72:9b:da:57:c5:f4:52:c9:
07:56:21:2c:92:25:a1:12:18:ac:f5:11:f2:50:89:f9:d8:a7:
f3:32:03:75:f1:35:84:d3:c2:08:c4:c4:96:89:60:eb:da:60:
3a:05:70:04:78:e8:2a:2a:3b:93:85:ae:ad:fe:cf:d2:f4:f3:
a9:1a:46:6f:8f:ae:1a:6e:68:4a:b4:85:cf:87:08:91:16:31:
05:2a:f2:95:6c:dc:94:c5:86:6a:2c:ef:02:12:ce:bf:fb:a4:
e6:81:5f:88:97:95:2f:8d:25:13:b0:17:89:ae:99:a2:0f:80:
90:8d:00:d5:4e:7e:ad:54:94:bd:19:e2:97:51:ad:a1:c8:fb:
8c:f1:86:d4:a0:71:cf:87:e9:f0:cd:b2:d2:09:00:8e:19:87:
42:ae:2d:65:33:fc:4f:25:b9:64:03:d1:48:08:eb:ad:2e:ce:
20:ae:72:0f:eb:32:d2:a8:66:93:76:41:ab:6e:3f:ee:32:d9:
63:ac:fa:7e:84:1f:c5:5a:bc:a5:af:85:a3:ca:2e:61:17:23:
fa:03:a9:d6:d6:3a:51:32:7c:e9:16:22:3a:d7:2e:da:5e:77:
b8:23:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org