Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/9945e53f4c7035b5fc01bfb447af40915af9da3a.roa
File: 9945e53f4c7035b5fc01bfb447af40915af9da3a.roa (raw, json)
Hash identifier: FABTKUdpi+kQi/Bdxo7+x6BDOYWZx0U8loAXS2pT720=
Subject key identifier: FC:87:5C:F5:E3:9B:71:30:91:4D:68:8D:72:08:16:F6:EE:D4:80:1F
Certificate issuer: /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial: 0D4C13
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/9945e53f4c7035b5fc01bfb447af40915af9da3a.roa
Signing time: Tue 27 Jun 2023 14:29:56 +0000
ROA not before: Mon 26 Jun 2023 14:29:56 +0000
ROA not after: Fri 27 Jun 2025 14:29:56 +0000
asID: 27754
IP address blocks: 186.38.89.0/24 maxlen: 24
186.38.90.0/23 maxlen: 24
186.38.92.0/24 maxlen: 24
186.38.108.0/24 maxlen: 24
186.38.110.0/24 maxlen: 24
186.56.39.0/24 maxlen: 24
186.56.50.0/24 maxlen: 24
201.251.73.0/24 maxlen: 24
201.251.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871443 (0xd4c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Validity
Not Before: Jun 26 14:29:56 2023 GMT
Not After : Jun 27 14:29:56 2025 GMT
Subject: CN=9945e53f4c7035b5fc01bfb447af40915af9da3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:62:d3:bc:68:85:3b:a8:26:6c:c4:9f:3a:
75:6a:eb:63:7a:08:25:ed:e6:43:96:71:1a:88:2a:
c3:85:1d:5f:7b:5d:e2:3c:33:b9:55:00:90:57:25:
62:2f:e7:0a:29:58:b6:69:99:b8:7f:84:4c:30:2d:
2c:bb:5b:75:c1:ea:7f:e8:23:a7:67:fd:b7:27:75:
37:d1:a5:87:dd:da:ca:72:fe:bf:72:03:4c:54:52:
18:e2:ff:80:3c:fe:d8:cf:e4:3d:27:10:24:46:d9:
22:02:00:0b:2a:c7:9d:42:a8:bc:9d:74:2a:58:e2:
8d:25:1a:87:d7:1b:c0:91:ce:9f:35:81:35:38:76:
77:35:f3:08:89:dd:ab:c9:e2:c7:af:c8:db:96:52:
09:9b:d2:28:8d:a9:bf:c2:06:1d:2c:ba:5c:c5:4b:
4f:3d:22:39:45:13:65:57:c9:43:a4:cc:24:94:c5:
91:62:63:63:08:79:cb:2f:93:70:f0:76:ad:8c:2b:
b7:80:b6:44:fc:77:10:77:d5:6e:38:4e:45:f1:7f:
35:69:7c:0e:8b:9f:bf:98:da:9c:16:f3:41:e1:65:
73:0c:f2:d0:f9:4d:3d:e0:b6:3a:01:75:29:4a:44:
aa:fd:ee:9a:e0:ca:17:8d:6c:2d:aa:85:ae:94:72:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:87:5C:F5:E3:9B:71:30:91:4D:68:8D:72:08:16:F6:EE:D4:80:1F
X509v3 Authority Key Identifier:
keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/9945e53f4c7035b5fc01bfb447af40915af9da3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.38.89.0-186.38.92.255
186.38.108.0/24
186.38.110.0/24
186.56.39.0/24
186.56.50.0/24
201.251.73.0/24
201.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
41:34:24:34:b5:91:e9:e7:96:a5:39:4a:2a:1a:5f:7a:7f:70:
b9:1b:3f:8a:34:d5:a0:69:f0:4f:61:d4:91:e4:5b:8b:d7:88:
67:e2:67:0f:d9:90:9b:7e:a8:d6:aa:fb:40:29:0f:ec:03:f2:
ae:df:f7:07:f1:dc:43:09:7f:38:03:bf:46:1b:9d:74:e9:18:
f0:af:89:40:7c:83:37:95:b9:54:9a:f5:71:68:e5:f1:13:a6:
49:01:a1:3d:3a:64:f3:ea:54:c9:e1:48:a5:e2:06:e9:fa:43:
4c:8a:e8:5a:88:d3:9d:22:36:f6:1e:7b:f6:64:11:b6:56:6c:
bb:d6:f2:74:a0:69:be:75:ee:7c:c7:01:db:e0:c6:6d:d7:28:
45:b7:2b:c2:cf:0b:df:a4:77:12:79:e9:ae:5b:20:ec:9b:d3:
94:81:af:b2:1d:be:0a:7e:06:2c:a2:ee:53:e3:08:c2:43:3c:
a0:f1:40:44:5e:ab:d3:d3:fb:d7:20:e4:fe:2a:a2:a0:05:45:
aa:5d:a9:1e:c1:ca:00:cf:bb:fa:e1:fb:54:48:1a:5c:d1:15:
fc:9a:f5:68:57:11:84:6d:44:19:68:8e:76:56:e1:c3:90:3b:
fd:41:40:4b:72:e3:cb:cc:9a:89:2b:fb:4c:c5:64:68:6f:a5:
a7:35:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 16:27:38 2023 by rpki-client on console-ams.rpki-client.org