Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53f683cd-8400-4e1d-8387-d4202e665244/8703e99040c9b293aae83dc971654b01a98f92ef.roa
File: 8703e99040c9b293aae83dc971654b01a98f92ef.roa (raw, json)
Hash identifier: 6P+KL9qQDaBZsG43k+pFUcXvtxKZDpPGgh/Fn0cs1tI=
Subject key identifier: 25:37:29:3C:57:59:3F:41:45:E8:1B:CF:45:FC:AD:A1:ED:58:AE:49
Certificate issuer: /CN=5b4eb6dc9b61ecfa5398d93ea34cd9e28f888991
Certificate serial: 070A
Authority key identifier: 75:EA:45:74:93:D8:16:DA:27:E8:81:19:C4:1B:3C:F0:9A:22:20:4E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b4eb6dc9b61ecfa5398d93ea34cd9e28f888991.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/53f683cd-8400-4e1d-8387-d4202e665244/8703e99040c9b293aae83dc971654b01a98f92ef.roa
Signing time: Wed 22 Mar 2023 12:05:36 +0000
ROA not before: Mon 20 Mar 2023 11:58:36 +0000
ROA not after: Sat 22 Mar 2025 11:58:36 +0000
asID: 262189
IP address blocks: 186.1.208.0/20 maxlen: 20
186.1.208.0/24 maxlen: 24
186.1.209.0/24 maxlen: 24
186.1.210.0/24 maxlen: 24
186.1.211.0/24 maxlen: 24
186.1.212.0/24 maxlen: 24
186.1.213.0/24 maxlen: 24
186.1.214.0/24 maxlen: 24
186.1.215.0/24 maxlen: 24
186.1.216.0/24 maxlen: 24
186.1.217.0/24 maxlen: 24
186.1.218.0/24 maxlen: 24
186.1.219.0/24 maxlen: 24
186.1.220.0/24 maxlen: 24
186.1.221.0/24 maxlen: 24
186.1.222.0/24 maxlen: 24
186.1.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4eb6dc9b61ecfa5398d93ea34cd9e28f888991
Validity
Not Before: Mar 20 11:58:36 2023 GMT
Not After : Mar 22 11:58:36 2025 GMT
Subject: CN=8703e99040c9b293aae83dc971654b01a98f92ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:1a:f8:76:d3:99:bd:4b:3e:2f:9b:82:31:
3d:8d:1b:80:75:f8:c5:42:62:c2:c0:d9:d2:fa:12:
7c:bd:a7:8f:53:d5:ea:44:89:36:16:81:df:cb:58:
79:41:78:db:9b:a8:72:a0:71:f0:5b:3e:c6:69:cd:
a5:a7:e9:86:82:c0:bd:7a:05:e5:ec:3c:9f:83:9f:
8f:e0:67:77:36:c8:95:d5:74:56:58:59:c2:e7:2c:
f5:ca:a1:b6:12:ff:98:af:43:94:66:8a:66:3c:35:
01:e1:8d:b2:71:d3:fc:0b:fd:39:7c:cd:72:40:46:
be:70:13:1c:9b:76:cb:86:34:06:fb:c8:71:2b:29:
b8:6c:6b:89:58:69:c3:be:0e:b4:ba:9a:8c:b9:70:
c6:86:2b:cb:07:5d:01:f1:da:2e:8d:cc:ae:1c:38:
8d:d4:14:91:ae:64:39:25:cc:39:9e:84:39:16:fc:
aa:d0:e9:e7:5e:19:8b:c8:86:2a:1c:6b:fe:e3:74:
6e:21:00:08:72:e3:1b:ac:6e:ba:86:25:d8:47:5f:
be:0e:58:79:14:85:80:20:15:57:3b:2f:75:60:dd:
a9:3b:f7:d4:ac:5e:28:63:d6:39:64:36:03:f5:bd:
64:3d:7b:3a:c7:31:e9:a2:d5:40:b3:bc:1d:d6:ff:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:29:3C:57:59:3F:41:45:E8:1B:CF:45:FC:AD:A1:ED:58:AE:49
X509v3 Authority Key Identifier:
keyid:75:EA:45:74:93:D8:16:DA:27:E8:81:19:C4:1B:3C:F0:9A:22:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b4eb6dc9b61ecfa5398d93ea34cd9e28f888991.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53f683cd-8400-4e1d-8387-d4202e665244/8703e99040c9b293aae83dc971654b01a98f92ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/53f683cd-8400-4e1d-8387-d4202e665244/5b4eb6dc9b61ecfa5398d93ea34cd9e28f888991.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.1.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:48:d2:ad:fe:8b:e7:4d:46:34:be:2e:7e:b5:f1:fa:fe:fd:
9e:65:f7:f9:13:8d:45:6d:f8:36:f0:ac:52:82:9e:71:8a:7b:
d2:78:e4:8b:d1:28:bc:f1:86:74:dd:14:b1:45:10:93:57:c9:
06:35:97:16:43:40:5a:f9:1c:f9:da:49:6b:ac:14:c2:7b:f6:
d2:eb:b1:23:13:24:04:87:a9:83:6d:8d:f1:75:a6:6c:38:ae:
0e:a9:b8:d4:f7:be:63:66:77:8f:be:d5:a9:3c:49:73:ba:33:
de:a3:00:ef:a4:25:3e:aa:ea:01:6a:69:34:9d:95:ee:cf:91:
1a:a9:dd:89:e2:cb:d7:12:52:74:26:4e:78:dd:53:7c:62:c0:
ec:f3:37:48:a3:71:e8:9e:81:07:f1:23:ff:84:75:e7:1d:45:
38:9d:8a:a4:4a:ee:4b:a3:3f:19:98:5c:bf:47:10:22:6d:ba:
c5:b1:8a:c3:b0:a0:d4:90:5f:bb:2f:67:7e:dc:07:b7:51:88:
18:aa:44:4a:38:4b:78:5f:34:32:3b:b4:e1:ed:be:f9:e1:10:
78:57:8b:8f:8b:10:dd:4e:61:b5:45:a1:c8:af:bf:27:ec:fa:
42:f8:02:9d:09:3d:ce:8d:52:b7:c8:dc:75:43:2f:34:f1:71:
5a:44:35:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org