Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/56405558f441099c9f177070811ad46d5ba49de2.roa
File: 56405558f441099c9f177070811ad46d5ba49de2.roa (raw, json)
Hash identifier: GE3GyRM/hh3b8uG+UTSkPu65ilSYsfllUNxG4QJIbqU=
Subject key identifier: B7:11:EE:8D:F1:6E:BC:60:8E:2F:38:22:A6:18:9C:1E:FE:BE:00:1F
Certificate issuer: /CN=63c3a21c71007155e6b7b013a30357703347965c
Certificate serial: 1F122E
Authority key identifier: DC:74:08:38:C2:43:73:AD:EE:0B:26:F9:EB:63:A7:EF:25:80:96:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63c3a21c71007155e6b7b013a30357703347965c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/56405558f441099c9f177070811ad46d5ba49de2.roa
Signing time: Fri 24 Mar 2023 08:32:23 +0000
ROA not before: Thu 23 Mar 2023 08:32:23 +0000
ROA not after: Sat 22 Mar 2025 08:32:23 +0000
asID: 52510
IP address blocks: 138.219.56.0/24 maxlen: 24
138.219.57.0/24 maxlen: 24
138.219.58.0/24 maxlen: 24
138.219.59.0/24 maxlen: 24
170.233.192.0/24 maxlen: 24
170.233.193.0/24 maxlen: 24
170.233.194.0/24 maxlen: 24
170.233.195.0/24 maxlen: 24
170.245.48.0/24 maxlen: 24
170.245.49.0/24 maxlen: 24
170.245.50.0/24 maxlen: 24
170.245.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2036270 (0x1f122e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c3a21c71007155e6b7b013a30357703347965c
Validity
Not Before: Mar 23 08:32:23 2023 GMT
Not After : Mar 22 08:32:23 2025 GMT
Subject: CN=56405558f441099c9f177070811ad46d5ba49de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:26:88:9c:db:d7:a5:ef:30:62:94:eb:20:
26:26:ce:a0:3b:54:c0:6e:b8:b5:fa:3a:5c:89:58:
27:0b:21:03:3b:56:45:33:02:dd:af:fc:ba:e3:15:
1f:45:70:d0:e1:44:4e:f5:5d:b8:4d:03:b4:73:7f:
ff:bf:b7:d7:01:ed:8c:ac:65:7b:75:fd:d5:55:5a:
e4:f7:db:48:fc:55:9f:65:83:cc:39:81:61:fe:14:
4e:91:ad:02:9e:08:38:08:57:4e:1b:6a:fe:8a:ac:
a4:69:da:cf:19:25:75:2d:9e:f2:ae:98:90:b8:56:
56:94:56:9f:28:8c:53:70:e1:39:2d:53:09:2e:7d:
0a:16:ae:4a:3c:b8:50:d4:d0:3b:2c:d2:6d:cd:d1:
4c:3d:b6:5e:a1:4e:2f:d5:c5:02:ec:ec:9e:d3:99:
8a:60:ca:7b:f9:1f:ed:6b:86:8e:ae:55:90:4c:d5:
59:75:62:6d:70:e4:2a:a5:b3:44:1e:ff:b6:ca:7c:
dc:02:b4:61:26:d6:0c:c5:7f:b8:4f:db:87:48:1c:
9e:0b:3c:aa:72:5a:49:b9:8a:e7:49:a2:1b:91:47:
55:7f:d0:74:6c:01:30:1d:b2:d9:68:ad:12:7f:81:
60:5e:70:fe:03:56:97:33:1b:5c:07:ac:65:d7:7a:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:EE:8D:F1:6E:BC:60:8E:2F:38:22:A6:18:9C:1E:FE:BE:00:1F
X509v3 Authority Key Identifier:
keyid:DC:74:08:38:C2:43:73:AD:EE:0B:26:F9:EB:63:A7:EF:25:80:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63c3a21c71007155e6b7b013a30357703347965c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/56405558f441099c9f177070811ad46d5ba49de2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/63c3a21c71007155e6b7b013a30357703347965c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.56.0/22
170.233.192.0/22
170.245.48.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:6a:c7:e7:c8:2a:1a:0b:82:4b:bf:cb:47:05:3a:a1:eb:65:
98:66:54:d0:24:98:f3:51:7d:04:47:43:55:aa:15:5d:cf:83:
e2:07:cb:56:43:70:fb:e6:bb:d4:38:d8:ee:5e:35:80:14:c0:
98:31:c8:f2:a6:c6:6e:64:c2:77:e8:44:67:03:84:89:9b:cf:
a1:ca:9d:e6:73:d4:a4:59:9e:75:4f:86:9a:f8:c7:6c:41:23:
dd:36:cb:43:7a:2d:a6:38:84:23:8a:4a:f5:b3:cf:7d:39:42:
95:15:86:30:f1:39:9a:0b:81:c8:01:00:5a:7a:dc:6f:23:53:
a0:18:56:69:0d:46:dc:0c:25:98:88:45:ea:dc:c8:c6:e5:4f:
97:c8:a9:84:eb:e6:56:95:22:90:70:60:8c:84:23:82:f5:8a:
e6:f7:a5:ae:4e:3c:9a:ee:f6:e0:55:ed:6d:73:52:2a:4b:ae:
84:07:61:3f:7f:0d:d8:66:33:59:3c:d6:75:f2:d3:e2:a6:ee:
b6:ee:71:7f:9f:69:16:af:07:8d:b8:55:f0:c4:ef:0d:f7:3b:
0a:9f:bb:e1:cf:db:cd:e0:73:9f:c0:5f:12:2f:cb:97:60:ae:
b7:f4:40:d0:a8:e9:9b:85:ff:d5:57:7d:aa:45:15:51:41:cf:
a9:f0:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org