Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/98a5515342f04eb65548381223c677f013cc81ad.roa
File: 98a5515342f04eb65548381223c677f013cc81ad.roa (raw, json)
Hash identifier: xjt1Jw4INtP0pr/WulHcfKiwrmXDDOoHgL08YqJL1hg=
Subject key identifier: 68:3E:7F:4B:BA:E2:1D:76:26:8E:0D:76:34:47:25:0F:21:00:92:3C
Certificate issuer: /CN=b0aa757766600ae92f780498bacfcff9762981a2
Certificate serial: 2769D9
Authority key identifier: 11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/98a5515342f04eb65548381223c677f013cc81ad.roa
Signing time: Wed 31 Jan 2024 16:04:48 +0000
ROA not before: Wed 31 Jan 2024 16:04:48 +0000
ROA not after: Sat 31 Jan 2026 16:04:48 +0000
asID: 262239
IP address blocks: 190.211.146.0/23 maxlen: 24
186.65.88.0/22 maxlen: 24
190.211.145.0/24 maxlen: 24
190.211.146.0/23 maxlen: 24
190.211.148.0/24 maxlen: 24
2803:9a00::/32 maxlen: 64
2803:9a00:bb::/48 maxlen: 64
2803:9a00:17e::/47 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2583001 (0x2769d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0aa757766600ae92f780498bacfcff9762981a2
Validity
Not Before: Jan 31 16:04:48 2024 GMT
Not After : Jan 31 16:04:48 2026 GMT
Subject: CN=98a5515342f04eb65548381223c677f013cc81ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:4d:aa:7e:2a:3a:88:58:97:b4:03:ce:67:
2c:5c:cf:8f:64:e3:fd:c2:1f:b6:3c:5f:b2:2b:a1:
2c:74:79:39:c0:07:b1:bd:00:84:aa:31:bf:42:c7:
d0:86:bd:17:2b:56:c2:16:63:10:7e:96:1b:ab:3f:
9b:2f:fd:08:a8:94:f3:92:87:d2:48:0c:fc:ad:76:
5d:9d:07:a6:f5:80:98:8e:82:09:c1:79:e2:17:c1:
81:49:53:ff:1d:b2:50:5e:ab:71:09:95:ef:62:4c:
0c:88:df:52:68:45:ad:b8:81:58:00:cc:a7:e6:0d:
e2:28:57:86:0f:41:e0:8f:de:6d:14:db:7c:4a:98:
1f:0a:0e:65:42:f9:84:cc:64:ca:cf:db:44:e5:6a:
8d:40:2f:79:5b:28:46:ea:92:54:cf:b1:e0:05:41:
97:62:53:b9:00:53:ca:68:d1:db:aa:bd:f6:ac:a5:
a3:6c:5b:3a:5e:2f:3d:02:fa:9f:33:27:ba:1e:49:
0d:42:9e:c5:17:c9:fb:40:17:f6:3b:c1:5a:aa:05:
5e:e7:24:ba:df:0d:de:a7:83:4e:e4:fc:62:40:6b:
ea:7a:59:ab:21:d3:5a:10:af:e8:76:4c:ea:91:6b:
22:06:51:11:ad:d2:40:c3:76:9e:78:d1:f7:1f:b5:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3E:7F:4B:BA:E2:1D:76:26:8E:0D:76:34:47:25:0F:21:00:92:3C
X509v3 Authority Key Identifier:
keyid:11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/98a5515342f04eb65548381223c677f013cc81ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/b0aa757766600ae92f780498bacfcff9762981a2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.65.88.0/22
190.211.145.0-190.211.148.255
IPv6:
2803:9a00::/32
Signature Algorithm: sha256WithRSAEncryption
57:f3:72:47:cd:49:6a:53:05:09:53:1e:89:cb:3e:2a:01:5c:
f6:db:55:ef:41:c7:d0:27:02:98:0f:78:47:54:dd:00:2e:03:
40:21:82:77:57:88:cc:fc:5c:f0:4c:af:96:7b:16:b2:e4:cd:
f8:e5:51:30:15:14:85:f9:78:dd:46:c6:09:1f:ae:61:59:16:
65:4f:cf:88:b8:15:aa:a1:45:f4:52:95:7b:1d:57:8a:32:13:
01:ab:78:21:37:53:95:85:54:86:d2:ee:ee:ac:94:94:9b:9c:
62:8d:4b:cc:16:70:17:f7:72:ff:ff:f0:04:84:b2:78:99:f0:
64:f7:38:96:2f:e4:e7:4c:6b:d9:1b:d7:a7:29:1d:f3:3d:9a:
dd:0c:5a:5c:5f:8e:0e:3d:fa:66:4f:1c:98:9b:6b:59:1d:c7:
03:fe:62:d1:53:9d:a8:4a:53:1f:31:ed:37:88:a0:13:bd:fd:
ff:df:07:4d:5f:cf:68:8b:6f:40:96:3b:6c:0d:2e:77:40:c7:
f3:1d:29:bb:f2:30:a0:15:bc:ab:61:59:b9:a7:37:56:76:09:
4d:40:3b:f1:56:c5:7c:83:a4:ed:41:35:50:68:0b:5b:d9:72:
d2:4a:c8:d9:73:b2:67:59:59:98:eb:8a:4d:bf:74:ed:20:7a:
29:ab:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org