Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/e1732eee37f3d6e86df92753761d325758236d73.roa
File: e1732eee37f3d6e86df92753761d325758236d73.roa (raw, json)
Hash identifier: LwJFO6G0yc/s002QFjru24WqD3psm2zDOwEQUukIIxY=
Subject key identifier: 4B:1C:48:FE:FE:8A:52:12:43:7B:12:87:F7:F4:89:F9:2D:1E:B7:58
Certificate issuer: /CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Certificate serial: 20643D
Authority key identifier: 35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/e1732eee37f3d6e86df92753761d325758236d73.roa
Signing time: Mon 22 May 2023 08:30:01 +0000
ROA not before: Sun 21 May 2023 08:30:01 +0000
ROA not after: Tue 20 May 2025 08:30:01 +0000
asID: 26210
IP address blocks: 186.121.192.0/18 maxlen: 24
190.181.0.0/18 maxlen: 24
200.105.128.0/19 maxlen: 24
200.105.160.0/19 maxlen: 24
200.105.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122813 (0x20643d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Validity
Not Before: May 21 08:30:01 2023 GMT
Not After : May 20 08:30:01 2025 GMT
Subject: CN=e1732eee37f3d6e86df92753761d325758236d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ea:6c:3c:fb:a3:5a:3b:1b:98:bc:b6:3e:e1:
7e:d7:d2:44:7e:4a:66:cd:a6:55:da:71:9c:67:8a:
8a:0f:62:7d:35:c6:9a:96:42:0c:07:88:ab:17:3e:
c1:9b:b7:5d:a2:b1:fa:2b:5b:b2:b6:ca:ce:19:ea:
88:83:1f:ee:86:56:62:ac:64:7d:e4:1d:17:3e:4e:
ed:fd:ad:2a:2f:3b:fc:27:5e:00:7f:fd:a6:26:41:
f5:a0:fd:68:df:a5:8a:ba:3f:d1:ff:50:59:ca:c5:
67:61:bc:cf:05:74:da:f7:d7:c6:96:e0:00:fa:eb:
04:ea:59:0a:38:a6:1d:84:19:d1:66:41:67:a8:9d:
46:91:66:10:84:e2:28:2c:fb:82:62:ad:82:42:79:
88:69:b4:cf:aa:c4:b0:84:e7:c6:b3:48:d2:22:f6:
16:0c:06:2a:b8:c6:15:04:1a:fb:f3:fd:65:77:e7:
61:e0:b6:db:39:64:ff:c6:1f:93:61:27:57:1b:7e:
c5:aa:0c:23:a8:26:12:97:e8:c6:50:ea:3d:37:20:
f4:25:62:a3:a0:7c:5b:3e:65:16:e0:df:93:6b:48:
02:7d:ff:b7:6e:ae:2e:06:aa:2c:41:e7:a1:0e:bd:
57:00:dc:a4:c3:58:f1:66:10:c0:14:68:89:2c:34:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:48:FE:FE:8A:52:12:43:7B:12:87:F7:F4:89:F9:2D:1E:B7:58
X509v3 Authority Key Identifier:
keyid:35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/e1732eee37f3d6e86df92753761d325758236d73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.121.192.0/18
190.181.0.0/18
200.105.128.0-200.105.223.255
Signature Algorithm: sha256WithRSAEncryption
4b:b5:b2:6d:31:58:81:de:8c:9c:db:ed:9e:65:7f:0c:8d:0b:
41:b0:f5:26:6e:5a:bf:b2:0b:76:d1:72:bb:7d:45:69:88:77:
a2:5a:37:4d:a6:55:4c:48:fd:d4:71:70:92:7b:45:08:24:57:
59:e3:f8:38:bb:1f:4f:32:83:03:07:da:4c:c3:e3:10:18:aa:
61:3e:e5:c9:eb:b6:8f:86:4e:b6:9e:55:0b:d2:97:de:e4:ed:
09:dc:09:08:c9:d1:b1:55:f2:39:33:a7:5c:02:9b:50:2b:89:
9a:bb:84:2c:14:8f:4d:b0:0c:b2:83:0b:cd:bb:8c:1f:6f:61:
e4:c2:25:94:a8:b1:c2:a5:a0:ed:56:3f:68:86:c3:ef:c4:ea:
1c:05:ad:8c:69:5e:6d:f9:32:fe:b4:53:1c:b1:81:7b:fd:52:
12:75:0b:bd:56:90:b6:57:08:57:77:25:63:3c:c0:00:5a:aa:
d6:21:e9:04:93:a3:d7:4a:97:94:7e:0e:45:ba:7d:da:e7:6f:
9f:de:9f:79:3f:b4:a9:ab:0a:40:d7:cb:95:b7:aa:6a:1a:0c:
a5:8c:7b:3d:75:09:aa:65:b9:95:90:d5:dc:92:d8:c0:8b:23:
55:ea:19:87:54:15:35:47:06:f7:b6:60:33:e1:a5:2e:88:ff:
7c:6f:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org