Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/f43ccb98b7fc4dd96a8d6469bef947d5e1534c97.roa
File: f43ccb98b7fc4dd96a8d6469bef947d5e1534c97.roa (raw, json)
Hash identifier: GqWWo2Tll/EnFTxtdb13crM2g4iNSM13u7iz/wBjLp8=
Subject key identifier: 89:61:A5:4A:B2:52:6A:E4:E7:E7:C5:23:C1:20:85:DC:0C:97:B3:8B
Certificate issuer: /CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Certificate serial: 175D98
Authority key identifier: 35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/f43ccb98b7fc4dd96a8d6469bef947d5e1534c97.roa
Signing time: Mon 23 May 2022 21:33:49 +0000
ROA not before: Mon 23 May 2022 03:00:00 +0000
ROA not after: Tue 23 May 2023 03:00:00 +0000
asID: 26210
IP address blocks: 186.121.192.0/18 maxlen: 24
190.181.0.0/18 maxlen: 24
200.105.128.0/19 maxlen: 24
200.105.160.0/19 maxlen: 24
200.105.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1531288 (0x175d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Validity
Not Before: May 23 03:00:00 2022 GMT
Not After : May 23 03:00:00 2023 GMT
Subject: CN=f43ccb98b7fc4dd96a8d6469bef947d5e1534c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:6f:bc:fc:55:57:be:a4:27:81:3c:a9:5c:
1d:ab:95:82:47:e3:b9:ca:cb:4d:9c:70:8d:60:ad:
82:e1:40:21:54:e0:67:81:48:a1:e7:ab:fe:2b:af:
95:d7:38:1d:7d:3f:f6:cf:42:70:56:50:88:10:d7:
e0:64:e8:72:44:04:a9:f3:3c:44:57:02:a1:85:62:
9e:2e:c3:25:01:4b:e4:33:71:ec:10:d9:c2:00:48:
34:d2:79:ec:b1:81:43:64:73:ca:ae:97:52:18:7d:
4f:06:c8:b8:9c:36:23:db:bb:92:76:6f:b4:6b:61:
e5:41:27:36:be:cb:9d:d4:f9:46:cc:30:d1:b1:c3:
f3:44:9a:c0:42:70:9f:2c:a8:ec:03:a2:a3:e7:36:
d6:d1:73:96:73:2a:b4:7e:ea:eb:78:41:99:cc:36:
ad:97:2b:1f:4b:fc:58:27:b1:43:7d:f2:40:93:b5:
c1:16:26:2f:4f:db:6f:de:90:c6:1b:91:89:47:e6:
d2:2d:a5:a3:0b:83:a8:eb:56:92:f7:09:6f:fe:01:
a2:83:cf:6e:5f:58:40:9e:4a:40:79:72:96:64:62:
9b:67:4f:4d:2f:53:1a:3c:c9:7f:33:a8:f0:c2:25:
ee:35:45:d8:fc:55:3b:c9:49:ed:11:af:cf:6e:d2:
ac:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:A5:4A:B2:52:6A:E4:E7:E7:C5:23:C1:20:85:DC:0C:97:B3:8B
X509v3 Authority Key Identifier:
keyid:35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/f43ccb98b7fc4dd96a8d6469bef947d5e1534c97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.121.192.0/18
190.181.0.0/18
200.105.128.0-200.105.223.255
Signature Algorithm: sha256WithRSAEncryption
1d:9d:5c:87:e4:41:87:da:3c:72:b3:d9:9c:93:9e:cf:19:4b:
99:4c:ad:eb:54:4d:86:ae:7e:5b:bd:3e:99:ca:66:74:e6:f1:
b4:75:8c:62:4c:3c:39:e8:0c:42:cc:a9:d0:32:31:ed:d7:c9:
71:32:78:de:b0:93:99:a6:33:3b:6b:5e:d3:f3:3a:93:a9:22:
4e:54:9b:1e:bc:77:4b:f2:18:b4:aa:76:b5:44:dc:c0:7b:be:
17:c1:68:41:14:d0:56:cb:8b:fc:5f:b9:49:25:8d:8f:85:fc:
54:9d:61:ee:d6:cb:23:43:47:48:61:63:b8:d9:7f:54:76:77:
38:dd:89:db:25:a8:80:3d:ab:d2:b0:8b:36:09:98:8e:eb:f7:
db:f2:a2:b2:b1:bf:63:d7:9b:16:73:94:fe:73:d3:85:48:78:
9e:a7:c6:67:7f:cc:b9:57:97:d0:1c:fd:86:c7:2a:9f:01:c7:
ed:11:f2:0e:6b:45:77:8a:65:1f:f5:58:d3:fd:6b:17:ef:47:
cc:e3:86:74:87:6a:37:84:c7:32:69:5b:dc:43:14:84:7b:75:
e0:24:5f:e1:36:46:31:75:3a:60:d2:d8:ca:35:c8:ab:9a:64:
89:23:9d:b8:ce:07:9d:55:c2:8c:98:49:ad:29:ea:cd:8a:28:
15:b9:ce:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org