Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/54fef1a6581369e3349d6fd43bf84180c72352c0.roa
File: 54fef1a6581369e3349d6fd43bf84180c72352c0.roa (raw, json)
Hash identifier: Zr0to/N0W7TKSAtbQT41vkJRxMrcgvdV7Un6nrnVLnk=
Subject key identifier: 46:35:E3:85:D5:85:A7:59:78:12:D0:FA:0E:E3:DE:45:54:2C:ED:52
Certificate issuer: /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial: 0DAF9D
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/54fef1a6581369e3349d6fd43bf84180c72352c0.roa
Signing time: Wed 24 Mar 2021 14:40:23 +0000
ROA not before: Wed 24 Mar 2021 14:40:23 +0000
ROA not after: Tue 24 Mar 2026 14:40:23 +0000
asID: 19114
IP address blocks: 181.188.192.0/18 maxlen: 24
186.65.0.0/18 maxlen: 24
200.24.192.0/19 maxlen: 24
200.7.192.0/19 maxlen: 20
200.7.224.0/21 maxlen: 21
200.7.232.0/22 maxlen: 22
200.7.236.0/22 maxlen: 24
200.7.240.0/23 maxlen: 23
200.7.244.0/22 maxlen: 22
200.7.252.0/23 maxlen: 23
2800:830::/31 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896925 (0xdaf9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Validity
Not Before: Mar 24 14:40:23 2021 GMT
Not After : Mar 24 14:40:23 2026 GMT
Subject: CN=54fef1a6581369e3349d6fd43bf84180c72352c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:1d:7e:e0:91:5a:2c:6e:2e:2f:2d:7d:3a:
28:3e:bc:24:64:c3:92:ea:08:66:dc:f1:50:e1:83:
de:7d:66:d7:7e:86:f5:bc:1f:e3:22:dd:bc:0e:60:
15:07:74:75:1b:6f:58:72:35:db:cd:bc:9e:8d:52:
8a:f5:f1:a6:08:c9:47:57:63:8f:c0:52:17:1c:dd:
ad:58:40:1e:e2:08:86:72:79:ab:62:0d:1c:00:e2:
96:72:7a:65:8b:e0:00:17:ed:12:00:ff:1e:89:03:
9d:ad:92:a0:6c:46:d1:0b:04:31:ef:03:ef:65:a6:
a7:a5:b1:57:f5:f8:46:0f:53:09:80:a4:91:04:b2:
88:f4:74:f8:1d:8c:f9:5b:c1:89:ab:9c:e7:dd:a4:
af:f5:a8:7e:e4:96:ee:7f:ae:71:cb:61:02:a8:4a:
bc:27:83:b1:32:75:88:84:e1:82:12:2c:b8:b2:8d:
5f:85:52:75:f4:f2:0d:13:f3:8b:de:d1:eb:b0:64:
3a:4b:19:de:6d:12:99:a0:8b:47:e7:71:70:d7:e5:
23:08:04:a4:79:0f:b1:24:d5:39:ab:37:d1:9c:63:
bd:ea:bd:b7:70:58:f4:8f:b2:26:25:8a:10:09:49:
fc:7e:10:cf:ea:bc:df:f0:44:98:81:57:e8:88:27:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:35:E3:85:D5:85:A7:59:78:12:D0:FA:0E:E3:DE:45:54:2C:ED:52
X509v3 Authority Key Identifier:
keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/54fef1a6581369e3349d6fd43bf84180c72352c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.188.192.0/18
186.65.0.0/18
200.7.192.0-200.7.241.255
200.7.244.0/22
200.7.252.0/23
200.24.192.0/19
IPv6:
2800:830::/31
Signature Algorithm: sha256WithRSAEncryption
5d:42:0c:75:25:a4:52:f4:6e:74:f2:5a:f9:2b:fa:d0:05:06:
42:16:94:2d:e9:f2:4f:ab:74:d2:d9:fd:1e:3b:58:c6:e9:1d:
6a:e4:7d:c4:fa:e5:de:e1:09:7b:4b:b9:c8:37:f7:de:67:5d:
38:db:ee:e8:84:71:97:09:db:a7:be:14:84:5d:74:47:fd:64:
6a:df:a9:2c:d4:fd:a8:e6:d5:9c:be:dc:0b:63:05:78:5d:ac:
75:dd:41:36:3d:64:57:3f:5f:16:48:7d:71:3a:8b:c0:90:1f:
46:31:f3:4d:5a:20:8a:3a:31:8b:89:30:7e:8c:14:b1:6e:21:
99:2f:db:4c:f8:b8:b2:89:39:77:86:ec:da:f9:b4:5b:b6:90:
ea:c5:05:24:69:06:b5:0f:ad:7d:de:bc:ce:41:44:82:37:9b:
cd:25:4b:06:9a:36:d9:95:fa:80:22:2c:0f:38:33:ca:ee:40:
03:63:a4:29:01:75:e4:7c:ac:5a:2e:3e:89:b4:2c:2f:da:11:
b9:8f:db:06:9c:2f:52:ce:29:3f:ce:a8:f0:47:9b:58:1c:d0:
92:52:b2:fe:c9:a8:39:0b:eb:c7:7c:39:4b:34:fd:4e:df:0a:
70:90:c8:25:bc:bd:be:56:e2:f6:1f:1e:70:02:db:ae:64:ef:
a6:e2:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org