Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/66dc2fd9a31261c77346d33c269a36bafbc80a18.roa
File: 66dc2fd9a31261c77346d33c269a36bafbc80a18.roa (raw, json)
Hash identifier: cd7nnyRbuHMgRMbWb1+klf7vkV0F6VjUZ0RY8owYxZ0=
Subject key identifier: 06:5F:89:1F:EA:28:28:29:35:E3:CB:C0:DF:CF:6E:FA:C1:60:4A:7F
Certificate issuer: /CN=82225174b3988d5920cd5a642f74ca96004f3b86
Certificate serial: 0D5EB6
Authority key identifier: A6:B6:0E:25:B5:F3:51:46:12:87:2E:65:A8:35:52:98:B3:67:42:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82225174b3988d5920cd5a642f74ca96004f3b86.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/66dc2fd9a31261c77346d33c269a36bafbc80a18.roa
Signing time: Wed 24 Mar 2021 14:28:34 +0000
ROA not before: Wed 24 Mar 2021 14:28:34 +0000
ROA not after: Tue 24 Mar 2026 14:28:34 +0000
asID: 26505
IP address blocks: 186.190.240.0/20 maxlen: 24
200.124.128.0/20 maxlen: 24
200.124.144.0/20 maxlen: 24
2800:9e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876214 (0xd5eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82225174b3988d5920cd5a642f74ca96004f3b86
Validity
Not Before: Mar 24 14:28:34 2021 GMT
Not After : Mar 24 14:28:34 2026 GMT
Subject: CN=66dc2fd9a31261c77346d33c269a36bafbc80a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:02:31:76:f2:4e:f8:f3:70:77:e6:90:98:
8e:fd:32:7c:fa:92:68:31:db:02:72:b2:06:07:be:
ec:ac:a9:a0:22:cd:17:ed:a7:8b:a8:f0:32:d8:53:
a5:b8:28:e8:c3:82:c7:c9:a2:06:10:fe:93:f2:fb:
3c:19:f7:ec:7a:66:20:98:ba:f6:d6:0b:3a:5a:a1:
c1:1c:d6:17:6d:d0:a7:e7:3b:03:6e:7c:32:27:c6:
28:3a:a4:93:73:11:8d:a7:e0:26:db:99:5e:eb:39:
33:4b:7d:3a:ac:b8:33:17:01:7e:8f:76:d6:60:ba:
22:01:d3:a9:39:b4:5b:4d:df:c8:68:61:55:5a:42:
34:3a:26:57:c3:01:16:42:5a:5c:14:f7:7a:26:03:
0b:78:81:38:ac:4d:3b:60:f9:46:df:44:15:11:10:
d3:9c:02:71:06:5d:63:f3:7e:5d:8b:75:16:84:56:
7d:ff:02:d2:1c:20:c8:41:ef:6a:39:cc:55:1e:bf:
0e:87:08:fb:68:54:4a:39:22:c0:2f:89:57:1c:44:
0a:ed:43:9d:4f:ba:1f:55:18:f2:d8:4b:db:6d:29:
c5:74:3f:eb:14:5e:8e:16:13:32:c7:d6:1d:b0:20:
9f:65:97:29:c9:97:e4:d6:e6:ec:70:32:af:da:63:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:89:1F:EA:28:28:29:35:E3:CB:C0:DF:CF:6E:FA:C1:60:4A:7F
X509v3 Authority Key Identifier:
keyid:A6:B6:0E:25:B5:F3:51:46:12:87:2E:65:A8:35:52:98:B3:67:42:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82225174b3988d5920cd5a642f74ca96004f3b86.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/66dc2fd9a31261c77346d33c269a36bafbc80a18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/82225174b3988d5920cd5a642f74ca96004f3b86.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.190.240.0/20
200.124.128.0/19
IPv6:
2800:9e0::/32
Signature Algorithm: sha256WithRSAEncryption
82:e8:3c:7d:88:8f:3a:d1:e5:a7:3c:e7:ed:2f:e0:a1:2b:d1:
6c:f7:36:6b:94:3a:d3:93:13:ce:eb:6d:81:2c:bf:6d:8f:31:
bb:66:c1:f7:ad:2e:49:71:9d:4f:ba:a3:d2:9c:9b:13:0b:59:
a1:79:a3:a9:3d:fa:65:7f:68:17:e3:d0:49:4e:c7:1d:b6:99:
fd:6d:c0:b8:dc:11:28:3b:6e:2a:fe:f4:ad:3f:eb:c0:44:c2:
b2:7d:ef:05:f1:1b:e5:67:df:08:21:53:a3:32:e4:21:72:a5:
fb:fe:eb:81:8a:73:87:19:53:ce:bf:36:10:70:4d:3b:ac:d6:
a2:9f:6d:10:38:51:11:6f:54:f6:17:cc:f3:e1:70:f7:39:13:
49:db:84:9a:f4:71:2c:3a:da:60:36:1e:2a:76:19:91:f8:ac:
4f:5b:a5:7f:34:6e:b8:75:0c:85:83:b9:11:37:7a:08:7e:b5:
fd:48:c5:fe:9a:9e:34:1b:c8:f8:6d:f1:d1:cc:f1:6c:d3:9d:
7d:c3:73:83:4e:8b:fe:f9:ca:a1:15:2d:2a:5f:50:2b:c6:25:
aa:2d:85:69:c8:95:84:74:65:cf:92:a5:b6:af:ff:a0:e4:fc:
e2:76:77:92:21:15:4f:4d:ee:60:4b:c5:92:61:f2:6d:86:26:
b1:a2:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org