Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/59428c021505035d07b02cebdaa405db0b9dfd99.roa
File: 59428c021505035d07b02cebdaa405db0b9dfd99.roa (raw, json)
Hash identifier: /Icxg5+DxU4zOeZZVKIUakqekaNCoiOTW8D0aa0nUWk=
Subject key identifier: 36:19:F6:06:47:9B:8E:44:4A:AA:9E:2A:76:BB:5D:45:ED:EE:23:B3
Certificate issuer: /CN=03db7f368709412d68f18d6190ed8997e247550a
Certificate serial: 21D81B
Authority key identifier: C8:9F:AB:1F:EB:EE:C7:35:7C:DC:80:17:DA:98:8E:81:B6:40:65:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03db7f368709412d68f18d6190ed8997e247550a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/59428c021505035d07b02cebdaa405db0b9dfd99.roa
Signing time: Wed 14 Jun 2023 02:38:46 +0000
ROA not before: Tue 13 Jun 2023 02:38:43 +0000
ROA not after: Sat 14 Jun 2025 02:38:43 +0000
asID: 19180
IP address blocks: 186.160.56.0/21 maxlen: 22
200.110.28.0/22 maxlen: 22
200.110.32.0/22 maxlen: 22
200.110.25.0/24 maxlen: 24
200.110.26.0/23 maxlen: 24
200.110.36.0/23 maxlen: 24
200.110.40.0/21 maxlen: 22
186.160.72.0/21 maxlen: 22
186.160.80.0/20 maxlen: 22
186.160.96.0/21 maxlen: 22
200.110.4.0/22 maxlen: 22
200.110.8.0/21 maxlen: 22
200.110.16.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218011 (0x21d81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db7f368709412d68f18d6190ed8997e247550a
Validity
Not Before: Jun 13 02:38:43 2023 GMT
Not After : Jun 14 02:38:43 2025 GMT
Subject: CN=59428c021505035d07b02cebdaa405db0b9dfd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:4e:45:3a:8e:1e:3e:14:d0:ce:e6:27:da:
79:3b:c8:72:41:7f:04:03:f3:7a:b1:3c:37:87:40:
3b:53:19:a3:b1:d0:0a:ce:c6:c6:5f:18:91:33:1a:
a3:54:70:d4:39:8d:e5:83:0a:04:b9:ec:69:e0:85:
b9:8d:1f:52:76:93:16:dd:ee:3e:9c:be:b3:2d:21:
e2:f1:ad:51:b4:b4:5f:a7:20:ca:c8:2b:a6:43:08:
a0:7e:19:3d:eb:9e:ac:e3:2f:af:11:5e:d7:3d:ea:
26:17:fb:2d:02:6c:2c:15:79:f9:b1:c0:c3:9e:ae:
e7:57:7c:68:95:ca:82:d7:3f:75:07:ea:7a:55:c6:
74:e3:bf:10:3c:15:83:73:4c:9c:62:f1:9d:a0:b3:
15:e5:78:e8:8e:25:9e:27:d0:cd:26:be:aa:21:a2:
39:62:f7:2e:ba:23:3d:06:25:b0:96:a4:af:98:0e:
e4:62:82:45:7f:da:72:03:b5:be:87:3a:c6:c7:e6:
90:97:04:3e:2d:72:3a:33:29:b5:a4:f6:d8:0c:44:
0e:d4:03:32:00:8e:56:50:42:96:39:fa:dd:f0:00:
06:52:b3:72:db:66:86:45:23:87:cb:c2:dd:68:23:
a0:e9:e0:e8:03:67:43:9c:07:1c:f0:8e:77:d4:59:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:F6:06:47:9B:8E:44:4A:AA:9E:2A:76:BB:5D:45:ED:EE:23:B3
X509v3 Authority Key Identifier:
keyid:C8:9F:AB:1F:EB:EE:C7:35:7C:DC:80:17:DA:98:8E:81:B6:40:65:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03db7f368709412d68f18d6190ed8997e247550a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/59428c021505035d07b02cebdaa405db0b9dfd99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/03db7f368709412d68f18d6190ed8997e247550a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.160.56.0/21
186.160.72.0-186.160.103.255
200.110.4.0-200.110.23.255
200.110.25.0-200.110.37.255
200.110.40.0/21
Signature Algorithm: sha256WithRSAEncryption
d0:4d:90:09:61:e2:ae:04:7c:41:83:6c:d3:4f:ae:97:8f:33:
9b:b3:00:fe:fe:2e:6e:86:fc:b1:5b:b0:9a:ae:2f:47:8e:8c:
0c:d0:58:95:44:43:75:aa:ab:85:13:a2:23:a5:b7:a1:46:1a:
7a:59:17:d0:cf:b3:1b:14:c3:ec:96:a9:a9:d0:eb:39:ed:b2:
25:3c:7b:f1:72:72:38:8c:62:f1:63:c2:90:f8:97:ac:a3:d6:
32:51:92:1c:75:2b:af:93:b1:7c:80:fb:50:8d:52:fc:2e:4e:
55:91:af:af:5a:19:b1:0f:ca:e5:26:54:49:78:85:2e:4e:47:
4b:a3:fb:c6:04:2b:43:74:a6:0d:5e:0e:7c:18:db:ae:a2:eb:
2e:44:2f:a8:d5:6a:6f:49:74:1e:89:92:58:40:92:af:18:c6:
5e:df:b9:d5:51:7b:c3:b0:de:a0:c6:2c:89:ce:f3:a0:eb:24:
2f:89:17:4d:c6:8f:32:a3:0f:f7:32:3f:2d:2c:b5:bd:d9:0a:
53:7c:7f:ae:a9:aa:ac:0d:02:d3:06:a5:16:8e:e7:74:9e:bd:
d5:65:a4:e4:64:50:37:54:6b:f0:be:b2:5e:ba:aa:3d:c5:63:
a7:9d:ea:7e:2b:47:0d:79:22:a5:a5:16:df:3b:d2:83:67:3d:
cd:14:8f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org