Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/cd1f8f6bbb8b33eeca6cc58ca76b7a403f9235fc.roa
File: cd1f8f6bbb8b33eeca6cc58ca76b7a403f9235fc.roa (raw, json)
Hash identifier: YFU/xSpZqkJpvQSpHrwcvpLHlY+xglKQtfr0eBFqTGY=
Subject key identifier: 77:99:C9:E6:8B:B2:71:78:6C:DB:C2:FF:F9:D5:46:94:75:22:EB:8B
Certificate issuer: /CN=03db7f368709412d68f18d6190ed8997e247550a
Certificate serial: 0D8822
Authority key identifier: C8:9F:AB:1F:EB:EE:C7:35:7C:DC:80:17:DA:98:8E:81:B6:40:65:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03db7f368709412d68f18d6190ed8997e247550a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/cd1f8f6bbb8b33eeca6cc58ca76b7a403f9235fc.roa
Signing time: Wed 24 Mar 2021 14:46:04 +0000
ROA not before: Wed 24 Mar 2021 14:46:03 +0000
ROA not after: Tue 24 Mar 2026 14:46:03 +0000
asID: 19180
IP address blocks: 186.160.56.0/21 maxlen: 22
186.160.72.0/21 maxlen: 22
186.160.80.0/20 maxlen: 22
186.160.96.0/21 maxlen: 22
200.110.16.0/21 maxlen: 22
200.110.25.0/24 maxlen: 24
200.110.26.0/23 maxlen: 24
200.110.28.0/22 maxlen: 22
200.110.32.0/22 maxlen: 22
200.110.36.0/23 maxlen: 24
200.110.4.0/22 maxlen: 22
200.110.40.0/21 maxlen: 22
200.110.8.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886818 (0xd8822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db7f368709412d68f18d6190ed8997e247550a
Validity
Not Before: Mar 24 14:46:03 2021 GMT
Not After : Mar 24 14:46:03 2026 GMT
Subject: CN=cd1f8f6bbb8b33eeca6cc58ca76b7a403f9235fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:69:f8:13:6c:5f:cf:a3:31:3c:40:01:34:
ba:7d:b9:89:cb:46:2f:53:6d:df:6d:95:93:9b:07:
7e:2f:1b:56:43:2d:4f:85:a7:91:d1:b1:ea:0d:72:
ae:1b:a3:1f:e1:f3:66:6a:17:8b:a3:73:4c:33:c1:
c4:83:e2:2c:7d:c8:ea:3e:d8:77:63:00:b0:a2:d8:
7f:5e:74:f0:9f:1b:78:35:ae:66:5a:8a:3b:62:d6:
70:40:8b:69:60:1b:58:53:34:e4:f0:97:0c:ef:34:
7d:c3:30:a6:00:c8:23:2f:09:4b:92:d3:da:4b:de:
ba:68:ff:61:f2:b5:96:56:df:8e:67:3e:e5:90:62:
06:bb:94:e4:bc:50:b5:77:37:41:77:32:11:b8:16:
93:46:1c:05:f5:bd:f3:2f:0d:a3:cd:2e:91:ca:cf:
0a:56:39:20:aa:be:71:82:39:f6:45:02:cd:1e:b9:
ba:16:a1:f3:b4:c6:77:3b:b4:a3:4a:9e:29:d6:66:
9f:93:bd:7d:ae:df:46:a5:c7:b2:39:ac:b3:33:e1:
68:42:bb:c4:2b:4a:b8:6d:27:5c:0d:0b:ac:f5:91:
1a:14:8e:b3:d0:9a:c2:de:5d:e0:43:b8:1e:4e:f1:
79:0e:eb:46:c4:d5:1d:2e:af:b7:01:8d:13:1d:d7:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:99:C9:E6:8B:B2:71:78:6C:DB:C2:FF:F9:D5:46:94:75:22:EB:8B
X509v3 Authority Key Identifier:
keyid:C8:9F:AB:1F:EB:EE:C7:35:7C:DC:80:17:DA:98:8E:81:B6:40:65:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03db7f368709412d68f18d6190ed8997e247550a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/cd1f8f6bbb8b33eeca6cc58ca76b7a403f9235fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/03db7f368709412d68f18d6190ed8997e247550a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.160.56.0/21
186.160.72.0-186.160.103.255
200.110.4.0-200.110.23.255
200.110.25.0-200.110.37.255
200.110.40.0/21
Signature Algorithm: sha256WithRSAEncryption
60:d9:9a:6c:02:ae:7a:bd:89:71:70:ec:33:c4:dc:90:e6:7d:
df:a9:fa:6f:93:fb:6f:a2:9b:91:82:0c:02:14:b4:75:8a:02:
d0:52:a3:df:3a:d1:df:46:5d:a3:88:2d:b3:17:ba:d9:e0:17:
12:93:b0:12:3c:8d:20:47:5c:fe:eb:0e:d9:4f:05:d2:bb:e5:
b1:14:65:f0:52:e8:40:24:0c:29:72:8b:fe:49:11:66:97:5d:
70:9a:f3:89:1a:a3:ca:df:c6:1b:cf:2b:52:66:a8:75:1b:52:
f7:3d:4e:b8:dc:c6:4c:22:a4:40:ef:b1:be:d1:55:75:96:ff:
ee:00:98:c4:02:af:4a:a7:f2:ce:88:b8:05:27:58:28:94:a8:
d9:10:44:e0:d8:7b:ce:07:ce:8e:72:0f:87:30:f5:1a:a0:17:
eb:60:3d:6e:ad:87:56:09:33:6a:cf:76:0f:63:7d:9e:04:30:
c6:21:a4:07:35:e0:e9:4d:74:dc:e8:43:ea:02:7f:d6:a4:00:
f6:0c:eb:41:17:1e:ef:8c:d5:05:24:6b:33:a3:6f:6d:5a:0d:
f2:33:50:f7:d8:9e:6d:b6:93:90:ab:ed:f8:dd:94:d6:ff:bd:
11:57:7f:71:3f:61:a1:29:7d:3a:93:59:b8:2e:fd:15:29:ca:
8b:4b:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org