Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/35c0f3abd2547941c9fc592ea4d1ead71208d85c.roa
File: 35c0f3abd2547941c9fc592ea4d1ead71208d85c.roa (raw, json)
Hash identifier: QsYjcEVqbW5WM6P/KSsX7ebekYhdMNXiX+Z4NVYEAto=
Subject key identifier: 6C:92:24:56:6D:FC:C6:57:9C:96:20:D4:39:5E:7C:EB:64:05:0A:4E
Certificate issuer: /CN=44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca
Certificate serial: 24256F
Authority key identifier: D9:E2:2D:FB:2E:DB:03:3D:7E:61:3B:B3:22:76:2A:C6:40:ED:53:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/35c0f3abd2547941c9fc592ea4d1ead71208d85c.roa
Signing time: Tue 06 Jun 2023 15:26:25 +0000
ROA not before: Mon 05 Jun 2023 15:26:25 +0000
ROA not after: Fri 06 Jun 2025 15:26:25 +0000
asID: 3790
IP address blocks: 190.171.27.0/24 maxlen: 24
190.171.28.0/24 maxlen: 24
190.241.0.0/22 maxlen: 22
190.241.4.0/23 maxlen: 24
190.241.6.0/24 maxlen: 24
190.241.8.0/23 maxlen: 24
190.241.11.0/24 maxlen: 24
190.241.24.0/22 maxlen: 22
190.241.28.0/23 maxlen: 23
190.241.64.0/21 maxlen: 21
190.241.72.0/24 maxlen: 24
190.241.96.0/20 maxlen: 20
190.241.112.0/22 maxlen: 24
190.241.121.0/24 maxlen: 24
190.241.122.0/23 maxlen: 23
190.241.126.0/23 maxlen: 23
190.241.128.0/24 maxlen: 24
190.241.132.0/24 maxlen: 24
190.241.135.0/24 maxlen: 24
190.241.142.0/23 maxlen: 23
190.241.144.0/20 maxlen: 20
190.241.160.0/19 maxlen: 24
190.241.192.0/22 maxlen: 24
190.241.196.0/23 maxlen: 23
190.241.199.0/24 maxlen: 24
190.241.200.0/24 maxlen: 24
190.241.202.0/23 maxlen: 23
190.241.204.0/23 maxlen: 23
190.241.206.0/24 maxlen: 24
190.241.208.0/20 maxlen: 20
190.241.224.0/19 maxlen: 20
196.40.0.0/19 maxlen: 24
196.40.34.0/23 maxlen: 24
196.40.36.0/22 maxlen: 24
196.40.40.0/21 maxlen: 21
196.40.49.0/24 maxlen: 24
196.40.50.0/23 maxlen: 23
196.40.52.0/22 maxlen: 22
196.40.56.0/21 maxlen: 24
196.40.64.0/21 maxlen: 24
196.40.72.0/24 maxlen: 24
196.40.74.0/23 maxlen: 23
196.40.76.0/22 maxlen: 22
196.40.80.0/20 maxlen: 24
2001:13d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368879 (0x24256f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca
Validity
Not Before: Jun 5 15:26:25 2023 GMT
Not After : Jun 6 15:26:25 2025 GMT
Subject: CN=35c0f3abd2547941c9fc592ea4d1ead71208d85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:4a:3d:df:7d:73:5f:86:22:2f:ca:63:f3:
45:9b:c1:9f:24:ad:d3:8f:e0:f8:03:eb:e0:cb:c2:
52:26:1d:45:32:48:10:14:1c:a7:03:e7:b2:45:20:
30:65:68:e7:db:bf:bc:59:c7:96:a6:c9:ff:12:c0:
a1:c7:2b:68:e7:3e:69:9d:ee:2f:ff:e7:1a:b1:69:
6b:10:37:7f:96:34:55:48:46:8f:48:4f:c2:7a:21:
b4:6c:e9:db:95:96:ef:68:3a:13:76:18:53:a6:85:
c4:1c:43:fb:6a:16:95:71:9a:d1:19:77:5f:fc:cb:
1a:ba:f0:90:23:e3:08:b5:b2:2f:56:bf:b2:81:c8:
1f:41:29:3b:0c:77:84:b0:6e:c2:25:5a:07:c0:42:
b4:b1:d1:92:35:5c:33:9b:69:2b:b4:01:66:0c:1d:
b8:92:5f:94:ef:f1:eb:e8:3e:3e:dc:b2:5a:2a:43:
a3:c6:d2:3e:16:4a:d2:8b:1c:98:8e:32:44:03:9a:
3a:8d:4f:12:a2:15:d1:2f:d0:90:fb:86:9d:c0:70:
09:7f:3c:e3:ad:62:94:9e:72:93:9e:c7:59:ec:c3:
a4:d5:d3:ab:3c:08:a4:ea:e6:ba:9b:3b:dc:3e:d2:
29:a8:ea:a9:fe:c4:af:4a:9d:32:b3:54:cd:eb:b5:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:24:56:6D:FC:C6:57:9C:96:20:D4:39:5E:7C:EB:64:05:0A:4E
X509v3 Authority Key Identifier:
keyid:D9:E2:2D:FB:2E:DB:03:3D:7E:61:3B:B3:22:76:2A:C6:40:ED:53:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/35c0f3abd2547941c9fc592ea4d1ead71208d85c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.171.27.0-190.171.28.255
190.241.0.0-190.241.6.255
190.241.8.0/23
190.241.11.0/24
190.241.24.0-190.241.29.255
190.241.64.0-190.241.72.255
190.241.96.0-190.241.115.255
190.241.121.0-190.241.123.255
190.241.126.0-190.241.128.255
190.241.132.0/24
190.241.135.0/24
190.241.142.0-190.241.197.255
190.241.199.0-190.241.200.255
190.241.202.0-190.241.206.255
190.241.208.0-190.241.255.255
196.40.0.0/19
196.40.34.0-196.40.47.255
196.40.49.0-196.40.72.255
196.40.74.0-196.40.95.255
IPv6:
2001:13d8::/32
Signature Algorithm: sha256WithRSAEncryption
8a:df:54:69:41:eb:7f:bc:54:e8:d4:8f:6b:41:0b:eb:62:c8:
07:56:d3:18:6d:69:6d:4c:5b:a9:5c:e9:d2:f9:74:0b:b1:c1:
1c:7d:3a:36:66:08:4f:35:76:c6:b8:9d:12:ca:ea:b0:2f:56:
69:71:6b:ce:cd:99:75:c4:31:ca:87:a3:26:7f:a8:8b:c8:72:
d4:4d:72:b9:59:47:6a:dc:5b:0b:41:e2:15:1a:e8:c8:e2:8c:
6d:09:2a:af:5e:b4:6f:86:52:3d:d1:48:27:f1:3b:c0:fc:62:
78:ed:f8:9b:83:77:0f:e3:9d:1b:d4:3f:8c:13:e3:b1:06:e0:
32:7d:c2:0c:d5:8b:89:84:aa:ca:85:83:c9:ee:63:c7:ea:af:
35:d9:33:de:0c:20:ae:8e:95:7f:87:0f:9e:a4:84:e8:b3:30:
ce:26:81:1b:ec:d9:8e:c1:f8:76:aa:4a:92:a6:91:59:0a:4a:
43:ef:53:e5:af:f8:6f:94:e7:00:0c:cf:56:27:93:73:10:0f:
4c:71:a1:02:a1:69:11:ae:1e:e9:0b:a3:7b:29:e1:c3:2c:6d:
56:f6:da:cb:96:fc:5e:a2:fa:88:d8:03:f6:4a:0c:84:2e:52:
18:c4:14:15:96:55:53:22:b5:18:83:11:3e:2b:b0:cc:33:87:
d9:da:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org