Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3cbcdbc977beb86d7ffeca5983efd3a614c46a81.roa
File: 3cbcdbc977beb86d7ffeca5983efd3a614c46a81.roa (raw, json)
Hash identifier: 78R3ceCTbcJhmLf6sCApanM/1gP4LEne4zLPmtg3x3k=
Subject key identifier: 9F:F7:0F:3F:D6:38:8B:0D:29:25:45:75:DB:C2:D9:C5:B6:61:DA:71
Certificate issuer: /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial: 2356B4
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3cbcdbc977beb86d7ffeca5983efd3a614c46a81.roa
Signing time: Tue 06 Jun 2023 15:04:35 +0000
ROA not before: Mon 05 Jun 2023 15:03:49 +0000
ROA not after: Fri 06 Jun 2025 15:03:49 +0000
asID: 3790
IP address blocks: 200.122.128.0/18 maxlen: 24
190.171.0.0/24 maxlen: 24
190.171.3.0/24 maxlen: 24
190.171.4.0/22 maxlen: 24
190.171.8.0/23 maxlen: 24
190.171.14.0/24 maxlen: 24
190.171.16.0/22 maxlen: 24
190.10.0.0/20 maxlen: 24
190.10.16.0/23 maxlen: 24
190.10.19.0/24 maxlen: 24
190.10.20.0/22 maxlen: 24
190.10.121.0/24 maxlen: 24
190.10.122.0/23 maxlen: 24
190.10.25.0/24 maxlen: 24
190.10.26.0/23 maxlen: 24
190.10.28.0/22 maxlen: 24
190.10.32.0/24 maxlen: 24
190.10.34.0/24 maxlen: 24
190.10.64.0/23 maxlen: 24
190.10.66.0/24 maxlen: 24
190.10.68.0/22 maxlen: 24
190.10.76.0/22 maxlen: 24
190.241.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315956 (0x2356b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Validity
Not Before: Jun 5 15:03:49 2023 GMT
Not After : Jun 6 15:03:49 2025 GMT
Subject: CN=3cbcdbc977beb86d7ffeca5983efd3a614c46a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:6d:90:c1:64:f8:18:64:d8:0f:bb:05:5c:
86:80:de:1d:46:86:c3:b5:16:04:5c:d3:74:4c:84:
e4:c9:af:97:da:15:76:b5:8c:1c:ed:d7:48:e1:d2:
b7:25:b1:3b:d1:12:63:9f:dc:37:2b:c2:5a:c2:2c:
ad:3a:6a:13:f2:63:96:67:d4:9d:44:25:ab:eb:30:
6d:ad:19:8e:68:52:15:84:4e:57:63:06:2b:c7:84:
29:99:10:7c:bd:fa:56:32:64:c7:86:1d:05:c3:81:
4e:97:89:43:f9:37:3f:1b:e7:16:63:63:b3:b8:82:
4c:5f:67:1a:45:ce:97:eb:02:be:b7:ed:12:45:11:
f5:f5:0f:5c:e6:40:56:ac:7b:f4:bb:18:02:56:d6:
87:f2:a8:0d:79:26:7f:c9:9f:f4:e1:ed:68:9a:51:
b6:50:b3:70:57:fc:b4:4c:ff:0b:00:7d:9f:70:c5:
ba:bf:15:ff:a2:11:3f:f0:ec:b4:ce:4a:93:44:e9:
c1:c3:13:bd:2d:42:2c:2c:39:0c:3d:37:84:88:66:
03:f1:94:34:cb:6c:e0:e9:04:d6:48:3e:97:2f:1c:
63:f0:0a:22:7f:9b:72:e9:b2:ee:f1:70:ed:9f:ce:
a8:b1:47:7b:7a:28:6b:49:4a:ec:a6:c0:60:45:89:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F7:0F:3F:D6:38:8B:0D:29:25:45:75:DB:C2:D9:C5:B6:61:DA:71
X509v3 Authority Key Identifier:
keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3cbcdbc977beb86d7ffeca5983efd3a614c46a81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.10.0.0-190.10.17.255
190.10.19.0-190.10.23.255
190.10.25.0-190.10.32.255
190.10.34.0/24
190.10.64.0-190.10.66.255
190.10.68.0/22
190.10.76.0/22
190.10.121.0-190.10.123.255
190.171.0.0/24
190.171.3.0-190.171.9.255
190.171.14.0/24
190.171.16.0/22
190.241.80.0/20
200.122.128.0/18
Signature Algorithm: sha256WithRSAEncryption
61:f4:9e:2e:b1:56:fb:3d:f2:21:71:8b:1f:0c:86:8b:b8:ba:
c0:4e:9b:f4:c8:75:aa:7c:df:6d:21:d5:b7:31:0c:e3:03:90:
b3:27:7a:6d:bd:3e:74:77:52:8c:64:52:75:d7:ec:48:8f:0b:
be:db:d3:af:6c:7b:06:51:c2:91:5f:73:8e:58:25:74:2b:df:
b6:fb:32:48:e6:45:9e:cc:c4:18:f9:c7:6b:47:9d:43:e1:84:
4a:74:29:5b:d8:20:4c:7d:71:63:dc:87:f7:dd:84:9b:3d:83:
1b:4e:ce:a5:52:77:84:b9:69:4f:c7:e6:f3:e4:3f:34:ee:92:
59:83:4a:1a:4d:e2:02:7c:94:36:1b:b8:63:a4:db:bb:18:82:
d2:95:66:72:b5:e9:4d:e2:20:04:29:a7:98:f3:5f:60:70:cf:
c1:f3:66:6b:49:e5:20:c8:f7:3b:5e:9f:f6:21:76:bb:69:e0:
7c:95:51:74:d8:bb:35:7e:4d:6d:93:0b:b4:31:a4:5b:43:95:
9f:10:65:b0:9b:4f:f9:0e:c0:57:37:c5:62:1a:03:fe:1e:67:
dd:ce:db:58:8f:7d:0a:a7:4f:0f:7c:3b:66:44:dd:26:9b:53:
b8:6e:8e:dd:81:e0:39:5d:29:90:ac:51:29:f9:ba:12:47:77:
35:99:39:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org