Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/9c216a8b2346491751754aad9280a2cd7ff7baf4.roa
File: 9c216a8b2346491751754aad9280a2cd7ff7baf4.roa (raw, json)
Hash identifier: zbaX3Pa2Kobqw14GBoEN9RCdkiN3+WymxHxptJUVvYs=
Subject key identifier: 4E:09:74:8E:CE:30:AD:C6:34:22:16:0B:B7:E3:51:EF:2C:A0:87:0B
Certificate issuer: /CN=bef02a6151d23f223914a8f6eed9802b4dfd2a0b
Certificate serial: 1F6F1A
Authority key identifier: 9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/9c216a8b2346491751754aad9280a2cd7ff7baf4.roa
Signing time: Fri 24 Mar 2023 08:31:45 +0000
ROA not before: Thu 23 Mar 2023 08:31:45 +0000
ROA not after: Sat 22 Mar 2025 08:31:45 +0000
asID: 52253
IP address blocks: 190.108.198.0/24 maxlen: 24
190.108.199.0/24 maxlen: 24
190.108.201.0/24 maxlen: 24
190.108.202.0/23 maxlen: 24
190.108.202.0/24 maxlen: 24
190.108.203.0/24 maxlen: 24
190.108.204.0/24 maxlen: 24
190.108.205.0/24 maxlen: 24
190.108.206.0/24 maxlen: 24
190.108.207.0/24 maxlen: 24
190.108.208.0/24 maxlen: 24
190.108.209.0/24 maxlen: 24
190.108.210.0/24 maxlen: 24
190.108.211.0/24 maxlen: 24
190.108.212.0/24 maxlen: 24
190.108.213.0/24 maxlen: 24
190.108.214.0/24 maxlen: 24
190.108.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060058 (0x1f6f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef02a6151d23f223914a8f6eed9802b4dfd2a0b
Validity
Not Before: Mar 23 08:31:45 2023 GMT
Not After : Mar 22 08:31:45 2025 GMT
Subject: CN=9c216a8b2346491751754aad9280a2cd7ff7baf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:51:af:01:ac:0d:93:9a:4a:16:d8:de:30:
38:28:05:be:dc:5f:e1:12:9f:79:3f:9a:10:ce:31:
8f:3e:2e:6e:e5:05:91:59:d1:7a:b9:3a:68:4b:e4:
5a:f8:c6:61:19:33:1f:21:ef:90:5a:9d:09:16:91:
1a:a6:6b:63:d6:b0:fe:6b:2a:e0:67:95:3f:f5:5d:
43:b0:71:72:93:bc:3c:87:98:ce:e7:ea:b3:d8:00:
e1:ae:19:f5:d9:47:a5:43:a8:a5:98:1f:30:f2:dc:
92:45:dc:79:2b:59:ce:fb:ed:b1:f0:89:82:da:5a:
ff:95:ad:1a:d1:bc:f3:4d:37:8f:c2:cc:13:cf:1c:
20:1a:b8:b9:d4:e1:39:f8:20:f0:82:a1:53:ba:d1:
78:bc:d0:7f:32:4e:f3:b5:a5:45:a9:81:59:57:0d:
fd:8e:d2:90:a0:c4:f5:bc:ed:be:47:4f:c3:43:7c:
92:0a:cb:b5:ff:ac:77:4f:0c:d5:cd:bb:80:d4:f3:
dd:8e:e6:da:30:83:02:ec:25:77:2c:f7:b0:fb:09:
4e:c7:88:bc:14:2b:ff:10:e1:d9:89:2b:6b:b3:78:
b1:a5:d0:72:16:4e:bb:6d:53:f5:7f:08:db:72:9a:
7b:ec:6f:01:62:10:9d:82:a4:3a:a1:e9:7d:8b:ed:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:09:74:8E:CE:30:AD:C6:34:22:16:0B:B7:E3:51:EF:2C:A0:87:0B
X509v3 Authority Key Identifier:
keyid:9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/9c216a8b2346491751754aad9280a2cd7ff7baf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.198.0/23
190.108.201.0-190.108.215.255
Signature Algorithm: sha256WithRSAEncryption
66:cb:15:bd:05:38:f7:b2:d3:2c:eb:1d:81:51:32:c7:98:37:
a9:c2:8a:0c:39:de:b3:d0:0b:32:1a:42:bf:35:e4:9b:44:28:
4a:a4:41:06:8b:f0:3a:f7:58:a3:3c:0e:dc:52:81:a8:76:ce:
9c:a7:30:bf:db:25:76:7c:13:2c:f1:85:7a:9c:34:54:37:47:
ae:df:70:52:1a:3c:ed:91:7d:d7:88:85:1a:70:fb:ff:56:24:
76:21:23:20:2c:a6:fc:e9:4d:09:ec:49:85:77:00:36:5b:a6:
77:72:d5:35:8c:5b:92:3b:ee:90:9a:0c:f6:96:2c:32:7a:dc:
3b:e5:70:69:8f:77:c1:0b:01:ff:ff:23:12:9f:c3:73:9c:06:
b0:d9:f0:fa:b2:68:8d:8a:83:94:09:b3:91:37:5b:16:66:12:
4a:d5:d6:a5:35:73:08:cf:14:fd:09:3e:10:60:26:78:ae:24:
24:1c:2f:1b:37:ac:ba:8d:c2:4e:f7:2b:d1:0c:73:b5:3e:e1:
c9:49:8a:fd:19:e9:a5:0f:ff:b7:c4:57:68:37:64:68:f1:a8:
e0:2e:84:a1:45:45:0e:21:ed:02:1c:1c:31:9f:69:3b:d9:bf:
6a:90:73:5e:f3:66:a6:ce:04:76:f9:db:73:c3:6b:3f:4f:1e:
25:18:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org