Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/6fd86d6d5c0eaa32f4950e44140a97f85e46f3a9.roa
File: 6fd86d6d5c0eaa32f4950e44140a97f85e46f3a9.roa (raw, json)
Hash identifier: LIRrXj6UkMxyPVfyj1TiLZS3smtHl4yS49tm3X8xhwA=
Subject key identifier: 87:F1:17:EB:5D:54:F7:B6:1A:F3:91:E1:A6:4B:EA:08:BC:F0:98:CE
Certificate issuer: /CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
Certificate serial: 21B6B2
Authority key identifier: AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/6fd86d6d5c0eaa32f4950e44140a97f85e46f3a9.roa
Signing time: Tue 11 Jul 2023 19:06:25 +0000
ROA not before: Mon 10 Jul 2023 19:06:25 +0000
ROA not after: Fri 11 Jul 2025 19:06:25 +0000
asID: 20207
IP address blocks: 190.7.0.0/18 maxlen: 24
190.183.0.0/16 maxlen: 24
143.202.16.0/22 maxlen: 24
170.78.192.0/22 maxlen: 24
200.229.148.0/22 maxlen: 24
138.0.152.0/22 maxlen: 24
190.57.224.0/19 maxlen: 24
2800:6f0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209458 (0x21b6b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
Validity
Not Before: Jul 10 19:06:25 2023 GMT
Not After : Jul 11 19:06:25 2025 GMT
Subject: CN=6fd86d6d5c0eaa32f4950e44140a97f85e46f3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:dd:8c:d3:75:46:50:d4:2d:4a:17:20:e2:
aa:5c:e9:0d:50:0c:ff:42:48:52:ac:9d:df:e0:cd:
71:91:e8:d1:7c:0e:a8:a2:91:ed:d6:4b:bc:ed:40:
14:45:7a:72:98:cc:6f:2e:13:90:2a:f7:78:53:f4:
e9:c4:65:b4:33:19:07:4d:fb:59:2d:ae:6f:ec:6b:
97:91:e9:9d:2f:16:dd:8e:be:72:f1:f6:c5:dc:84:
91:4b:ca:61:a0:12:65:6c:99:c6:e4:1c:68:aa:d9:
65:e2:97:dc:56:b0:e0:36:3a:82:15:7a:ac:ed:c5:
92:82:81:f5:77:97:b5:1e:fd:46:18:5b:be:ec:2a:
e8:c3:64:36:74:c4:89:d2:ba:43:26:db:15:9c:bc:
a5:49:90:6e:14:a2:3c:fd:f0:23:14:7d:82:5f:67:
3e:8d:eb:56:b9:54:0d:72:f8:c2:37:4c:29:d8:19:
d8:a2:bc:b6:83:24:ef:d1:3a:61:b0:54:a7:dd:5c:
1d:e3:18:0b:92:ad:62:1b:34:a9:d3:c6:4e:bc:7b:
26:b5:24:a0:56:83:48:a6:9f:c7:e3:85:32:e4:16:
43:3a:de:e3:bd:84:34:7e:ed:3a:5f:b7:b7:b8:fa:
22:8c:3a:e3:70:6c:3a:b0:07:b8:a2:d3:78:7b:89:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F1:17:EB:5D:54:F7:B6:1A:F3:91:E1:A6:4B:EA:08:BC:F0:98:CE
X509v3 Authority Key Identifier:
keyid:AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/6fd86d6d5c0eaa32f4950e44140a97f85e46f3a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.152.0/22
143.202.16.0/22
170.78.192.0/22
190.7.0.0/18
190.57.224.0/19
190.183.0.0/16
200.229.148.0/22
IPv6:
2800:6f0::/32
Signature Algorithm: sha256WithRSAEncryption
82:65:65:48:52:6b:1a:b2:4d:f7:a5:05:22:31:a7:c7:2c:9e:
49:cb:ff:6e:d2:3c:06:1e:cb:85:1a:35:40:9a:c1:35:ea:46:
91:b6:6c:4c:2b:59:6c:c3:eb:fa:6d:bd:a5:14:20:8b:53:9a:
3e:73:69:fe:9f:2f:4a:ba:52:b7:c5:01:8d:a6:d9:38:79:1a:
74:5f:98:b2:8c:a0:6f:67:1b:23:ba:82:4b:55:65:b1:9a:8f:
9b:16:02:11:67:8a:f8:1f:0b:f6:b4:a5:30:50:7d:5b:6f:8f:
d3:64:06:29:2a:ec:3a:e0:0c:b3:0d:5b:5f:bf:b6:08:64:aa:
c8:73:1a:75:ce:d5:19:e7:17:59:75:26:33:da:5f:4b:79:cf:
7b:9b:4f:38:59:b4:38:b2:2b:78:a1:16:0a:c6:7d:35:7e:0c:
63:d2:2b:25:76:45:c7:79:47:84:4b:10:00:d9:b7:81:ad:de:
e9:0a:4d:a3:9c:6a:9f:ee:f2:31:09:98:70:c5:62:16:bb:c1:
3e:3b:92:ed:42:c7:3c:12:55:8c:23:19:53:64:f9:a6:8f:32:
28:3d:4f:1c:16:ae:3b:98:f0:8b:e3:71:75:f9:b2:69:92:30:
7b:e3:75:8d:5f:e7:50:c0:68:42:8a:f9:d4:c9:35:35:7a:b4:
de:80:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org