Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/ceab08b50dcc7de86b641cddde183e673db3d469.roa
File: ceab08b50dcc7de86b641cddde183e673db3d469.roa (raw, json)
Hash identifier: Nf3fHjNm2Z54Oo8JuztbPjX2YDpsulshDJE3ODLNMkU=
Subject key identifier: C5:8E:00:AE:57:6B:DF:6F:73:B2:0D:47:B2:BE:38:42:BF:2E:30:43
Certificate issuer: /CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
Certificate serial: 1881B2
Authority key identifier: AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/ceab08b50dcc7de86b641cddde183e673db3d469.roa
Signing time: Wed 15 Jun 2022 15:17:34 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 20207
IP address blocks: 138.0.152.0/22 maxlen: 22
138.0.152.0/24 maxlen: 24
138.0.153.0/24 maxlen: 24
138.0.154.0/24 maxlen: 24
138.0.155.0/24 maxlen: 24
143.202.16.0/22 maxlen: 24
170.78.192.0/22 maxlen: 24
190.7.0.0/18 maxlen: 24
190.57.224.0/19 maxlen: 24
190.183.0.0/16 maxlen: 24
200.229.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1606066 (0x1881b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=ceab08b50dcc7de86b641cddde183e673db3d469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:87:d6:0e:98:d8:52:d1:64:d3:6e:db:65:4f:
0c:af:f1:18:eb:f3:38:b8:5b:9b:41:20:30:73:70:
76:55:0c:25:b2:1b:27:7f:fc:5e:3d:fc:ab:50:27:
54:78:5b:d7:8d:bc:74:cc:87:df:e6:6a:a3:75:d6:
5b:f3:54:8c:25:49:35:06:f0:fa:4a:f2:00:54:9d:
c9:e3:22:58:11:df:b4:a1:d7:09:bd:ac:00:f5:8a:
cd:2c:2b:f5:cd:46:72:72:db:73:b6:93:8f:ac:4a:
7c:55:50:2f:ea:e1:e2:67:6e:ca:fb:2f:66:5f:55:
3a:b3:a3:60:65:3a:47:26:fd:eb:35:6c:56:86:b8:
73:c7:a0:87:0c:39:67:52:d2:0f:1f:6d:af:9f:ff:
5b:be:0a:f1:54:23:79:9e:f9:d8:1d:18:70:1a:4c:
62:27:74:fe:51:e6:a3:6d:1a:1f:05:05:9b:a1:8c:
ef:79:3f:09:a4:77:37:d4:01:0f:b7:bb:7e:9a:a1:
95:ed:06:52:ee:ea:7d:a8:1e:78:ba:eb:cd:2b:5c:
be:df:fb:40:bc:0d:03:f4:1e:f1:30:78:fa:f8:0b:
e7:5b:2a:01:9f:7f:22:38:4f:b0:42:dd:f4:ed:bf:
b4:07:87:73:8a:bb:55:22:b8:e9:ae:c8:ad:b5:76:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8E:00:AE:57:6B:DF:6F:73:B2:0D:47:B2:BE:38:42:BF:2E:30:43
X509v3 Authority Key Identifier:
keyid:AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/ceab08b50dcc7de86b641cddde183e673db3d469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.152.0/22
143.202.16.0/22
170.78.192.0/22
190.7.0.0/18
190.57.224.0/19
190.183.0.0/16
200.229.148.0/22
Signature Algorithm: sha256WithRSAEncryption
98:3b:6f:f6:3d:10:6e:35:bb:9c:3c:dd:f3:04:41:b9:03:a7:
bd:81:6a:6b:e5:b6:5a:a1:9d:16:f0:24:ee:66:8b:a6:9e:32:
66:56:6d:3e:21:e6:7d:2f:39:54:76:bd:cb:3d:d7:87:80:8b:
d6:2d:5a:74:a4:54:e0:f3:09:b7:0d:b3:ae:aa:c1:c6:7c:b9:
0d:81:0f:c0:99:e9:14:c6:69:13:04:91:02:04:e9:c5:c7:b7:
1f:e4:82:d7:f2:be:47:52:bc:88:eb:6e:7e:83:b6:46:3c:4a:
8f:bd:02:49:ef:c1:7d:99:be:bf:75:7d:dc:bd:00:14:e3:1a:
9c:bf:f7:9e:fb:35:37:a1:98:ec:36:30:d5:02:79:da:1a:ec:
19:89:00:34:89:69:76:5b:74:f9:d1:5d:3b:6f:35:8b:77:91:
8a:56:92:f8:0c:dd:6f:ae:75:42:c9:db:83:b8:17:b1:15:ba:
f0:9e:72:dc:4f:e0:8a:15:f3:bd:84:61:3f:c2:b1:1d:54:34:
c9:88:7e:2b:05:00:b6:21:82:fe:cd:d4:1a:56:28:94:e3:b9:
b0:b4:e8:8b:41:9a:89:9e:0a:5d:02:f1:8c:e8:47:2a:98:8c:
8c:27:c2:9b:65:d8:72:9a:89:0c:37:7a:01:b3:49:00:51:c7:
cb:a8:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org