Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7f112c7d-862c-4867-ba49-772b4d6018ab/d15c72bdf441d324c4859216d8ce3df5e5223cc8.roa
File: d15c72bdf441d324c4859216d8ce3df5e5223cc8.roa (raw, json)
Hash identifier: KeL/yitU/BUx8p80hK530unAPcoHrE0EaLRIcfvjWZw=
Subject key identifier: 7D:9F:20:1B:90:C9:0A:F5:FE:D9:3F:B1:69:0F:B3:34:91:37:C8:83
Certificate issuer: /CN=ae12d182092cdf9310f84c5937df4c7b73df4145
Certificate serial: 0CF52C
Authority key identifier: B4:63:15:8F:59:B6:3A:2D:3E:11:99:EF:4C:95:1B:1C:0C:99:36:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae12d182092cdf9310f84c5937df4c7b73df4145.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7f112c7d-862c-4867-ba49-772b4d6018ab/d15c72bdf441d324c4859216d8ce3df5e5223cc8.roa
Signing time: Wed 24 Mar 2021 14:48:11 +0000
ROA not before: Wed 24 Mar 2021 14:48:10 +0000
ROA not after: Tue 24 Mar 2026 14:48:10 +0000
asID: 27889
IP address blocks: 181.17.0.0/16 maxlen: 20
181.18.0.0/15 maxlen: 20
181.34.0.0/15 maxlen: 20
186.26.0.0/18 maxlen: 20
186.26.128.0/17 maxlen: 20
200.107.192.0/21 maxlen: 21
201.238.0.0/19 maxlen: 20
201.238.32.0/19 maxlen: 20
2800:500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 849196 (0xcf52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae12d182092cdf9310f84c5937df4c7b73df4145
Validity
Not Before: Mar 24 14:48:10 2021 GMT
Not After : Mar 24 14:48:10 2026 GMT
Subject: CN=d15c72bdf441d324c4859216d8ce3df5e5223cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:db:93:6f:d8:e1:27:10:5f:c9:a6:95:b8:
8d:c0:df:35:db:96:5b:f3:05:b3:b4:ee:c7:db:0d:
10:d2:b8:1b:18:c7:60:68:cb:ca:14:16:23:09:d2:
0a:d5:7e:58:31:21:b5:f0:70:09:18:0f:b2:ca:89:
8d:8c:e4:ef:c3:bc:1b:f5:66:e3:72:25:48:b5:aa:
f2:cb:31:63:ea:91:20:8b:4f:96:ce:03:d3:7a:8e:
50:7f:ed:83:e6:d8:01:90:5f:cb:aa:b5:e2:11:ba:
f5:ed:0f:ee:dd:09:14:db:5d:2f:34:6b:67:95:e1:
4f:46:65:58:94:bb:93:2c:31:d5:d0:1e:f6:79:10:
a8:3f:c0:d3:d1:46:f5:a6:3b:72:8e:69:8d:ad:29:
91:45:5b:6f:1f:c8:17:23:2f:d0:c5:4a:de:d8:b3:
e5:da:ad:73:56:da:1e:99:82:b7:24:fc:b4:12:a1:
54:f4:5b:4c:ce:75:d3:62:68:48:54:8b:86:47:3c:
15:b8:ac:c3:0a:ad:18:0a:f3:dc:d8:33:fb:df:72:
69:d3:c3:39:d1:0f:ba:7e:b4:68:f0:bd:7a:d8:aa:
f9:ac:70:3b:13:79:97:12:77:1d:24:1c:78:f1:61:
5e:1c:0e:45:f6:ca:46:ca:75:c1:f8:63:3a:6e:36:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9F:20:1B:90:C9:0A:F5:FE:D9:3F:B1:69:0F:B3:34:91:37:C8:83
X509v3 Authority Key Identifier:
keyid:B4:63:15:8F:59:B6:3A:2D:3E:11:99:EF:4C:95:1B:1C:0C:99:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae12d182092cdf9310f84c5937df4c7b73df4145.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7f112c7d-862c-4867-ba49-772b4d6018ab/d15c72bdf441d324c4859216d8ce3df5e5223cc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7f112c7d-862c-4867-ba49-772b4d6018ab/ae12d182092cdf9310f84c5937df4c7b73df4145.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.17.0.0-181.19.255.255
181.34.0.0/15
186.26.0.0/18
186.26.128.0/17
200.107.192.0/21
201.238.0.0/18
IPv6:
2800:500::/32
Signature Algorithm: sha256WithRSAEncryption
7b:9a:b8:25:db:e2:e7:1e:68:8c:1e:a3:bd:09:70:86:3f:b5:
4d:7e:0c:d0:e0:7a:38:16:d7:52:76:38:6f:78:ee:7c:dd:9c:
3a:0c:b7:99:ec:da:38:c3:dd:82:cc:16:08:0c:b0:00:a1:d9:
9a:f8:a5:86:9f:e4:62:22:56:19:f8:a6:b2:e5:2e:fd:27:0f:
80:d5:fa:0f:a1:cb:fd:05:4c:b6:44:87:c5:0f:d6:7e:f8:88:
2d:55:5e:d0:07:14:b2:94:ba:b3:22:c3:d0:c1:fe:ae:38:96:
e4:ac:54:df:68:44:f1:5e:e7:f1:1d:8e:0d:90:01:53:cb:a6:
32:8e:6f:70:66:fc:66:18:e2:98:d0:9b:91:d8:70:22:5c:e8:
8f:e4:94:ad:9b:2f:d1:7d:b6:69:ea:1b:7b:58:17:ad:f0:1b:
80:d1:46:58:ee:6a:26:1b:c0:64:26:b4:35:4a:12:2e:8b:76:
a6:31:57:78:e0:89:f7:db:c2:f9:fc:37:4e:2d:15:5d:1a:f3:
53:fb:3e:9e:b9:94:f6:6b:f0:7c:bf:a8:6c:d2:00:b1:63:31:
31:06:57:a5:4d:9b:54:ae:54:d9:d7:8d:c3:59:0b:39:db:6b:
90:87:3b:43:cf:ef:5e:33:ff:7d:9d:ec:53:0e:d9:9a:f6:80:
4a:f4:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org