Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/4e04fa4d4fc38c7e14f88737c191d9be791c8875.roa
File: 4e04fa4d4fc38c7e14f88737c191d9be791c8875.roa (raw, json)
Hash identifier: 0kp8x2szy41/+2L/dHaKdt6NhM7pY5V6aivoz5q8IGk=
Subject key identifier: F9:00:35:09:84:E0:39:06:A1:10:1E:A8:A7:17:BD:9C:17:C9:F4:79
Certificate issuer: /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial: 10E33D
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/4e04fa4d4fc38c7e14f88737c191d9be791c8875.roa
Signing time: Wed 29 Nov 2023 21:51:18 +0000
ROA not before: Wed 29 Nov 2023 21:51:18 +0000
ROA not after: Sat 29 Nov 2025 21:51:18 +0000
asID: 22927
IP address blocks: 186.141.161.0/24 maxlen: 24
186.141.162.0/24 maxlen: 24
186.141.163.0/24 maxlen: 24
186.141.164.0/24 maxlen: 24
186.141.165.0/24 maxlen: 24
186.141.166.0/24 maxlen: 24
186.141.167.0/24 maxlen: 24
186.141.168.0/24 maxlen: 24
186.143.161.0/24 maxlen: 24
186.143.162.0/24 maxlen: 24
186.143.163.0/24 maxlen: 24
186.143.164.0/24 maxlen: 24
186.143.165.0/24 maxlen: 24
186.143.166.0/24 maxlen: 24
186.141.225.0/24 maxlen: 24
186.141.226.0/24 maxlen: 24
186.141.227.0/24 maxlen: 24
186.141.228.0/24 maxlen: 24
186.141.229.0/24 maxlen: 24
186.141.230.0/24 maxlen: 24
186.141.231.0/24 maxlen: 24
186.141.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106749 (0x10e33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Validity
Not Before: Nov 29 21:51:18 2023 GMT
Not After : Nov 29 21:51:18 2025 GMT
Subject: CN=4e04fa4d4fc38c7e14f88737c191d9be791c8875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:4a:fe:ba:79:e6:7d:a8:d9:49:3e:ed:e4:
d3:51:cc:dc:9c:64:68:38:ae:29:80:60:51:70:de:
55:88:1e:12:8d:c1:22:08:59:64:7e:86:d4:78:aa:
ee:fc:d1:05:38:4e:dc:e5:3e:1d:15:c6:95:14:46:
f1:8a:30:8d:da:71:12:df:b8:b1:a6:c1:17:c9:a2:
25:48:f5:05:5d:ce:85:5e:e3:d7:5e:81:27:91:de:
73:ee:e3:f2:09:65:02:57:ee:f7:3b:cd:f7:f1:29:
ce:09:15:82:e7:45:04:72:61:b6:9e:4e:eb:56:63:
5f:63:34:ef:a1:06:ee:86:4a:9c:31:08:37:ed:95:
22:eb:83:7a:73:99:51:b8:10:ec:c8:f7:9c:67:91:
06:07:b2:be:89:bd:19:19:50:ba:17:57:e9:e8:7c:
9a:51:9a:70:3b:54:97:47:f9:a2:f8:e9:b7:54:e3:
48:39:78:7a:42:c0:a6:3e:51:93:1d:df:70:fb:36:
1c:9c:22:10:08:ee:8e:3d:c6:25:e1:7c:e8:8c:45:
54:99:53:c3:f8:aa:52:5a:b0:0e:49:4d:8c:d7:a0:
80:0d:b9:b2:dc:6f:5b:eb:47:d8:4c:c9:59:93:30:
2e:18:d5:79:cd:31:b6:af:f4:26:34:6b:a3:f3:b1:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:00:35:09:84:E0:39:06:A1:10:1E:A8:A7:17:BD:9C:17:C9:F4:79
X509v3 Authority Key Identifier:
keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/4e04fa4d4fc38c7e14f88737c191d9be791c8875.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.141.161.0-186.141.168.255
186.141.225.0-186.141.232.255
186.143.161.0-186.143.166.255
Signature Algorithm: sha256WithRSAEncryption
55:56:0a:c7:50:0c:e5:28:ec:bd:28:49:35:33:5d:67:00:d8:
6c:45:c5:e4:57:46:aa:9c:fc:c4:70:cd:41:84:79:fd:e6:6a:
dd:5f:d5:6e:2f:a4:64:61:ad:0e:da:9f:02:40:84:80:2d:3b:
2c:47:52:19:94:7c:1f:89:72:16:6f:ae:ac:1e:55:e4:cc:9c:
4c:eb:15:f5:77:68:72:39:f0:fd:da:bb:14:03:71:89:24:69:
af:f9:14:c8:40:52:55:dd:35:bd:ea:07:a9:26:d3:8b:a9:09:
ab:f0:f6:76:40:a9:2c:e8:43:e3:4d:75:db:a9:a4:20:58:9f:
a6:04:bb:11:50:b7:bb:1b:60:3a:72:be:ed:54:9c:08:ae:0f:
b2:e6:88:e3:db:d3:df:d0:45:cd:ab:b9:fc:d7:ea:17:34:85:
e0:8f:c7:f4:b0:ad:79:7b:e7:4d:f6:f2:70:64:4f:dd:1c:7c:
d5:09:4e:1c:55:44:2f:32:b6:bb:05:d5:5d:7f:b7:6d:35:56:
c1:67:45:27:9a:1c:84:dd:79:87:58:d4:f0:64:c4:93:60:71:
e6:fd:f3:d9:eb:06:78:87:be:72:2a:3e:07:cc:36:ce:65:92:
a5:04:47:d1:9e:b8:66:42:e1:69:34:e6:03:d1:4f:44:98:6a:
64:6c:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org