Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/10a0c46c188f239031a7a12b6c4455e0c0757950.roa
File: 10a0c46c188f239031a7a12b6c4455e0c0757950.roa (raw, json)
Hash identifier: Ac5w7/uRu0Z+gHEBMmjG/rafQ1mL26CmguBu68rXfDs=
Subject key identifier: 2E:B9:42:8B:57:1E:BC:B6:74:AA:0B:2D:F4:B1:8E:05:41:13:15:F8
Certificate issuer: /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial: 27627B
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/10a0c46c188f239031a7a12b6c4455e0c0757950.roa
Signing time: Tue 30 Jan 2024 04:43:53 +0000
ROA not before: Tue 30 Jan 2024 04:43:53 +0000
ROA not after: Fri 30 Jan 2026 04:43:53 +0000
asID: 6535
IP address blocks: 190.208.64.0/18 maxlen: 22
190.54.64.0/19 maxlen: 19
186.34.0.0/15 maxlen: 22
190.54.188.0/22 maxlen: 22
190.54.192.0/18 maxlen: 22
190.54.0.0/24 maxlen: 24
190.54.2.0/24 maxlen: 24
190.209.0.0/16 maxlen: 22
186.36.0.0/16 maxlen: 22
190.54.142.0/23 maxlen: 23
190.54.144.0/20 maxlen: 23
190.54.160.0/20 maxlen: 23
190.54.181.0/24 maxlen: 24
190.54.184.0/23 maxlen: 24
190.54.186.0/24 maxlen: 24
190.208.128.0/17 maxlen: 22
181.72.0.0/14 maxlen: 22
190.54.125.0/24 maxlen: 24
190.54.127.0/24 maxlen: 24
190.54.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2581115 (0x27627b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Validity
Not Before: Jan 30 04:43:53 2024 GMT
Not After : Jan 30 04:43:53 2026 GMT
Subject: CN=10a0c46c188f239031a7a12b6c4455e0c0757950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:05:87:7b:35:d1:1c:29:c8:ba:88:0b:a7:
9a:02:d3:13:d4:f0:93:6d:13:82:ac:44:1e:aa:47:
9f:c7:1a:81:5d:90:bb:f1:3b:f2:86:5b:74:dc:d5:
7a:a3:f8:2d:7c:36:1d:e0:8b:bb:79:28:88:f9:7c:
46:6d:d1:2d:9c:70:77:bc:a2:e5:75:13:15:29:07:
a8:dc:bb:48:36:9b:f5:0f:0f:e5:9b:2f:86:02:3f:
eb:a4:ab:7c:a7:28:5c:0c:f1:40:7e:87:5f:82:51:
7a:ee:9b:74:ce:aa:d7:a9:40:a0:cc:25:8f:2b:5b:
4f:bf:da:53:7f:c5:35:de:c2:e3:d2:58:6f:66:bd:
28:59:fd:98:13:2c:06:b3:7b:4e:8f:2d:fb:6f:98:
69:3a:2b:b4:af:81:f4:48:f5:48:bd:0e:a6:26:d7:
ee:a9:5f:0e:0b:e4:ab:4e:77:59:e5:ec:eb:fc:fb:
3a:17:26:e2:8b:5a:38:b8:27:fe:09:eb:47:db:24:
d8:1d:e7:ad:12:13:4e:19:10:9a:01:6b:bd:91:8c:
63:28:89:34:de:9a:ec:11:fa:4c:62:26:ec:dd:56:
06:1c:ca:52:4f:8c:3c:11:c6:d0:fb:03:67:a9:31:
05:ac:79:78:04:4d:f9:71:db:e9:f5:fa:9b:cb:ee:
ca:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:42:8B:57:1E:BC:B6:74:AA:0B:2D:F4:B1:8E:05:41:13:15:F8
X509v3 Authority Key Identifier:
keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/10a0c46c188f239031a7a12b6c4455e0c0757950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.72.0.0/14
186.34.0.0-186.36.255.255
190.54.0.0/24
190.54.2.0/24
190.54.64.0/19
190.54.125.0/24
190.54.127.0-190.54.135.255
190.54.142.0-190.54.175.255
190.54.181.0/24
190.54.184.0-190.54.186.255
190.54.188.0-190.54.255.255
190.208.64.0-190.209.255.255
Signature Algorithm: sha256WithRSAEncryption
15:35:78:7d:23:cd:f1:8c:1b:d8:bd:c5:ab:44:a2:3d:7c:76:
ad:0d:a8:f0:ce:06:89:da:b1:49:df:86:18:9b:1b:cb:d5:5a:
0d:12:a9:f9:cc:e9:0f:4b:6c:d0:b3:68:fe:73:28:09:1d:88:
18:ca:6c:a2:15:5e:22:84:18:2b:71:df:f6:1f:e1:4e:dc:cf:
30:9b:f0:dc:af:59:05:4f:ee:91:5a:33:70:9c:b0:fc:87:59:
17:2c:27:7e:30:24:e2:6c:10:af:fd:53:d8:16:f5:c8:4d:8b:
5d:9e:17:a1:86:50:cb:3e:b1:59:3b:7f:72:37:18:5c:6d:f3:
53:af:15:32:e7:64:e0:10:6d:85:fb:25:6c:3b:8b:96:8e:c7:
1a:11:05:a3:2a:ec:5e:23:86:a1:e8:3f:be:e3:7e:50:f8:1a:
e8:0d:32:15:58:d3:79:34:a0:14:9c:1a:db:f1:1e:e4:ec:b4:
1d:63:77:f5:fb:1e:00:23:a0:07:67:17:80:0b:16:41:4a:30:
05:01:5b:ee:c1:09:11:c7:4b:bb:96:95:e5:63:cf:bb:44:81:
f3:66:74:0c:3b:8c:4a:9e:e8:1a:c3:e9:c2:3f:03:d4:84:8f:
6f:ba:52:28:79:33:18:65:d8:5d:50:ef:b5:cc:ce:14:35:1f:
54:6d:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org