Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/3a3bdf486fd0d01b3cc7f274fecddb3afa65f64d.roa
File: 3a3bdf486fd0d01b3cc7f274fecddb3afa65f64d.roa (raw, json)
Hash identifier: lhxp4HLWarstOaU6oYxg96YaeG6kFiYoN3e7z/ROYRg=
Subject key identifier: 99:5F:F1:F3:ED:96:29:92:42:1B:7E:AB:F5:38:C0:96:56:7D:16:21
Certificate issuer: /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial: 0C0926
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/3a3bdf486fd0d01b3cc7f274fecddb3afa65f64d.roa
Signing time: Wed 24 Mar 2021 14:44:35 +0000
ROA not before: Wed 24 Mar 2021 14:44:33 +0000
ROA not after: Tue 24 Mar 2026 14:44:33 +0000
asID: 8151
IP address blocks: 189.146.0.0/17 maxlen: 24
189.146.128.0/17 maxlen: 24
201.103.0.0/19 maxlen: 24
201.103.32.0/19 maxlen: 24
201.103.64.0/19 maxlen: 24
201.103.96.0/19 maxlen: 24
201.103.128.0/19 maxlen: 24
201.103.160.0/19 maxlen: 24
201.103.192.0/19 maxlen: 24
201.103.224.0/19 maxlen: 24
187.202.0.0/16 maxlen: 24
189.236.0.0/19 maxlen: 24
189.236.32.0/19 maxlen: 24
189.236.64.0/19 maxlen: 24
189.236.96.0/19 maxlen: 24
189.236.128.0/19 maxlen: 24
189.236.160.0/19 maxlen: 24
189.236.192.0/19 maxlen: 24
189.236.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 788774 (0xc0926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Validity
Not Before: Mar 24 14:44:33 2021 GMT
Not After : Mar 24 14:44:33 2026 GMT
Subject: CN=3a3bdf486fd0d01b3cc7f274fecddb3afa65f64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:46:73:8c:41:19:d1:97:e9:91:fd:f1:d8:
5f:2c:ae:84:9a:9f:23:0b:2d:52:82:25:2a:0f:e4:
37:5f:44:17:96:61:b8:36:77:a7:f2:89:82:ee:d4:
85:3b:6f:ef:5f:39:ce:eb:e1:ad:12:48:94:33:25:
1f:1e:5b:18:21:9c:ae:be:d6:e9:05:29:a1:2c:6b:
87:7b:bc:f1:ff:73:c0:4f:07:9b:0e:e7:cf:2e:4c:
1d:a2:a6:d0:c2:26:05:ca:57:70:ee:28:48:21:79:
f8:ea:54:8e:97:e9:db:64:fa:1a:c8:5a:e6:49:0c:
af:40:26:80:d4:b1:8b:31:8e:6e:01:af:29:de:6c:
3a:59:f9:a9:30:cf:2e:2c:a0:90:e2:64:c5:ac:46:
bc:2d:01:be:4d:eb:a7:3d:22:0f:1e:c7:9d:a0:be:
14:32:dc:82:11:c9:b2:0c:90:fc:c5:5a:c6:37:39:
bc:9c:3b:c0:30:2c:63:b9:36:24:e3:ad:fc:24:9e:
a7:45:f0:41:93:d5:b1:18:c9:85:b8:de:28:cc:90:
72:c3:b8:ec:7e:e9:a0:1c:d4:6d:4e:a2:f4:11:95:
7d:06:f4:97:51:46:17:92:d1:a9:5a:b2:3e:55:71:
44:e9:57:5f:b4:22:0b:67:4a:8d:2c:b0:1e:20:f4:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:F1:F3:ED:96:29:92:42:1B:7E:AB:F5:38:C0:96:56:7D:16:21
X509v3 Authority Key Identifier:
keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/3a3bdf486fd0d01b3cc7f274fecddb3afa65f64d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.202.0.0/16
189.146.0.0/16
189.236.0.0/16
201.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:9a:67:e5:48:98:db:2a:7e:87:e4:42:d7:cd:54:21:a8:89:
68:26:bc:3f:3b:4b:06:69:e5:af:82:1a:61:53:10:f4:70:a7:
bf:0b:91:d8:71:6d:bd:92:9c:0a:cc:57:97:16:3c:be:aa:9b:
a5:3d:7d:ef:4d:4e:0b:8a:18:5e:f0:47:b2:ca:b7:9a:e2:04:
18:e6:2e:16:e2:c4:49:c8:03:1d:fe:4c:ef:e8:a7:de:44:bf:
b6:43:49:97:c2:95:c9:de:35:1c:8d:ba:af:82:9e:cb:55:e1:
e0:d3:8f:ae:1c:0c:fa:cf:04:87:2d:96:c0:0a:62:00:38:d1:
08:ab:19:61:4f:6f:6d:f0:5d:b8:22:1e:9d:0f:7f:af:74:43:
bd:12:0d:cc:5f:a3:2c:d2:d1:50:af:ec:99:f2:17:32:3a:a2:
d8:fd:a2:04:7f:72:b7:fc:f0:62:1b:63:d3:b1:ed:5d:37:b8:
88:f6:d6:db:88:59:be:49:7d:04:29:61:84:10:a7:15:33:03:
e3:96:86:8c:4d:08:c5:db:88:f5:f1:d4:09:56:cb:51:1e:a9:
be:95:e7:60:60:74:87:8f:fe:1e:fe:df:d0:9b:1b:ac:f9:7b:
8d:1b:32:a6:d3:0b:1c:39:f4:a4:9f:32:10:df:86:eb:83:b2:
29:7a:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org