Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/5b48ca18111c874ea38dce8f4679ce99570212a6.roa
File: 5b48ca18111c874ea38dce8f4679ce99570212a6.roa (raw, json)
Hash identifier: N/mqpv/A4RuqSiQMj4qdTSOU5J+ltHCl5q1ilMgT5lY=
Subject key identifier: 5B:32:A7:FA:04:E3:0C:7D:56:C6:8E:58:FC:7C:E9:93:4C:9D:82:C1
Certificate issuer: /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial: 1E1B3C
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/5b48ca18111c874ea38dce8f4679ce99570212a6.roa
Signing time: Fri 24 Mar 2023 08:30:32 +0000
ROA not before: Thu 23 Mar 2023 08:30:32 +0000
ROA not after: Sat 22 Mar 2025 08:30:32 +0000
asID: 8151
IP address blocks: 187.170.128.0/19 maxlen: 24
187.170.160.0/19 maxlen: 24
187.170.192.0/19 maxlen: 24
187.170.224.0/19 maxlen: 24
187.170.32.0/19 maxlen: 24
187.170.64.0/19 maxlen: 24
187.170.96.0/19 maxlen: 24
189.164.64.0/18 maxlen: 24
189.167.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973052 (0x1e1b3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Validity
Not Before: Mar 23 08:30:32 2023 GMT
Not After : Mar 22 08:30:32 2025 GMT
Subject: CN=5b48ca18111c874ea38dce8f4679ce99570212a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:c4:86:92:51:90:39:23:7d:59:54:de:8a:
35:4b:c7:39:97:cc:8e:5f:dd:00:51:e0:8d:9f:22:
2f:0f:94:06:ee:6d:aa:61:b1:9d:36:38:3f:ac:7e:
23:a4:a5:d7:3f:3e:6e:20:6b:49:fb:f6:9b:6b:90:
a5:8f:07:af:ad:92:e7:21:12:53:16:32:5c:26:dc:
6e:5b:8e:03:6d:8e:ff:e4:12:68:1b:0b:16:eb:48:
45:aa:28:3a:9d:27:2b:7c:49:46:e5:6f:d7:9a:0c:
24:38:76:bb:75:c8:af:58:67:a0:db:86:1c:b6:4c:
30:68:59:5b:0c:5b:0f:41:40:5a:89:4f:c2:6f:72:
d7:36:46:4c:e9:c0:b5:d6:13:96:c4:46:6e:99:64:
59:55:df:db:f8:e0:6f:63:6f:db:46:c1:19:34:42:
3d:74:ad:7a:db:5f:f3:3d:2f:cd:65:b2:d9:fb:11:
cc:0e:eb:31:7b:ff:37:dc:c8:f8:67:7d:ba:d6:9f:
c6:ed:3d:4a:6c:99:67:b0:b1:e9:a5:e6:cd:95:0b:
f3:65:33:d1:06:da:04:12:c9:9b:00:f4:e6:56:9a:
b9:44:c8:db:b5:46:5c:c7:b7:65:4e:43:ca:ea:ff:
35:b8:ee:8d:47:2a:1d:8a:bc:db:92:bc:d1:d1:d3:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:32:A7:FA:04:E3:0C:7D:56:C6:8E:58:FC:7C:E9:93:4C:9D:82:C1
X509v3 Authority Key Identifier:
keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/5b48ca18111c874ea38dce8f4679ce99570212a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.170.32.0-187.170.255.255
189.164.64.0/18
189.167.192.0/19
Signature Algorithm: sha256WithRSAEncryption
dc:8e:e8:9d:c4:6d:4e:86:3f:39:9d:e6:25:17:05:4e:41:ff:
82:07:08:0d:bc:64:64:7b:5a:14:f9:79:e3:dd:f5:79:df:95:
75:81:28:dc:0e:16:72:51:3f:c4:9a:19:17:46:f6:a4:2f:e5:
a8:de:46:0c:0d:c3:48:71:4a:67:7c:03:c5:68:03:c7:2c:85:
c0:3c:ae:9a:3e:29:97:fd:db:5b:b3:bb:ce:d4:6e:c9:f2:06:
73:19:2b:1d:34:a4:16:a7:0f:d6:7c:9f:17:1a:15:ad:e9:76:
1e:b5:01:79:c0:69:c6:7a:fd:80:a8:4f:41:e4:43:9f:de:20:
8d:c0:53:15:39:4f:87:20:ec:9e:80:f8:fc:0d:65:68:d3:2f:
ff:f1:1e:ec:e8:91:7f:d6:ee:9a:5c:94:f1:af:d8:c2:cc:29:
fd:46:61:c7:12:5a:b0:59:91:8e:d8:92:89:c9:5b:cd:cb:86:
29:5c:17:14:23:41:b2:6e:3c:a1:70:31:56:ec:2d:6a:55:68:
fb:d9:ae:ff:c6:60:89:a2:c6:16:7b:50:45:e7:ad:64:5f:f5:
71:c9:db:7a:14:a4:ca:27:5c:93:cc:bc:95:72:72:45:97:fc:
0a:e1:0c:fe:d6:b0:09:84:63:60:72:5a:5a:70:1d:ae:de:2b:
6a:57:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org