Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/d1bb2732a56993b65216580c0f788f0ba819610a.roa
File: d1bb2732a56993b65216580c0f788f0ba819610a.roa (raw, json)
Hash identifier: u0htPJuoWSMdbC8FskTVuQzRaDY5MEnNJNHc1ZHA0dc=
Subject key identifier: 45:D9:E6:20:64:A2:F8:E2:E7:BF:E9:14:2B:CB:EE:AB:59:F4:11:DC
Certificate issuer: /CN=0188a1fa54e685e6dab16384784db802887cbc4f
Certificate serial: 23B2A7
Authority key identifier: 8F:89:29:75:DA:D6:CC:A7:A6:48:69:18:80:6E:38:6B:88:24:B0:1F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0188a1fa54e685e6dab16384784db802887cbc4f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/d1bb2732a56993b65216580c0f788f0ba819610a.roa
Signing time: Thu 07 Sep 2023 18:57:58 +0000
ROA not before: Wed 06 Sep 2023 18:57:58 +0000
ROA not after: Sun 07 Sep 2025 18:57:58 +0000
asID: 10299
IP address blocks: 170.81.24.0/22 maxlen: 24
138.122.200.0/22 maxlen: 24
200.29.96.0/19 maxlen: 24
131.108.168.0/22 maxlen: 24
168.227.0.0/22 maxlen: 24
190.1.192.0/18 maxlen: 24
186.27.128.0/17 maxlen: 24
190.99.128.0/17 maxlen: 24
2800:950::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2339495 (0x23b2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0188a1fa54e685e6dab16384784db802887cbc4f
Validity
Not Before: Sep 6 18:57:58 2023 GMT
Not After : Sep 7 18:57:58 2025 GMT
Subject: CN=d1bb2732a56993b65216580c0f788f0ba819610a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:f1:0f:37:54:79:a7:c8:60:fc:ca:b1:27:
dd:d5:53:c2:fa:88:dc:d6:cd:14:ce:92:40:25:b5:
69:fd:3a:a0:34:ac:e4:09:f4:b5:a6:f2:cd:5e:9c:
91:c9:38:ec:c7:d7:d6:59:44:3c:c9:f9:43:55:55:
7d:f2:2f:3f:90:65:61:b4:1e:a8:b6:1a:91:29:52:
eb:37:c6:b3:0c:53:3a:6b:ee:e4:58:85:35:f8:32:
a3:fd:fa:41:ab:b7:ca:1a:2c:27:74:95:75:f3:77:
82:4c:da:9c:68:f4:9c:98:13:ea:05:76:e6:7c:53:
63:4e:7d:b6:c7:c2:60:51:aa:71:b1:cb:0a:ad:4a:
ad:d4:ec:57:8b:f6:f3:93:10:49:8c:fd:7b:de:1b:
ff:35:f6:d2:7d:6b:53:ce:bf:eb:f4:2e:b4:5d:58:
53:95:a2:ab:ee:34:c8:e5:45:83:f1:e1:ff:37:6e:
62:df:60:93:56:c8:98:dc:88:b9:e0:2e:f9:56:20:
ed:ad:c6:41:66:52:81:6d:e7:02:c3:0e:c7:61:97:
12:c1:a0:0f:c8:e5:f9:f3:2a:d6:3b:f3:c4:bc:f0:
72:cb:72:ad:51:fd:7e:98:97:01:dc:5b:f1:58:3a:
50:7e:be:65:1b:4b:13:ef:8b:d2:5f:50:1e:4e:03:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D9:E6:20:64:A2:F8:E2:E7:BF:E9:14:2B:CB:EE:AB:59:F4:11:DC
X509v3 Authority Key Identifier:
keyid:8F:89:29:75:DA:D6:CC:A7:A6:48:69:18:80:6E:38:6B:88:24:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0188a1fa54e685e6dab16384784db802887cbc4f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/d1bb2732a56993b65216580c0f788f0ba819610a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/0188a1fa54e685e6dab16384784db802887cbc4f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.168.0/22
138.122.200.0/22
168.227.0.0/22
170.81.24.0/22
186.27.128.0/17
190.1.192.0/18
190.99.128.0/17
200.29.96.0/19
IPv6:
2800:950::/32
Signature Algorithm: sha256WithRSAEncryption
11:93:57:ab:16:68:2f:84:83:8b:d1:83:2e:69:55:84:29:dc:
0a:a0:bb:93:89:67:91:b8:5f:e1:bc:35:c1:da:fd:74:e6:69:
0e:8a:23:af:79:b5:85:26:3a:36:d7:1b:e9:85:9d:f7:58:4b:
3f:f1:a3:00:40:ef:ab:bf:c0:a6:49:b2:16:40:dd:c4:7b:d3:
0e:da:0b:33:df:a0:fa:fd:e2:70:38:c3:84:00:2e:21:39:92:
28:79:95:22:71:d9:80:50:a1:aa:51:68:a0:a7:50:f8:51:a2:
b0:75:03:bf:7b:82:65:dd:4c:9a:0a:a8:74:b5:f5:4e:63:da:
06:cc:b6:83:44:0e:0f:03:01:35:d6:8e:be:a0:a8:51:48:62:
06:52:45:75:ff:aa:ea:28:e5:27:42:d5:49:43:04:fa:5b:b3:
83:61:5e:7c:eb:b6:2a:c0:ea:2a:27:0b:4b:3d:42:42:0a:3c:
1d:79:35:0c:21:3f:ec:4c:94:9d:ed:99:ae:1d:c0:ab:77:c2:
ef:67:3f:40:c7:9e:e8:57:98:29:77:dd:f6:b1:a7:81:ae:e0:
27:f1:19:69:dc:6d:d1:0f:9b:13:f9:1c:46:ec:4b:63:9a:2c:
35:5a:e7:ff:a5:77:d4:ab:09:04:13:06:48:d5:9f:13:61:c7:
15:f0:57:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org