Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/fe6c8424d02f95e14ae042b6373e28a4e80fba1d.roa
File: fe6c8424d02f95e14ae042b6373e28a4e80fba1d.roa (raw, json)
Hash identifier: MGBmAAafAfjGo+7b/j2MdMhUWfuG9DS4gdlf3PNCwqc=
Subject key identifier: 3C:16:25:E0:D3:C1:41:81:84:3F:5B:E1:2C:9A:59:E1:3A:66:CF:60
Certificate issuer: /CN=0188a1fa54e685e6dab16384784db802887cbc4f
Certificate serial: 0D6702
Authority key identifier: 8F:89:29:75:DA:D6:CC:A7:A6:48:69:18:80:6E:38:6B:88:24:B0:1F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0188a1fa54e685e6dab16384784db802887cbc4f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/fe6c8424d02f95e14ae042b6373e28a4e80fba1d.roa
Signing time: Wed 24 Mar 2021 14:35:08 +0000
ROA not before: Wed 24 Mar 2021 14:35:08 +0000
ROA not after: Tue 24 Mar 2026 14:35:08 +0000
asID: 10299
IP address blocks: 131.108.168.0/22 maxlen: 24
138.122.200.0/22 maxlen: 24
168.227.0.0/22 maxlen: 24
170.81.24.0/22 maxlen: 24
186.27.128.0/17 maxlen: 24
190.1.192.0/18 maxlen: 24
190.99.128.0/17 maxlen: 24
200.29.96.0/19 maxlen: 24
2800:950::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878338 (0xd6702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0188a1fa54e685e6dab16384784db802887cbc4f
Validity
Not Before: Mar 24 14:35:08 2021 GMT
Not After : Mar 24 14:35:08 2026 GMT
Subject: CN=fe6c8424d02f95e14ae042b6373e28a4e80fba1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b0:73:23:cb:d0:ad:63:e2:b3:58:a2:f9:19:
0b:24:49:52:b1:c4:51:a0:69:d3:87:0f:26:60:fc:
3c:57:fc:c2:d9:c8:00:6b:53:43:9e:20:c4:5b:9d:
f6:e2:57:6a:3d:cb:28:39:e4:95:3b:c2:09:cd:b0:
1d:fb:01:de:dc:10:65:a2:97:ae:d0:94:fa:e5:cc:
dd:77:16:a4:8d:df:7a:91:9e:fa:62:00:0c:a4:ef:
63:20:ef:2b:ba:6d:6e:4b:95:d9:12:34:6b:a2:25:
11:e1:25:21:20:71:94:88:22:b4:b6:72:1e:9a:b3:
75:4c:62:d0:ee:3b:ce:13:cf:a3:a4:0b:44:19:b0:
cb:b8:96:6d:53:07:02:17:6a:c3:f8:4b:7f:d5:f6:
70:8a:b7:0e:36:d5:71:cf:22:f4:34:7d:93:50:8f:
d1:b1:2a:90:31:fa:6e:4c:58:31:47:ce:5f:db:88:
2f:7c:a5:f0:b3:80:f8:65:33:19:23:f2:9d:60:37:
77:0b:56:8a:8e:28:d2:12:cf:7d:0f:67:0e:11:7a:
58:fc:ff:52:2b:f8:03:95:39:89:3b:81:fd:08:3f:
be:96:5d:cd:7d:c4:5b:4b:03:81:b5:7a:ab:84:68:
a5:67:69:72:94:c8:31:7e:9d:06:59:d6:d9:75:35:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:16:25:E0:D3:C1:41:81:84:3F:5B:E1:2C:9A:59:E1:3A:66:CF:60
X509v3 Authority Key Identifier:
keyid:8F:89:29:75:DA:D6:CC:A7:A6:48:69:18:80:6E:38:6B:88:24:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0188a1fa54e685e6dab16384784db802887cbc4f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/fe6c8424d02f95e14ae042b6373e28a4e80fba1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/0188a1fa54e685e6dab16384784db802887cbc4f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.168.0/22
138.122.200.0/22
168.227.0.0/22
170.81.24.0/22
186.27.128.0/17
190.1.192.0/18
190.99.128.0/17
200.29.96.0/19
IPv6:
2800:950::/32
Signature Algorithm: sha256WithRSAEncryption
2c:74:90:68:8b:8a:00:f7:70:e3:c5:fb:f4:30:dc:1b:56:81:
27:c7:be:b2:fc:48:93:9c:31:39:f3:ae:da:9a:f5:44:0d:17:
11:24:d8:69:3a:2a:fb:99:95:4f:42:8f:8d:1a:79:ab:cc:58:
0c:b7:9c:4f:96:c6:26:71:64:89:e9:67:f3:80:ab:eb:bf:b3:
05:32:ab:2e:04:e9:7b:43:35:6f:fc:2a:63:e3:d0:3d:e9:78:
96:56:e8:f5:a0:86:31:21:97:61:46:7a:2c:37:39:db:ae:f3:
c2:d9:ea:a3:6d:ef:3f:cb:56:60:d2:3c:66:43:2e:5b:3b:d9:
73:3c:6f:05:9a:c3:21:96:77:06:0c:3a:a6:79:3a:ef:87:57:
a2:c3:97:82:46:e8:28:52:07:42:2b:b3:e2:ed:b4:06:20:5a:
5f:63:47:64:d6:7d:bf:d0:ac:9a:4d:a3:4e:0f:99:6a:53:ed:
bf:87:25:5b:16:aa:4b:a5:6c:c2:34:c3:e3:5a:69:4c:79:bc:
3a:ec:d9:f1:73:d1:ef:7a:a6:82:89:78:ce:aa:67:1c:4b:e9:
dd:ee:a5:f4:ee:84:d3:80:b6:a4:c2:0f:49:20:cb:99:3e:9a:
bb:84:f9:57:eb:e2:cd:4d:7a:16:64:2c:b5:04:47:2b:a2:42:
03:f3:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:55 2024 by rpki-client on console-fra.rpki-client.org