Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/3074d761ded12071228f4dd5f3c43520dac20dcc.roa
File: 3074d761ded12071228f4dd5f3c43520dac20dcc.roa (raw, json)
Hash identifier: Law6cT2d21RHng5yL0fPq7CEVP7Jv8H0PVNx6fRra/0=
Subject key identifier: A2:73:0F:4E:45:A1:54:1D:E4:52:30:96:65:16:74:B5:87:FA:0B:E5
Certificate issuer: /CN=f8caf642faab23f93e78dca96f7b8df57ece73a8
Certificate serial: 20BE94
Authority key identifier: 5F:47:E4:E5:C1:1D:A5:88:2A:CE:4D:2E:19:06:23:57:8F:B3:DC:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8caf642faab23f93e78dca96f7b8df57ece73a8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/3074d761ded12071228f4dd5f3c43520dac20dcc.roa
Signing time: Fri 19 May 2023 17:33:59 +0000
ROA not before: Thu 18 May 2023 17:33:59 +0000
ROA not after: Mon 19 May 2025 17:33:59 +0000
asID: 25620
IP address blocks: 190.180.0.0/17 maxlen: 24
190.186.0.0/16 maxlen: 24
201.222.64.0/18 maxlen: 24
190.171.192.0/18 maxlen: 24
192.223.64.0/18 maxlen: 24
200.58.160.0/19 maxlen: 24
200.119.192.0/19 maxlen: 24
2800:390::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145940 (0x20be94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caf642faab23f93e78dca96f7b8df57ece73a8
Validity
Not Before: May 18 17:33:59 2023 GMT
Not After : May 19 17:33:59 2025 GMT
Subject: CN=3074d761ded12071228f4dd5f3c43520dac20dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e4:11:00:c6:64:5c:91:1c:e5:83:c8:2d:6d:
ce:07:ab:8e:15:04:dc:2a:3d:d3:6b:e6:45:d8:5b:
c7:30:f6:e1:98:60:61:ee:e5:56:b6:66:aa:4c:21:
bb:c4:77:05:9d:15:1a:fb:0e:6e:bd:6c:4b:78:95:
c9:5b:01:26:38:2a:9f:8f:2b:37:9d:0b:51:7e:06:
f7:05:3b:eb:c2:3d:8b:57:2e:ca:c5:15:e4:47:9f:
eb:25:c2:83:97:0b:d6:6c:bd:07:0a:b1:04:00:c1:
0e:62:47:03:6e:4d:f0:e6:50:f7:f6:93:32:4a:48:
ed:be:c5:1d:b0:ae:05:15:c1:65:6b:b8:30:65:1b:
4f:10:c0:3b:7a:5c:c3:e9:d9:73:b0:3a:e0:74:17:
73:64:c7:11:59:20:19:55:aa:e8:6a:d4:8c:52:9e:
3c:29:96:a0:28:88:39:f5:5a:b8:60:d4:84:00:06:
29:27:f8:29:f1:25:15:49:cd:39:27:af:70:2d:23:
b5:92:68:52:1c:5b:a5:0d:ee:33:35:4c:2c:58:53:
75:34:29:39:0c:85:8f:e4:38:9d:58:b2:27:25:34:
56:31:12:4e:81:6d:01:f5:8c:98:74:5c:e3:12:f5:
da:62:b9:b3:08:8a:55:32:4b:3c:fe:1e:27:d1:2f:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:73:0F:4E:45:A1:54:1D:E4:52:30:96:65:16:74:B5:87:FA:0B:E5
X509v3 Authority Key Identifier:
keyid:5F:47:E4:E5:C1:1D:A5:88:2A:CE:4D:2E:19:06:23:57:8F:B3:DC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8caf642faab23f93e78dca96f7b8df57ece73a8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/3074d761ded12071228f4dd5f3c43520dac20dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/f8caf642faab23f93e78dca96f7b8df57ece73a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.171.192.0/18
190.180.0.0/17
190.186.0.0/16
192.223.64.0/18
200.58.160.0/19
200.119.192.0/19
201.222.64.0/18
IPv6:
2800:390::/32
Signature Algorithm: sha256WithRSAEncryption
5f:9f:eb:87:8e:11:3b:45:2d:d4:07:f0:1c:60:89:0f:63:40:
b9:f9:a3:6a:0e:4f:4f:16:fa:d9:7f:09:85:c0:2f:15:b7:c9:
af:51:c4:95:28:86:93:f9:6d:eb:03:d5:90:8f:a9:65:76:1c:
21:d3:38:5a:41:9d:87:35:a8:f7:0f:df:ff:cf:e6:e6:92:01:
69:72:cd:9d:1d:47:7e:5f:ff:14:88:85:0b:32:7d:eb:74:a4:
eb:0d:4f:b7:2d:c2:c7:cf:aa:c7:8d:f8:58:80:f6:6d:12:23:
6f:a1:2a:a3:69:27:a2:fd:14:fc:94:26:ca:4b:5c:78:78:17:
fc:43:60:15:f0:84:e2:91:fd:2a:cf:3b:b8:d9:d6:04:0d:82:
35:fd:0d:14:02:6b:0c:b1:2f:6a:3f:0b:f7:6c:70:c3:1f:eb:
c4:4e:77:f1:aa:f7:ae:f5:28:4d:38:b6:61:b0:14:48:67:22:
aa:63:2e:3f:83:a9:4f:8d:f3:1a:d6:89:74:06:9a:ae:a8:f9:
b4:4a:e4:2d:55:35:c0:ae:68:3b:ff:4d:a6:c2:79:09:6f:82:
20:98:2b:cd:a1:5b:13:a2:bc:c2:c5:70:e8:d7:ad:84:2c:b3:
33:74:d4:f5:d0:d4:fb:cd:0a:f1:9f:eb:6a:70:97:29:5d:79:
60:fd:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org