Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/11823788dbe84d64eee29cc87fef72ad73c56390.roa
File: 11823788dbe84d64eee29cc87fef72ad73c56390.roa (raw, json)
Hash identifier: SvMsev0EztlyQ8xdkA12rn67FzSE7LFIADTxDlT5oMU=
Subject key identifier: DD:02:C1:0D:AD:94:89:96:68:A4:1A:8E:E2:AF:6F:07:DD:10:4E:35
Certificate issuer: /CN=da0cd30df4491331691a183f5b0a9260b7daadec
Certificate serial: 29036F
Authority key identifier: 21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/11823788dbe84d64eee29cc87fef72ad73c56390.roa
Signing time: Mon 18 Mar 2024 14:12:25 +0000
ROA not before: Mon 18 Mar 2024 14:12:19 +0000
ROA not after: Sun 18 Mar 2029 14:12:19 +0000
asID: 14754
IP address blocks: 186.151.0.0/18 maxlen: 24
186.151.64.0/20 maxlen: 24
186.151.80.0/21 maxlen: 24
186.151.88.0/22 maxlen: 24
186.151.92.0/23 maxlen: 24
190.143.128.0/18 maxlen: 24
190.143.192.0/19 maxlen: 24
190.143.224.0/20 maxlen: 24
200.6.192.0/18 maxlen: 24
200.119.154.0/23 maxlen: 24
200.119.156.0/22 maxlen: 24
200.119.160.0/20 maxlen: 24
200.119.176.0/21 maxlen: 24
201.216.128.0/18 maxlen: 24
190.148.86.0/23 maxlen: 24
190.148.88.0/21 maxlen: 24
190.148.96.0/19 maxlen: 24
190.148.128.0/17 maxlen: 24
190.149.0.0/17 maxlen: 24
190.149.128.0/22 maxlen: 24
190.149.132.0/23 maxlen: 24
190.148.0.0/18 maxlen: 24
190.148.64.0/20 maxlen: 24
190.148.80.0/22 maxlen: 24
190.148.84.0/24 maxlen: 24
181.209.128.0/17 maxlen: 24
186.151.95.0/24 maxlen: 24
186.151.128.0/17 maxlen: 24
200.119.128.0/20 maxlen: 24
200.119.144.0/22 maxlen: 24
200.119.148.0/23 maxlen: 24
200.119.150.0/24 maxlen: 24
190.56.0.0/16 maxlen: 24
190.149.135.0/24 maxlen: 24
190.149.136.0/21 maxlen: 24
190.149.144.0/21 maxlen: 24
190.149.153.0/24 maxlen: 24
190.149.154.0/23 maxlen: 24
190.149.156.0/22 maxlen: 24
190.149.160.0/19 maxlen: 24
190.149.192.0/18 maxlen: 24
216.230.128.0/19 maxlen: 24
2800:890::/32 maxlen: 48
2800:98::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2687855 (0x29036f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0cd30df4491331691a183f5b0a9260b7daadec
Validity
Not Before: Mar 18 14:12:19 2024 GMT
Not After : Mar 18 14:12:19 2029 GMT
Subject: CN=11823788dbe84d64eee29cc87fef72ad73c56390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:29:61:c2:7c:50:e7:40:49:c1:14:af:79:
ed:07:e6:5c:df:87:06:5b:67:d2:b9:4c:ee:6a:4b:
5e:91:3b:95:f1:60:9a:87:e8:2c:42:ce:65:38:8b:
2b:11:6f:b2:db:e5:f9:70:ec:f5:e9:43:31:08:25:
b6:d9:c3:1d:db:c7:fe:a4:0e:0b:ec:cd:36:68:17:
b4:67:9b:b0:5b:d8:a0:c1:ea:60:dc:bf:56:cb:be:
f7:cc:28:e2:91:54:1f:fa:78:91:75:81:30:c4:6f:
2f:86:b0:f1:df:78:e2:cd:cf:4e:7c:ab:cd:be:ec:
82:16:50:09:1d:bd:c1:fd:29:55:09:bc:0d:47:4b:
78:0f:db:09:7d:92:4b:51:e2:3a:a4:96:66:ba:29:
9e:f0:93:4a:ee:26:45:d1:cb:3b:e3:eb:fa:3e:5f:
96:73:2c:e0:47:cc:d6:72:7c:a1:bb:5c:ce:0e:75:
b7:db:1b:b6:2c:ac:29:5c:47:7b:a9:80:5a:32:99:
e2:98:45:7c:fb:dd:76:5a:4c:a1:7f:93:d9:2d:66:
21:ff:86:81:50:4d:2b:11:05:64:59:c3:78:f3:bd:
af:9f:a4:0f:1d:f9:1e:4b:62:ef:4c:01:a6:08:39:
c8:42:3f:2a:70:9d:d2:1a:c1:8c:e2:da:3f:c6:8d:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:02:C1:0D:AD:94:89:96:68:A4:1A:8E:E2:AF:6F:07:DD:10:4E:35
X509v3 Authority Key Identifier:
keyid:21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/11823788dbe84d64eee29cc87fef72ad73c56390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/da0cd30df4491331691a183f5b0a9260b7daadec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.209.128.0/17
186.151.0.0-186.151.93.255
186.151.95.0/24
186.151.128.0/17
190.56.0.0/16
190.143.128.0-190.143.239.255
190.148.0.0-190.148.84.255
190.148.86.0-190.149.133.255
190.149.135.0-190.149.151.255
190.149.153.0-190.149.255.255
200.6.192.0/18
200.119.128.0-200.119.150.255
200.119.154.0-200.119.183.255
201.216.128.0/18
216.230.128.0/19
IPv6:
2800:98::/32
2800:890::/32
Signature Algorithm: sha256WithRSAEncryption
05:cd:75:69:6c:f2:80:69:3b:a8:d7:59:e6:08:07:52:07:d7:
59:bd:de:b3:1d:9d:69:aa:5c:dd:00:d0:30:c8:81:ca:5b:a1:
6b:9e:e2:67:b5:bd:e6:3f:ac:5a:dc:f0:ab:32:5c:ba:e0:b5:
2f:4f:12:02:99:3a:59:7d:96:dd:1d:41:7a:93:9b:6a:76:e5:
90:8c:27:a1:2e:e5:4b:6c:1a:11:19:83:11:0a:c2:08:2b:b0:
1c:f1:c7:de:78:3e:07:4b:34:be:a0:67:91:48:34:c3:80:8a:
be:0a:13:43:11:b4:30:31:30:99:aa:93:bd:48:c9:51:38:70:
e5:02:6f:47:ff:ff:37:a0:58:27:3a:09:45:71:31:8f:9d:1c:
06:ac:20:cc:8a:9c:ef:79:6b:de:f5:82:b8:e5:c6:49:ae:36:
d4:71:c1:69:0b:37:23:4c:12:ce:26:96:27:08:6b:f9:65:01:
db:7f:f4:e8:10:02:94:45:bf:8f:a9:7d:a4:b4:8a:65:da:06:
78:d2:de:28:80:d4:0e:31:fa:3d:5c:27:08:86:d2:d6:f9:03:
5e:67:43:fa:88:49:57:f1:b2:95:39:8b:f2:e7:d1:47:9f:8c:
b7:52:8a:94:2a:b6:66:ec:45:d2:f1:91:d8:a9:e7:7e:f6:ac:
6f:71:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org