Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/37cbceb14b8cf60e9270f4b41a26d2df6b420a55.roa
File: 37cbceb14b8cf60e9270f4b41a26d2df6b420a55.roa (raw, json)
Hash identifier: oA3MNBeLf/FW+0vKWL2lKFz1lbXd/VQZJ6guQCwd7QQ=
Subject key identifier: 52:4D:FE:26:E3:85:B1:3E:D9:83:8F:1B:A5:0C:F3:09:3F:1B:45:19
Certificate issuer: /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial: 211710
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/37cbceb14b8cf60e9270f4b41a26d2df6b420a55.roa
Signing time: Thu 27 Apr 2023 06:15:13 +0000
ROA not before: Wed 26 Apr 2023 06:15:13 +0000
ROA not after: Sun 27 Apr 2025 06:15:13 +0000
asID: 13682
IP address blocks: 190.143.128.0/18 maxlen: 24
190.143.192.0/19 maxlen: 24
190.143.224.0/20 maxlen: 24
200.119.128.0/20 maxlen: 24
200.119.144.0/22 maxlen: 24
200.119.148.0/23 maxlen: 24
200.119.150.0/24 maxlen: 24
200.119.154.0/23 maxlen: 24
200.119.156.0/22 maxlen: 24
200.119.160.0/20 maxlen: 24
200.119.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168592 (0x211710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Validity
Not Before: Apr 26 06:15:13 2023 GMT
Not After : Apr 27 06:15:13 2025 GMT
Subject: CN=37cbceb14b8cf60e9270f4b41a26d2df6b420a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:d8:f3:de:76:76:46:70:ea:7c:25:61:d7:
2d:6e:45:80:d0:ed:94:e8:89:ec:a7:c2:ec:97:06:
10:dc:49:43:d0:31:79:0f:2c:aa:46:9c:99:bd:15:
7c:34:0a:87:65:fc:5a:4c:21:7e:36:ae:91:44:50:
7d:3f:b2:c8:b5:a7:e3:46:47:ec:e3:8b:d8:cd:5c:
54:1b:5e:6f:ab:ea:05:87:37:96:03:5a:76:6a:01:
94:77:36:01:a2:b7:a6:23:1b:c6:89:aa:63:35:c7:
c9:f9:87:20:a0:80:4b:0e:06:a3:3b:38:c0:69:78:
91:27:ed:a3:34:65:ac:68:c6:54:ea:18:57:ad:62:
ee:51:89:9a:17:73:1e:ca:93:be:93:d0:12:0d:28:
44:d7:66:a8:fc:1f:49:74:68:0c:ad:05:d8:4e:31:
4c:68:b5:4c:bd:f8:e7:46:17:f9:62:b8:28:5a:cc:
2b:cc:59:f1:be:ab:2f:aa:2f:9b:26:43:1d:89:f6:
f5:d5:61:47:3c:b3:8b:51:13:eb:9e:36:83:60:ce:
14:fe:88:07:d1:49:7b:1b:d9:50:c6:43:75:98:50:
cc:cd:1f:f3:10:a5:e4:cb:bb:db:cf:7d:35:2e:5e:
5a:82:84:0c:61:3f:6a:bd:b0:39:a9:50:db:68:b1:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4D:FE:26:E3:85:B1:3E:D9:83:8F:1B:A5:0C:F3:09:3F:1B:45:19
X509v3 Authority Key Identifier:
keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/37cbceb14b8cf60e9270f4b41a26d2df6b420a55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.143.128.0-190.143.239.255
200.119.128.0-200.119.150.255
200.119.154.0-200.119.183.255
Signature Algorithm: sha256WithRSAEncryption
17:58:2d:93:31:ff:44:fb:bf:b1:64:37:e7:62:c1:f7:1f:ac:
90:ac:1f:8d:cb:61:94:8f:9d:ae:d7:80:eb:b0:ab:65:d9:e9:
b8:ee:5c:1d:14:4f:fa:8f:dc:26:6b:df:e0:50:2f:90:e6:4a:
96:e7:42:c4:dc:5d:ef:af:07:64:01:00:40:83:ab:a7:99:ef:
42:ed:43:7c:6d:84:c1:fb:83:e8:27:dc:a4:b6:a7:d3:ad:66:
31:0c:d4:4a:ca:77:4c:4d:a2:b2:1f:cc:7e:87:62:9c:37:93:
a2:32:7f:9a:69:68:e7:32:16:d3:70:7a:43:22:7d:ed:3f:85:
0d:d2:11:e7:e8:34:ae:f0:d4:9d:81:8d:6b:e6:e9:0e:cb:ae:
70:c4:94:b6:54:f2:87:ff:71:ea:0a:13:10:68:64:9e:e6:ce:
22:10:e1:77:db:41:17:f8:2c:c0:27:68:5f:ba:ba:c2:df:fe:
06:f6:13:5c:aa:00:e4:49:de:1c:4d:71:28:eb:02:fd:2d:e1:
9e:b5:c6:2b:d0:62:26:bd:21:19:6b:56:83:91:a5:31:2d:5c:
d0:e7:5e:fd:27:32:0b:ef:50:c5:28:22:c8:71:81:52:68:dd:
65:88:a3:63:48:78:61:bd:15:b0:a8:82:eb:a5:bc:16:42:20:
f7:3c:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org