Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/4efd72f69d8109e62c009137f5a00834f9aae6fb.roa
File: 4efd72f69d8109e62c009137f5a00834f9aae6fb.roa (raw, json)
Hash identifier: WUprXqmX+UDmjG7waKdM1V0Ym4KIf/tCPKm7glOoJeY=
Subject key identifier: CB:7D:45:CC:68:A4:09:C5:94:78:28:75:CE:64:9F:A6:88:78:5B:E0
Certificate issuer: /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial: 211BB7
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/4efd72f69d8109e62c009137f5a00834f9aae6fb.roa
Signing time: Thu 27 Apr 2023 06:15:14 +0000
ROA not before: Wed 26 Apr 2023 06:15:13 +0000
ROA not after: Sun 27 Apr 2025 06:15:13 +0000
asID: 14754
IP address blocks: 186.151.0.0/18 maxlen: 24
186.151.64.0/20 maxlen: 24
186.151.80.0/21 maxlen: 24
186.151.88.0/22 maxlen: 24
186.151.92.0/23 maxlen: 24
190.143.128.0/18 maxlen: 24
190.143.192.0/19 maxlen: 24
190.143.224.0/20 maxlen: 24
200.6.192.0/18 maxlen: 24
200.119.154.0/23 maxlen: 24
200.119.156.0/22 maxlen: 24
200.119.160.0/20 maxlen: 24
200.119.176.0/21 maxlen: 24
201.216.128.0/18 maxlen: 24
190.148.86.0/23 maxlen: 24
190.148.88.0/21 maxlen: 24
190.148.96.0/19 maxlen: 24
190.148.128.0/17 maxlen: 24
190.149.0.0/17 maxlen: 24
190.149.128.0/22 maxlen: 24
190.149.132.0/23 maxlen: 24
190.148.0.0/18 maxlen: 24
190.148.64.0/20 maxlen: 24
190.148.80.0/22 maxlen: 24
190.148.84.0/24 maxlen: 24
181.209.128.0/17 maxlen: 24
186.151.95.0/24 maxlen: 24
186.151.96.0/19 maxlen: 24
186.151.128.0/17 maxlen: 24
200.119.128.0/20 maxlen: 24
200.119.144.0/22 maxlen: 24
200.119.148.0/23 maxlen: 24
200.119.150.0/24 maxlen: 24
190.56.0.0/16 maxlen: 24
190.149.135.0/24 maxlen: 24
190.149.136.0/21 maxlen: 24
190.149.144.0/21 maxlen: 24
190.149.153.0/24 maxlen: 24
190.149.154.0/23 maxlen: 24
190.149.156.0/22 maxlen: 24
190.149.160.0/19 maxlen: 24
190.149.192.0/18 maxlen: 24
216.230.128.0/19 maxlen: 24
2800:890::/32 maxlen: 48
2800:98::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2169783 (0x211bb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Validity
Not Before: Apr 26 06:15:13 2023 GMT
Not After : Apr 27 06:15:13 2025 GMT
Subject: CN=4efd72f69d8109e62c009137f5a00834f9aae6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:8f:14:c3:e5:7c:ce:79:e8:ee:5f:5d:64:
44:c7:9f:0f:60:ab:b2:e7:ef:fa:11:a7:cd:a4:f3:
eb:cb:2e:4f:dc:0c:cf:25:ce:7d:31:fc:95:42:f2:
1c:67:7e:bb:b5:9e:c0:e3:ff:ee:85:31:e4:1c:e2:
5e:f5:ea:6d:99:12:21:63:15:82:2f:cf:29:ea:54:
ab:10:65:56:5d:6c:c4:c9:7a:a8:bc:b7:58:4f:a2:
dc:2e:28:5a:c9:2a:d1:c4:51:e6:ad:0e:da:e4:16:
6b:c5:d7:bb:81:64:0d:3a:08:c1:2a:fb:a0:5d:3d:
6d:fc:43:cc:41:a2:23:4a:22:57:22:93:73:91:6b:
fd:8e:bf:6c:36:3b:5e:07:53:b7:e7:95:fa:a8:d2:
0d:2e:10:d6:08:26:7c:81:ba:2e:97:a7:4f:10:a2:
62:a7:f2:5d:e8:7e:27:63:04:02:43:ae:4f:03:4e:
eb:cb:52:01:5d:ad:13:22:4a:87:73:6f:7a:35:1a:
c7:26:e6:a5:5e:29:42:8c:5a:c4:64:c9:5a:c5:37:
f7:a6:90:73:d8:8e:3f:5e:af:6f:bc:df:86:18:0e:
5a:5b:24:b8:af:61:65:2a:9b:8b:fc:91:5b:8b:05:
21:09:84:d8:e1:81:f2:f2:55:1b:d1:65:37:ef:2f:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:45:CC:68:A4:09:C5:94:78:28:75:CE:64:9F:A6:88:78:5B:E0
X509v3 Authority Key Identifier:
keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/4efd72f69d8109e62c009137f5a00834f9aae6fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.209.128.0/17
186.151.0.0-186.151.93.255
186.151.95.0-186.151.255.255
190.56.0.0/16
190.143.128.0-190.143.239.255
190.148.0.0-190.148.84.255
190.148.86.0-190.149.133.255
190.149.135.0-190.149.151.255
190.149.153.0-190.149.255.255
200.6.192.0/18
200.119.128.0-200.119.150.255
200.119.154.0-200.119.183.255
201.216.128.0/18
216.230.128.0/19
IPv6:
2800:98::/32
2800:890::/32
Signature Algorithm: sha256WithRSAEncryption
0c:c4:e4:d8:37:64:45:02:de:4d:81:20:df:7d:fa:ec:93:93:
3e:b3:c9:65:9f:a8:cd:98:22:8a:05:7c:10:26:30:fb:38:19:
c0:0a:df:b3:f9:c8:2c:91:b2:48:cc:c7:93:98:a3:76:e7:f9:
c8:42:1c:aa:d7:f0:33:ed:cf:2f:8f:38:37:5a:b4:b4:76:38:
f3:5e:87:be:44:c7:e5:1c:ff:0f:e0:ac:29:1a:3b:c6:58:f3:
3f:fb:b2:39:3a:f4:cf:4d:f9:f6:51:ea:78:3b:bc:66:82:65:
14:bc:fb:2b:9c:32:9e:2d:93:bc:c5:b4:97:32:3e:86:37:8b:
0f:d4:8f:16:3c:8f:9f:3d:8d:bd:27:c2:18:13:54:31:95:4c:
6d:55:f7:64:58:82:de:24:03:16:01:6c:6e:7e:e2:79:22:99:
b8:4b:33:4f:e7:77:7c:c8:ab:14:2f:3a:c7:26:b3:4b:fd:bd:
ea:2c:43:e7:f9:95:28:ee:dc:81:b8:eb:3f:61:ad:d6:0e:ed:
ed:3f:74:75:fb:83:4a:69:79:52:83:32:e3:df:a4:94:0b:50:
60:35:52:d5:53:19:5c:b2:ab:7c:6d:9e:73:d0:48:35:38:cb:
38:e1:12:32:b3:09:38:97:2b:c6:2d:ca:f5:c3:af:c5:cb:c7:
4a:0f:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 17:06:33 2024 by rpki-client on console-ams.rpki-client.org