Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/a5e9881a6ab5a182f615fc5d26b847a2bb06b58b.roa
File: a5e9881a6ab5a182f615fc5d26b847a2bb06b58b.roa (raw, json)
Hash identifier: i+ftCQzWOggRBnbcxsGznu7Q3HT2HP3LbsuwvhSHUk8=
Subject key identifier: 19:6E:1C:C6:7A:B5:26:97:AE:E0:FE:E7:23:01:36:55:4F:8B:B9:4F
Certificate issuer: /CN=da0cd30df4491331691a183f5b0a9260b7daadec
Certificate serial: 28FEA4
Authority key identifier: 21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/a5e9881a6ab5a182f615fc5d26b847a2bb06b58b.roa
Signing time: Mon 18 Mar 2024 14:12:24 +0000
ROA not before: Mon 18 Mar 2024 14:12:19 +0000
ROA not after: Sun 18 Mar 2029 14:12:19 +0000
asID: 262172
IP address blocks: 190.143.128.0/18 maxlen: 24
190.143.192.0/19 maxlen: 24
190.143.224.0/20 maxlen: 24
200.119.128.0/20 maxlen: 24
200.119.144.0/22 maxlen: 24
200.119.148.0/23 maxlen: 24
200.119.150.0/24 maxlen: 24
200.119.154.0/23 maxlen: 24
200.119.156.0/22 maxlen: 24
200.119.160.0/20 maxlen: 24
200.119.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2686628 (0x28fea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0cd30df4491331691a183f5b0a9260b7daadec
Validity
Not Before: Mar 18 14:12:19 2024 GMT
Not After : Mar 18 14:12:19 2029 GMT
Subject: CN=a5e9881a6ab5a182f615fc5d26b847a2bb06b58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0f:7c:db:42:75:49:69:cd:64:a7:20:92:7e:
23:17:16:88:f4:70:82:7d:fb:3d:9b:da:34:09:34:
60:ed:ee:b1:9c:82:be:d8:24:99:e7:9f:3a:29:c6:
3f:46:66:3a:69:4a:53:8e:05:13:45:d0:6a:ca:ce:
af:29:17:2a:74:13:4e:e7:15:c7:86:68:01:ef:99:
cb:92:f3:ae:ee:12:07:c1:41:59:3b:1a:6f:12:0c:
ce:f3:37:e5:f2:30:46:59:e9:90:19:12:7e:62:fe:
6e:7b:b8:39:08:c8:4e:a1:f7:f7:8e:4a:d1:cd:5b:
b2:60:d2:67:8a:0e:9c:87:2d:8d:b7:51:76:64:34:
99:cf:d2:be:da:09:b2:93:22:cb:04:61:f1:bf:6d:
de:9c:1e:ca:a2:34:c0:b2:b5:a7:90:3b:61:ba:50:
8a:c8:99:98:db:ca:65:2f:a5:91:ab:2d:b4:2f:b1:
d1:a5:a6:8b:dd:25:37:cd:41:3a:3a:d2:dd:47:9a:
b5:88:cb:e9:bb:ef:0c:b6:92:b7:04:ba:23:1f:4e:
6d:94:f0:fb:2c:46:66:18:2c:36:e4:45:1f:d2:01:
f0:e9:cf:6d:69:29:d5:82:61:d6:f2:0c:fd:b4:b9:
d7:8e:54:5d:92:f4:07:d1:02:7f:5a:24:f7:82:a6:
82:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:1C:C6:7A:B5:26:97:AE:E0:FE:E7:23:01:36:55:4F:8B:B9:4F
X509v3 Authority Key Identifier:
keyid:21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/a5e9881a6ab5a182f615fc5d26b847a2bb06b58b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/da0cd30df4491331691a183f5b0a9260b7daadec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.143.128.0-190.143.239.255
200.119.128.0-200.119.150.255
200.119.154.0-200.119.183.255
Signature Algorithm: sha256WithRSAEncryption
54:b8:34:dc:47:06:f4:ad:40:80:04:ac:1c:9e:d9:b3:0f:d8:
e1:56:f4:31:0f:76:a4:a7:dc:ab:92:77:db:ad:a7:f7:5c:79:
36:fd:65:ed:81:98:de:4c:fb:6d:2c:dd:95:40:12:09:d0:b7:
54:07:98:8b:62:fa:d0:f2:36:4b:65:87:b5:02:f7:74:31:45:
d5:a0:8d:98:40:83:e0:8c:e6:0c:dd:cc:7d:7a:de:74:fc:2a:
9c:92:7b:38:00:c6:60:ec:bf:e1:09:fe:9b:94:01:8f:76:6e:
3f:24:12:a7:d5:77:24:3f:23:fb:7b:d9:1e:42:ad:bc:4c:86:
da:1e:c4:07:f3:7c:20:07:1c:54:e5:8f:90:24:8e:d6:10:8e:
59:19:92:d5:e4:54:3a:38:3f:c1:ba:8b:7d:95:68:2e:ec:f0:
aa:e3:da:37:08:ae:20:66:80:8c:3c:22:a8:04:1a:68:38:84:
5d:d7:9c:22:94:3b:d0:5b:da:2a:92:25:35:c7:6c:32:c1:8d:
84:b5:71:33:b2:03:1f:7f:9e:0f:d5:2c:a2:75:b8:ae:b6:77:
9a:0d:19:20:52:bf:84:96:c1:b8:b2:1b:2f:e0:b2:77:c5:5b:
82:85:43:39:03:8d:08:e7:b5:bb:65:9a:fe:c2:28:77:77:d4:
c9:70:cf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org