Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/aaf3cac9223cebcc24e0f41209654796872577be.roa
File: aaf3cac9223cebcc24e0f41209654796872577be.roa (raw, json)
Hash identifier: Q7inicjwcMcnsSXKmtdr2YTidon55L8Fy5NcYkrIJZE=
Subject key identifier: 1F:5E:22:FE:B2:66:65:65:2F:B0:03:B3:EA:A9:B1:20:6C:BC:3A:A9
Certificate issuer: /CN=da0cd30df4491331691a183f5b0a9260b7daadec
Certificate serial: 28F6CA
Authority key identifier: 21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/aaf3cac9223cebcc24e0f41209654796872577be.roa
Signing time: Mon 18 Mar 2024 14:12:22 +0000
ROA not before: Mon 18 Mar 2024 14:12:19 +0000
ROA not after: Sun 18 Mar 2029 14:12:19 +0000
asID: 13682
IP address blocks: 190.143.192.0/19 maxlen: 24
190.143.224.0/20 maxlen: 24
200.119.128.0/20 maxlen: 24
200.119.144.0/22 maxlen: 24
200.119.148.0/23 maxlen: 24
200.119.150.0/24 maxlen: 24
200.119.154.0/23 maxlen: 24
200.119.156.0/22 maxlen: 24
200.119.160.0/20 maxlen: 24
200.119.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684618 (0x28f6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0cd30df4491331691a183f5b0a9260b7daadec
Validity
Not Before: Mar 18 14:12:19 2024 GMT
Not After : Mar 18 14:12:19 2029 GMT
Subject: CN=aaf3cac9223cebcc24e0f41209654796872577be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ca:c4:f6:ae:20:aa:40:cb:3e:e9:ba:a3:53:
e5:c1:39:f6:d4:ff:9e:ee:d0:06:86:e2:a9:99:63:
d6:52:b6:d8:c5:2a:1e:96:38:d5:b7:8f:a7:3e:0b:
90:d4:da:10:cf:ee:5b:18:2e:45:58:c9:3b:02:68:
59:e0:5c:f1:84:e5:0a:6e:82:79:f5:12:c0:21:53:
59:3d:0a:ac:32:ba:47:bd:5e:a5:ab:28:f9:e8:13:
af:2b:23:3f:f7:df:2b:43:0b:14:62:ef:49:c9:7d:
71:9e:90:6f:62:c0:21:a5:53:84:01:68:16:b0:cc:
92:c0:3d:fd:ed:87:12:0b:1b:fa:a4:e1:87:1e:95:
84:48:e2:b2:11:77:73:77:55:e3:ee:b1:fd:8c:4f:
16:fc:58:5e:cd:52:3f:b3:3b:c6:0a:d0:d0:74:9e:
b2:78:28:22:80:40:57:63:cb:05:d1:c7:04:bf:23:
e2:cb:f6:6b:e8:ed:d8:68:84:3c:de:b3:af:0b:45:
c9:71:f7:14:8c:55:7c:19:92:aa:e8:da:b7:0d:5f:
69:3d:bd:87:cb:da:9d:ff:63:7f:1e:30:6c:2c:b1:
bd:2e:4c:bb:55:d0:89:eb:02:77:d2:67:d9:1d:c0:
4b:3a:5c:68:25:8b:9a:72:33:23:a7:7e:7c:2b:2c:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5E:22:FE:B2:66:65:65:2F:B0:03:B3:EA:A9:B1:20:6C:BC:3A:A9
X509v3 Authority Key Identifier:
keyid:21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/aaf3cac9223cebcc24e0f41209654796872577be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/da0cd30df4491331691a183f5b0a9260b7daadec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.143.192.0-190.143.239.255
200.119.128.0-200.119.150.255
200.119.154.0-200.119.183.255
Signature Algorithm: sha256WithRSAEncryption
16:5d:8d:0c:69:53:96:94:0b:65:c8:19:a7:6c:9e:cb:0e:8a:
3a:97:33:43:52:f1:e0:65:04:51:c2:ac:4c:60:ff:7e:b5:93:
57:cd:6f:ad:f2:4a:b5:31:95:f8:5f:c0:b9:cc:56:c2:c0:85:
c2:9e:bb:b4:20:f7:d7:4d:42:09:33:bd:a0:0b:ae:4e:a3:32:
91:b1:f3:7d:03:e0:73:2a:70:b1:ae:a8:5e:3a:70:1d:98:e5:
59:fa:dc:5d:82:36:fa:5a:46:72:89:35:56:ce:aa:5b:3b:04:
e5:11:9e:70:29:7e:13:69:e4:d9:47:11:ed:b2:ed:b4:bf:ee:
f0:75:d0:62:d7:33:10:a6:bc:d8:83:2b:93:25:32:68:d5:f8:
64:88:48:f9:4a:da:26:8e:ed:87:b1:d7:19:90:46:bf:e5:07:
3c:47:a5:92:17:36:37:6c:27:aa:cf:35:4b:a8:39:6b:49:04:
c0:7c:e4:0a:ee:99:59:b9:a7:61:c6:35:03:a4:db:67:c8:ad:
bf:85:53:fb:48:e6:67:94:65:3f:9b:3a:66:87:7a:e1:2d:fa:
e7:5a:2c:b6:fe:99:87:07:2d:9c:97:46:4d:05:0a:ac:5f:53:
5e:eb:2a:96:df:6b:8e:92:70:1a:fb:62:f5:a4:51:f1:d5:05:
7f:5c:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org