Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/20fca597a5ec897d97231112a04922071b9a7642.roa
File: 20fca597a5ec897d97231112a04922071b9a7642.roa (raw, json)
Hash identifier: EQ2qmon2OtJ36jTaZwkzxeaB51lJsvhDVHtvV1bkuks=
Subject key identifier: 44:FB:BF:0E:3D:32:A2:1B:FE:9D:97:91:41:24:32:F8:CF:41:29:A5
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 1F486F
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/20fca597a5ec897d97231112a04922071b9a7642.roa
Signing time: Fri 24 Mar 2023 09:59:32 +0000
ROA not before: Sun 21 Mar 2021 14:41:42 +0000
ROA not after: Tue 24 Mar 2026 14:41:42 +0000
asID: 52468
IP address blocks: 190.99.116.0/24 maxlen: 24
190.99.117.0/24 maxlen: 24
190.99.118.0/24 maxlen: 24
190.99.119.0/24 maxlen: 24
138.117.140.0/24 maxlen: 24
138.117.141.0/24 maxlen: 24
138.117.142.0/24 maxlen: 24
138.117.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050159 (0x1f486f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 21 14:41:42 2021 GMT
Not After : Mar 24 14:41:42 2026 GMT
Subject: CN=20fca597a5ec897d97231112a04922071b9a7642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:1d:ac:be:a8:97:24:6b:e8:15:b9:a0:ba:
f2:92:96:a1:54:00:eb:ee:0b:64:6b:50:ba:b6:c8:
af:00:4c:d1:e7:0c:09:c4:d0:0b:f3:97:b1:60:a9:
f7:17:9e:a7:69:28:e0:9e:11:54:8f:15:bc:72:38:
44:9a:fc:31:ee:cd:11:74:15:77:3d:a0:15:83:6b:
de:3e:ca:8a:5d:d4:81:7f:ec:3f:be:63:80:3a:17:
7d:82:39:34:8d:9f:94:7c:15:02:41:76:7f:58:1c:
10:66:11:f6:13:bb:78:4d:05:58:d2:6b:04:f8:af:
4f:ad:60:4c:39:71:45:8b:73:3a:6f:d2:37:85:c9:
28:8e:54:ee:38:e5:10:fd:ab:8a:05:18:af:b9:ee:
81:78:1e:b1:ff:a5:13:eb:b7:11:48:79:34:34:ae:
85:63:20:07:b6:13:9a:8f:35:d5:38:69:fa:62:80:
b6:8c:a2:ef:ac:6c:b1:20:9a:3d:29:80:63:fc:bf:
d2:1e:ff:9c:88:af:b4:9f:80:a9:3e:f7:9c:d9:98:
74:5b:8b:3b:47:50:4d:26:c0:67:13:fd:65:9d:bb:
f0:d4:a3:52:b4:12:fb:0b:e1:cc:67:3a:21:eb:0d:
76:4e:2d:9f:f2:39:2e:1f:d4:68:63:c2:31:f4:0e:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FB:BF:0E:3D:32:A2:1B:FE:9D:97:91:41:24:32:F8:CF:41:29:A5
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/20fca597a5ec897d97231112a04922071b9a7642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.140.0/22
190.99.116.0/22
Signature Algorithm: sha256WithRSAEncryption
26:e7:e2:af:3f:3a:76:0a:e1:45:87:3a:4c:ba:fb:77:f1:4c:
06:06:11:51:b2:bb:e8:45:32:b4:8e:30:1a:ab:65:a7:5e:35:
ef:33:52:3b:fa:72:c9:0a:d1:2e:e4:54:80:79:07:bd:ae:91:
c0:f8:f6:37:c8:e6:5e:3a:2d:74:32:d3:b2:8f:aa:b9:6f:39:
1d:2c:79:a9:85:7a:33:45:0c:8e:09:cd:5b:20:6c:65:de:1e:
3c:e4:64:4f:23:6c:bd:c8:45:f5:a0:30:bd:5d:4d:38:bb:ea:
3c:7a:14:3a:f5:22:58:53:d3:c6:f8:65:aa:78:4f:46:07:a4:
4a:85:69:6b:69:6b:ed:02:2d:3b:a8:ee:2b:cf:98:27:77:d9:
80:fd:ae:3e:74:e1:8f:a3:24:1d:0b:e3:ac:9d:91:07:3a:72:
b7:3e:b9:83:eb:bb:89:cb:7d:f0:13:76:c7:51:87:27:57:f2:
ac:d8:dd:73:37:92:ae:81:bc:d0:c6:57:0c:a5:20:de:fb:d5:
31:2b:b6:79:fa:2a:28:6a:49:9d:2d:ae:41:c1:d9:d8:e0:8d:
4d:d7:01:c1:ce:1a:6f:d9:33:7a:e8:cd:ad:4c:55:b2:85:b0:
64:d5:2a:32:46:02:fe:ff:ad:a1:3a:d7:56:9e:47:2f:67:30:
92:be:59:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-ams.rpki-client.org