Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd358d71-e781-4dac-915f-6a446b8adccd/349548f5d32cff850f9aecd75fab9fc3952eeb93.roa
File: 349548f5d32cff850f9aecd75fab9fc3952eeb93.roa (raw, json)
Hash identifier: M2ks79qqnVKo1ty7ojjjhAuCDB8YgZhykqZBv38lTgM=
Subject key identifier: 82:D4:0F:1F:D9:B1:BF:FB:97:F9:A4:D3:A3:63:AD:86:42:25:E5:2F
Certificate issuer: /CN=0205b2072999426c0ad9d8ae26c062cb93100614
Certificate serial: 0D8E65
Authority key identifier: FC:16:50:0B:81:A0:6E:47:62:79:21:4A:E3:A4:8D:78:8B:B6:31:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0205b2072999426c0ad9d8ae26c062cb93100614.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bd358d71-e781-4dac-915f-6a446b8adccd/349548f5d32cff850f9aecd75fab9fc3952eeb93.roa
Signing time: Wed 24 Mar 2021 14:31:31 +0000
ROA not before: Wed 24 Mar 2021 14:31:31 +0000
ROA not after: Tue 24 Mar 2026 14:31:31 +0000
asID: 52251
IP address blocks: 181.225.192.0/19 maxlen: 24
186.0.136.0/21 maxlen: 24
186.1.224.0/20 maxlen: 24
186.1.240.0/21 maxlen: 24
190.181.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888421 (0xd8e65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0205b2072999426c0ad9d8ae26c062cb93100614
Validity
Not Before: Mar 24 14:31:31 2021 GMT
Not After : Mar 24 14:31:31 2026 GMT
Subject: CN=349548f5d32cff850f9aecd75fab9fc3952eeb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:43:a4:ac:19:81:dd:0b:85:9a:89:b6:2c:99:
4a:0f:91:28:e7:b7:f2:5f:43:50:3f:8b:0f:86:ec:
2b:e4:52:00:06:7d:5e:4f:cb:e2:be:3f:a4:56:70:
3f:3b:64:62:d7:89:29:ce:35:a3:a6:62:c8:b3:90:
fd:4e:3f:08:40:d5:26:3d:f1:17:ec:d3:45:62:e6:
6a:b4:98:92:22:81:7b:fb:bd:19:a9:d5:cd:9c:66:
37:5e:5a:24:7f:a1:b9:88:05:e5:aa:7d:de:3f:73:
8c:6d:82:d2:26:e9:51:78:a7:0a:9f:eb:48:1c:16:
af:1a:3a:7f:98:ce:f1:41:81:dc:01:e0:ab:02:92:
1a:3f:c8:80:98:0b:36:ff:2a:44:6a:09:f9:01:66:
73:58:89:1b:fc:fe:d9:5c:2e:2b:d1:3d:06:87:2b:
bf:68:f5:47:00:36:a1:ad:07:96:1e:27:af:e5:c0:
26:6e:53:be:f6:fd:0c:91:a1:37:c3:84:5c:e7:00:
92:fa:e8:ac:36:81:2b:20:9b:19:4b:51:f5:75:02:
53:79:c4:6a:30:4e:4a:95:4c:26:16:cd:8d:69:97:
8f:f5:34:6b:9c:64:90:67:a5:68:0a:f0:40:6c:cf:
54:6b:fa:5d:0f:d6:41:14:cb:ec:f6:52:30:f8:c3:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D4:0F:1F:D9:B1:BF:FB:97:F9:A4:D3:A3:63:AD:86:42:25:E5:2F
X509v3 Authority Key Identifier:
keyid:FC:16:50:0B:81:A0:6E:47:62:79:21:4A:E3:A4:8D:78:8B:B6:31:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0205b2072999426c0ad9d8ae26c062cb93100614.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd358d71-e781-4dac-915f-6a446b8adccd/349548f5d32cff850f9aecd75fab9fc3952eeb93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bd358d71-e781-4dac-915f-6a446b8adccd/0205b2072999426c0ad9d8ae26c062cb93100614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.225.192.0/19
186.0.136.0/21
186.1.224.0-186.1.247.255
190.181.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2c:d1:2d:d0:82:dc:16:53:04:1c:1b:44:19:d5:bf:52:00:41:
76:15:65:1a:a5:a6:3c:b1:88:79:44:d3:43:43:a0:93:1c:6d:
3c:f5:3e:58:f8:22:e7:7c:a4:aa:3d:5e:60:c5:d2:cf:e0:29:
2c:36:92:4a:69:38:4d:5a:ab:5e:f9:f5:63:e1:b6:f7:6f:fd:
d8:1f:a0:55:af:17:bf:14:e1:b6:da:dd:f5:79:30:f9:8d:e4:
e5:ac:42:cf:f1:02:ae:f0:71:98:2d:8d:3d:04:e0:bd:2d:f6:
b2:71:1b:ae:1c:02:f5:17:ea:76:56:4b:12:34:8a:57:1e:ec:
5c:4b:1b:a6:c3:f7:88:1a:3f:fa:07:94:8e:67:57:8e:b0:59:
92:3d:f7:9b:1d:b4:1f:26:d1:48:d1:28:03:29:76:82:ac:7d:
5b:a8:63:76:fb:ee:64:a5:59:1a:1c:d6:6a:a4:a6:a8:ce:96:
31:3f:e7:92:4e:df:b4:8d:fe:4a:48:52:45:c9:41:0c:e8:12:
ae:cf:57:70:5f:51:ab:6e:d1:4b:a4:17:78:75:b0:d2:07:cd:
ec:c3:4d:64:3e:16:d3:e4:67:e1:6f:85:ee:b8:17:e7:08:ca:
1a:54:5b:8b:a2:83:4e:1e:d3:83:d8:a1:45:99:d0:2d:38:5d:
f1:51:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org