Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/20aa1eca934d5d5d9eaf86d52951e3ada1efe843.roa
File: 20aa1eca934d5d5d9eaf86d52951e3ada1efe843.roa (raw, json)
Hash identifier: 6tDvk00zI9sF6SzQSXDcsHuvtsQx4OQcr/NfdoaCC5E=
Subject key identifier: 0C:60:E6:FE:86:07:39:E3:7E:96:33:4B:8A:95:88:87:93:B6:67:F2
Certificate issuer: /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial: 20F1B2
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/20aa1eca934d5d5d9eaf86d52951e3ada1efe843.roa
Signing time: Tue 23 May 2023 19:01:40 +0000
ROA not before: Mon 22 May 2023 19:01:38 +0000
ROA not after: Tue 23 May 2028 19:01:38 +0000
asID: 262206
IP address blocks: 181.189.153.0/24 maxlen: 24
181.189.155.0/24 maxlen: 24
181.189.156.0/24 maxlen: 24
200.94.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159026 (0x20f1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
Validity
Not Before: May 22 19:01:38 2023 GMT
Not After : May 23 19:01:38 2028 GMT
Subject: CN=20aa1eca934d5d5d9eaf86d52951e3ada1efe843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:33:a4:98:3c:72:bb:ec:fa:db:50:fb:ee:
1b:5c:fa:83:14:59:06:f4:68:ef:7a:24:c7:69:6c:
c5:33:e6:84:dd:88:86:ad:61:34:64:6e:b0:ab:62:
a7:d2:11:f3:41:f0:39:fc:20:12:ac:f5:d0:de:a0:
f1:a1:63:5e:1f:25:6b:2f:cc:d5:29:d0:54:d0:9a:
d9:f6:bb:a8:87:8c:65:4c:99:f8:a2:a7:fc:ee:9d:
d4:1f:7a:6c:5e:7d:31:9a:68:3c:c9:14:9b:bc:49:
d1:5e:0c:40:8d:cf:6a:42:68:3d:3a:a4:92:49:25:
52:f7:3f:96:a5:41:82:59:25:30:29:cd:fe:a5:05:
bd:d5:10:89:15:5c:67:05:4c:bf:94:0e:ab:e1:88:
aa:ce:9a:5f:38:52:30:3e:6f:36:57:34:85:2e:e5:
ca:09:e8:f2:c0:2d:4e:d0:24:25:9c:1c:34:04:4a:
91:d3:77:1e:ea:8d:be:4f:25:ac:6a:85:05:52:e9:
0d:d2:e1:92:bb:05:16:8a:6b:52:31:e1:02:22:eb:
20:dc:c4:55:5e:9d:29:fc:f7:89:a2:ab:cc:48:38:
08:30:f8:4c:d9:e5:33:9c:95:0d:6f:a4:31:86:0e:
38:a2:e6:36:da:5c:f2:7e:66:f7:e6:90:80:fa:8c:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:60:E6:FE:86:07:39:E3:7E:96:33:4B:8A:95:88:87:93:B6:67:F2
X509v3 Authority Key Identifier:
keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/20aa1eca934d5d5d9eaf86d52951e3ada1efe843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.153.0/24
181.189.155.0-181.189.156.255
200.94.248.0/24
Signature Algorithm: sha256WithRSAEncryption
48:14:8e:94:3c:59:52:31:dd:71:ac:c2:0d:d8:27:c4:a9:6d:
bc:12:bf:14:d3:ac:47:b4:03:b4:cc:16:a1:04:ff:5d:83:34:
a8:d0:42:3c:a2:c0:07:d7:81:5a:f6:72:71:41:7c:a3:a3:19:
81:d4:91:52:50:e2:d9:e6:fb:09:a9:1a:95:80:a0:9c:02:73:
12:54:1f:e0:1f:49:34:28:32:85:4f:78:a7:c2:6d:2a:48:78:
93:d3:33:ee:62:fb:e0:37:43:c0:f8:a5:37:13:85:53:cd:89:
79:ab:8f:a7:dc:cf:2c:ab:ee:99:f7:2d:c4:cf:16:fa:33:f3:
bb:28:14:22:c2:56:40:7b:79:b5:d7:24:a1:1b:bc:ac:95:eb:
7c:3a:20:8f:79:4a:e4:05:e8:26:35:ef:10:8e:34:f6:e5:04:
7f:c2:9f:25:db:23:6f:46:0b:9b:09:76:fa:ae:3f:64:4a:a3:
b7:7f:19:4b:30:1a:5f:54:93:05:84:65:34:da:8c:b2:50:55:
f3:71:08:d7:f2:dd:a0:1a:50:fd:64:90:cd:2d:49:dd:cf:52:
a2:e9:fa:5f:91:78:40:d6:e5:48:b5:33:8b:4e:c6:41:76:a8:
eb:5e:99:61:e1:65:4c:8b:9a:d2:16:52:e7:2a:68:9d:c3:0a:
bc:a8:12:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org