Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/18aeb4a38e5989cdb508a63bbef0d7a57b7691f4.roa
File: 18aeb4a38e5989cdb508a63bbef0d7a57b7691f4.roa (raw, json)
Hash identifier: 8iOp8+4bRryb9FTFnKq90JeFGXZ+r3InRtSQW7mszks=
Subject key identifier: 56:CB:E2:CB:14:B4:82:2E:F8:BC:23:05:02:E5:E6:27:F2:E6:E2:14
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 1C4390
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/18aeb4a38e5989cdb508a63bbef0d7a57b7691f4.roa
Signing time: Wed 28 Sep 2022 14:12:32 +0000
ROA not before: Wed 28 Sep 2022 14:09:53 +0000
ROA not after: Sat 28 Sep 2024 14:09:53 +0000
asID: 3816
IP address blocks: 201.228.128.0/20 maxlen: 20
201.228.139.0/24 maxlen: 24
201.228.140.0/24 maxlen: 24
201.228.141.0/24 maxlen: 24
201.228.144.0/20 maxlen: 20
201.228.155.0/24 maxlen: 24
201.228.160.0/19 maxlen: 19
201.228.184.0/22 maxlen: 22
201.228.208.0/21 maxlen: 21
201.228.216.0/21 maxlen: 21
201.228.216.0/22 maxlen: 22
201.228.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1852304 (0x1c4390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Sep 28 14:09:53 2022 GMT
Not After : Sep 28 14:09:53 2024 GMT
Subject: CN=18aeb4a38e5989cdb508a63bbef0d7a57b7691f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:2b:d1:41:f7:f5:74:e5:72:27:21:37:4b:
9d:3f:6e:92:b4:6d:4f:06:13:ac:cd:4d:08:6d:f5:
cd:be:61:d2:59:52:06:f3:2d:53:bd:c5:e3:42:a5:
16:3e:c0:99:1e:b5:22:7f:85:d8:fb:b3:19:3e:74:
25:bc:47:8f:af:2e:ee:1e:66:34:fc:5f:a7:c8:11:
28:cc:e1:ef:21:5f:02:69:98:8d:86:d0:33:50:60:
5a:cc:28:32:40:79:12:01:0e:a1:c1:de:6f:ef:e8:
10:03:62:23:34:60:f2:56:94:92:92:85:5a:de:b5:
ee:d7:6a:ef:8d:92:2b:7a:0d:da:aa:17:40:71:bf:
f8:4d:37:1c:80:fa:65:0a:28:2f:70:64:47:ac:ff:
29:81:c3:99:19:70:c3:80:13:21:f6:e5:83:f6:db:
03:54:1c:c8:b0:dc:88:b1:7e:a4:6a:f6:fe:9e:2b:
d9:28:8b:e7:1e:f9:3e:5e:96:64:f6:7a:80:8a:73:
b3:de:52:2a:b3:90:c1:ee:6d:c2:e7:45:99:32:42:
d1:c0:38:35:c7:98:61:de:05:7c:21:cd:f5:5d:08:
c6:f2:11:47:ff:3b:2b:34:18:79:03:8c:67:79:b7:
a4:dc:19:61:2a:7b:10:dd:89:fc:7c:63:d6:bb:3b:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CB:E2:CB:14:B4:82:2E:F8:BC:23:05:02:E5:E6:27:F2:E6:E2:14
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/18aeb4a38e5989cdb508a63bbef0d7a57b7691f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.228.128.0/18
201.228.208.0-201.228.255.255
Signature Algorithm: sha256WithRSAEncryption
2d:7e:09:6a:a8:0d:92:49:1f:aa:b7:ee:af:6a:e3:4a:67:eb:
70:fd:9a:a5:fb:87:c7:6b:0b:85:fa:8a:fe:81:4a:43:af:98:
ba:74:69:6a:7f:6e:e5:73:a1:8a:24:89:d8:fb:6c:2f:a6:69:
43:91:eb:33:94:4c:56:69:90:93:7d:fb:55:27:6a:6c:7c:c2:
8d:fa:b8:47:e5:dd:0b:6b:fb:af:8c:f7:8f:e6:3b:af:92:5b:
34:14:30:4c:50:6a:83:8b:8b:98:e5:2d:c2:39:4d:74:9f:30:
17:c9:c1:dc:a2:a1:82:40:96:67:98:2e:fe:18:b9:0f:82:3b:
a8:6f:f8:1f:81:b4:13:f8:59:58:b1:94:48:12:dc:32:76:41:
60:e3:13:3f:d3:2b:16:f4:df:21:f7:df:48:d0:09:e6:66:2f:
8e:58:d5:5d:02:12:4f:01:58:84:ea:3c:ea:80:8c:de:de:4a:
b0:b7:8c:89:76:e6:a9:5d:40:45:34:98:d8:9d:b5:0a:e7:12:
ce:be:a5:e1:8c:e9:43:75:c8:c4:4d:b8:03:36:b6:23:c4:12:
9b:dd:27:f5:42:c2:6c:af:c3:cc:9f:a7:69:b8:90:e0:ca:52:
7c:38:a1:b0:b9:75:99:5b:e6:2e:e5:e9:23:42:c1:ab:21:a1:
0c:fe:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org