Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2383999aad426f8a4081ef0413682b40d375d55e.roa
File: 2383999aad426f8a4081ef0413682b40d375d55e.roa (raw, json)
Hash identifier: Xyx0U9YgiFE0PEofgT1hBcXKnnriGouuznJhZzJ8CWw=
Subject key identifier: 89:DD:F2:78:E8:58:AC:49:43:1B:D7:0F:95:18:E6:E5:4A:B8:53:35
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 1C2B94
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2383999aad426f8a4081ef0413682b40d375d55e.roa
Signing time: Wed 28 Sep 2022 13:59:58 +0000
ROA not before: Wed 28 Sep 2022 13:57:47 +0000
ROA not after: Sat 28 Sep 2024 13:57:47 +0000
asID: 3816
IP address blocks: 190.66.0.0/24 maxlen: 24
190.66.1.0/24 maxlen: 24
190.66.2.0/24 maxlen: 24
190.66.3.0/24 maxlen: 24
190.66.5.0/24 maxlen: 24
190.66.6.0/24 maxlen: 24
190.66.7.0/24 maxlen: 24
190.66.8.0/21 maxlen: 21
190.66.10.0/24 maxlen: 24
190.66.14.0/24 maxlen: 24
190.66.16.0/20 maxlen: 20
190.66.16.0/24 maxlen: 24
190.66.17.0/24 maxlen: 24
190.66.21.0/24 maxlen: 24
190.66.23.0/24 maxlen: 24
190.66.24.0/24 maxlen: 24
190.66.25.0/24 maxlen: 24
190.66.27.0/24 maxlen: 24
190.66.30.0/23 maxlen: 23
190.66.32.0/22 maxlen: 22
190.66.33.0/24 maxlen: 24
190.66.34.0/24 maxlen: 24
190.66.36.0/22 maxlen: 22
190.66.40.0/22 maxlen: 22
190.66.44.0/22 maxlen: 22
190.66.48.0/21 maxlen: 21
190.66.56.0/21 maxlen: 21
190.66.64.0/20 maxlen: 20
190.66.80.0/22 maxlen: 22
190.66.84.0/22 maxlen: 22
190.66.88.0/22 maxlen: 22
190.66.96.0/20 maxlen: 20
190.66.112.0/20 maxlen: 20
190.66.128.0/21 maxlen: 21
190.66.136.0/21 maxlen: 21
190.66.144.0/20 maxlen: 20
190.66.160.0/20 maxlen: 20
190.66.176.0/22 maxlen: 22
190.66.184.0/21 maxlen: 21
190.66.192.0/22 maxlen: 22
190.66.196.0/22 maxlen: 22
190.66.200.0/22 maxlen: 22
190.66.204.0/22 maxlen: 22
190.66.208.0/20 maxlen: 20
190.66.224.0/20 maxlen: 20
190.66.240.0/20 maxlen: 20
190.67.0.0/21 maxlen: 21
190.67.8.0/21 maxlen: 21
190.67.16.0/21 maxlen: 21
190.67.24.0/23 maxlen: 23
190.67.26.0/23 maxlen: 23
190.67.28.0/22 maxlen: 22
190.67.32.0/19 maxlen: 19
190.67.32.0/22 maxlen: 22
190.67.38.0/24 maxlen: 24
190.67.40.0/22 maxlen: 22
190.67.56.0/21 maxlen: 21
190.67.64.0/20 maxlen: 20
190.67.64.0/21 maxlen: 21
190.67.72.0/21 maxlen: 21
190.67.80.0/20 maxlen: 20
190.67.80.0/21 maxlen: 21
190.67.87.0/24 maxlen: 24
190.67.88.0/21 maxlen: 21
190.67.96.0/21 maxlen: 21
190.67.104.0/22 maxlen: 22
190.67.108.0/22 maxlen: 22
190.67.112.0/21 maxlen: 21
190.67.120.0/23 maxlen: 23
190.67.122.0/23 maxlen: 23
190.67.124.0/22 maxlen: 22
190.67.128.0/18 maxlen: 18
190.67.136.0/21 maxlen: 21
190.67.144.0/22 maxlen: 22
190.67.148.0/22 maxlen: 22
190.67.152.0/21 maxlen: 21
190.67.160.0/22 maxlen: 22
190.67.164.0/22 maxlen: 22
190.67.168.0/22 maxlen: 22
190.67.172.0/22 maxlen: 22
190.67.176.0/21 maxlen: 21
190.67.184.0/22 maxlen: 22
190.67.188.0/22 maxlen: 22
190.67.192.0/20 maxlen: 20
190.67.208.0/20 maxlen: 20
190.67.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846164 (0x1c2b94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Sep 28 13:57:47 2022 GMT
Not After : Sep 28 13:57:47 2024 GMT
Subject: CN=2383999aad426f8a4081ef0413682b40d375d55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:4c:c2:96:7b:5b:99:7b:4a:3b:9d:19:a2:
3a:f7:aa:ec:03:7e:31:b0:fd:88:24:07:84:08:e4:
f8:a9:ba:db:ac:e0:dd:e0:f9:aa:d2:56:b0:ad:22:
b3:11:64:1d:b0:3f:a9:c2:20:1c:0e:65:e3:3c:26:
89:50:23:f9:4e:b6:a6:a2:23:05:bb:68:51:b6:92:
89:5c:d5:97:3e:05:f7:92:3d:fd:62:27:57:ac:2b:
ae:f7:b5:b3:76:5e:cc:c0:f1:19:c2:a3:c7:11:03:
3d:cd:2e:a3:4f:1e:f7:aa:04:ad:85:e2:cd:30:3d:
4b:d0:ca:7c:33:59:42:13:c2:3f:90:bc:e4:11:d0:
75:62:f5:53:62:af:a0:c4:a0:e7:68:48:aa:f8:cd:
05:00:7b:22:c0:e1:61:07:e6:60:a9:55:12:7a:7a:
be:05:eb:fe:bf:20:48:7b:78:ae:9d:ec:b6:07:e0:
52:2a:28:c3:df:32:ec:2d:1a:d3:d0:cc:28:53:0d:
8a:67:39:85:d7:ff:f7:a6:59:4e:f5:d8:a3:85:72:
a3:6b:b3:64:68:ca:a2:93:c1:1c:3c:cd:83:01:04:
53:0a:07:4d:52:f4:f8:04:41:8a:7d:2e:42:08:a0:
f6:17:88:cf:79:69:f3:b6:d6:16:53:34:5b:dd:79:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DD:F2:78:E8:58:AC:49:43:1B:D7:0F:95:18:E6:E5:4A:B8:53:35
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2383999aad426f8a4081ef0413682b40d375d55e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.66.0.0/22
190.66.5.0-190.66.91.255
190.66.96.0-190.66.179.255
190.66.184.0-190.67.255.255
Signature Algorithm: sha256WithRSAEncryption
40:fd:8b:6b:e9:19:a2:85:74:91:fd:f9:fc:4d:ad:60:7d:0d:
d9:1e:45:2b:83:c1:2c:4c:83:46:3a:17:bb:b6:10:a2:db:b9:
ca:cd:9a:28:8a:d3:49:aa:95:86:b2:89:0a:2b:dc:89:05:ea:
3f:c6:90:0a:05:56:ea:1d:3c:5f:9f:12:0e:e2:04:2a:4f:cc:
35:62:30:b4:96:94:cf:95:17:b0:c5:a9:e8:9f:93:40:3b:62:
98:58:c8:a6:dd:cd:65:2c:a8:fd:74:8e:34:65:27:0d:9a:6b:
a1:39:0f:f2:78:90:94:a4:05:2c:ad:c3:8b:7d:ff:c0:d0:85:
88:49:0d:70:fa:98:35:dd:3b:ef:4b:05:b5:c5:84:43:06:c0:
5c:8d:85:cf:26:89:b2:1b:fc:36:1c:e1:20:41:05:74:21:f0:
5a:7d:8e:a9:29:ea:ea:d7:83:2c:7c:45:6f:40:61:73:ba:e0:
b5:7b:d0:a0:43:2a:b7:50:e9:1a:75:6b:cc:1f:0c:b6:ae:11:
d4:e7:35:f1:1f:ef:93:b7:89:6d:69:66:a1:66:a0:ab:be:c3:
cf:0d:ed:73:e3:4b:64:9f:e6:76:de:3f:1a:e0:cd:57:4c:24:
49:b5:ce:64:a9:e2:1d:59:8b:76:11:4f:ac:63:30:ef:12:a4:
7e:05:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org