Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3456b8b8c5b33713741ea7461a7b3049f1dd1e9d.roa
File: 3456b8b8c5b33713741ea7461a7b3049f1dd1e9d.roa (raw, json)
Hash identifier: eE8tAZPRW3KK3gKMd0IhWIm7ibAWxwfUxSlCdTvOGlQ=
Subject key identifier: 57:8E:87:3C:F8:E7:4B:68:01:2E:74:0B:F7:84:19:BB:02:BB:13:C2
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 14C919
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3456b8b8c5b33713741ea7461a7b3049f1dd1e9d.roa
Signing time: Tue 04 Jan 2022 18:56:21 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 7315
IP address blocks: 186.112.0.0/14 maxlen: 24
190.52.0.0/19 maxlen: 24
190.66.0.0/15 maxlen: 24
200.30.96.0/19 maxlen: 24
200.89.192.0/20 maxlen: 24
200.89.208.0/20 maxlen: 24
201.228.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362201 (0x14c919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=3456b8b8c5b33713741ea7461a7b3049f1dd1e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:51:26:fc:c6:e4:58:cd:55:91:a7:31:de:
5a:cd:0f:c9:cf:70:a4:bd:fc:a3:e4:e2:79:0f:41:
11:d8:c7:30:d2:11:fc:22:12:8c:58:65:5e:4b:ab:
66:51:35:54:83:56:cf:9d:32:dd:37:65:6b:41:70:
2c:62:7f:02:a8:d2:a4:e7:ae:75:74:33:f0:c9:c9:
de:de:cf:f7:72:8e:e3:70:d3:86:b8:d6:11:05:08:
92:b5:c4:d8:60:1a:a8:df:fe:b5:ca:94:93:47:e8:
bd:72:e4:18:54:00:ac:42:88:64:fe:17:45:27:7c:
d2:1a:2c:87:f3:15:70:ea:63:c7:f0:14:06:4c:5d:
4b:44:27:0e:ed:ce:5f:9a:62:27:2c:c6:67:4e:df:
8a:b2:6f:1c:6f:5c:17:8e:58:c8:ba:65:28:d0:c7:
a8:7a:b6:b0:25:46:b7:75:90:14:c1:64:0f:0d:c1:
cd:ea:f3:e7:46:3a:72:84:33:8c:e1:81:69:97:0c:
03:55:38:ab:3b:9b:eb:b5:4f:f4:a7:5b:1a:b5:b3:
6f:ec:cb:8e:98:7c:bb:4a:d0:9c:01:f7:a9:a9:91:
d0:00:23:de:25:a4:de:c3:62:3e:7e:ba:34:97:f8:
a5:d0:30:10:83:94:4c:0e:bf:34:60:ff:d3:76:c0:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:87:3C:F8:E7:4B:68:01:2E:74:0B:F7:84:19:BB:02:BB:13:C2
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3456b8b8c5b33713741ea7461a7b3049f1dd1e9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.112.0.0/14
190.52.0.0/19
190.66.0.0/15
200.30.96.0/19
200.89.192.0/19
201.228.0.0/17
Signature Algorithm: sha256WithRSAEncryption
63:8c:64:1d:e6:23:93:b7:73:c6:a6:e2:15:69:c0:ea:e4:a3:
97:81:2e:34:47:87:c4:68:c3:a5:59:46:8b:ef:be:cf:9b:ba:
4e:a3:c5:8e:46:91:c2:de:59:40:40:6d:bd:a2:2f:0d:39:d6:
e6:d8:11:9e:23:49:67:97:64:df:41:7d:9c:bc:c2:a1:62:5a:
36:f6:34:f4:81:8d:d1:0a:2d:d9:77:b3:dc:09:aa:cd:b0:a4:
88:b8:ac:47:48:e2:6b:d8:77:18:06:a4:ac:38:01:66:4b:24:
a4:a9:4e:8d:67:05:20:c5:2d:71:8a:2b:60:9c:22:f0:d0:0a:
a5:d8:d5:74:ac:6f:b5:b6:8d:2f:ba:90:b3:58:5d:5d:a2:17:
49:b0:6f:a0:cb:53:84:6e:70:f9:d4:d8:32:03:d1:9b:4d:b0:
3d:aa:c1:59:cd:bc:fa:73:bb:6a:33:bb:ae:ef:82:72:66:d7:
47:b5:78:6a:b9:f0:68:33:1e:d3:ae:3f:7f:70:f6:38:3b:9b:
a5:79:70:d1:b5:ae:28:45:09:f7:bb:d0:57:0c:97:66:f2:f3:
92:33:0d:19:4c:3f:de:8b:33:4c:0c:bb:1b:ea:99:f8:85:df:
b5:12:4b:99:7b:43:d9:c3:72:fa:9c:25:67:bd:6a:29:1d:bb:
72:f7:33:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org