Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/a3f9fac4fabbd0df3ff0960003c6b60269ccd0d1.roa
File: a3f9fac4fabbd0df3ff0960003c6b60269ccd0d1.roa (raw, json)
Hash identifier: cmq1nbvOfZG/zqyS8JszybEY9ecbyuzNXZYAKSiRoFQ=
Subject key identifier: 8F:01:82:ED:74:A0:44:0A:AB:FF:CE:91:FD:5B:D6:DB:54:88:2A:A3
Certificate issuer: /CN=5b57ec865ac261e0ae36d05374102c7827e41e4c
Certificate serial: 3705
Authority key identifier: 93:20:ED:01:88:81:BB:02:C8:2D:EA:13:20:D6:89:79:B8:68:A0:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b57ec865ac261e0ae36d05374102c7827e41e4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/a3f9fac4fabbd0df3ff0960003c6b60269ccd0d1.roa
Signing time: Mon 17 Oct 2022 16:31:24 +0000
ROA not before: Sun 09 Oct 2022 17:23:23 +0000
ROA not after: Fri 11 Oct 2024 17:23:23 +0000
asID: 262182
IP address blocks: 190.52.112.0/22 maxlen: 24
190.52.116.0/24 maxlen: 24
190.52.117.0/24 maxlen: 24
190.52.119.0/24 maxlen: 24
190.52.121.0/24 maxlen: 24
190.52.123.0/24 maxlen: 24
190.52.125.0/24 maxlen: 24
190.52.126.0/24 maxlen: 24
190.52.127.0/24 maxlen: 24
131.161.100.0/24 maxlen: 24
131.161.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14085 (0x3705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b57ec865ac261e0ae36d05374102c7827e41e4c
Validity
Not Before: Oct 9 17:23:23 2022 GMT
Not After : Oct 11 17:23:23 2024 GMT
Subject: CN=a3f9fac4fabbd0df3ff0960003c6b60269ccd0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:c0:ec:65:90:4b:87:8b:18:8f:52:f2:f6:
bf:02:1a:38:2a:bf:e2:5c:ef:1a:c8:83:2b:28:00:
81:f4:ce:21:34:55:99:fd:5b:2b:5f:1e:ec:ec:98:
d1:56:4b:94:8e:19:18:b1:94:59:14:44:e4:7e:50:
09:83:93:4c:41:8f:24:cb:8d:aa:0d:a7:45:9e:b5:
e0:da:f5:81:35:b6:b9:26:99:93:cb:d5:41:b8:d6:
b9:0c:cd:94:2a:ef:69:c5:6d:73:bd:38:8c:42:37:
bf:2b:86:65:ca:39:d9:cf:5a:01:79:6e:69:b3:4c:
c8:83:60:bf:20:49:fa:04:8d:eb:5d:9d:a2:07:eb:
49:a1:56:29:d0:31:70:c3:8d:92:0a:c8:b2:da:c3:
15:e1:ee:3f:1d:98:a3:71:c2:f8:93:b8:71:7b:b9:
b4:56:0f:85:a8:35:e2:7f:f0:28:89:aa:bf:da:40:
88:d3:dd:c5:a3:72:91:a9:bf:62:1c:65:36:0a:37:
9a:77:b0:95:67:7f:72:03:e8:5c:2f:84:c8:16:a9:
20:6a:2b:75:81:d3:c3:73:3f:af:a6:2c:2f:7e:90:
51:88:c3:6a:28:7c:52:5d:ac:e8:e1:d2:6c:94:08:
48:24:5e:09:91:ce:13:57:12:4a:26:4f:c8:fd:a4:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:82:ED:74:A0:44:0A:AB:FF:CE:91:FD:5B:D6:DB:54:88:2A:A3
X509v3 Authority Key Identifier:
keyid:93:20:ED:01:88:81:BB:02:C8:2D:EA:13:20:D6:89:79:B8:68:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b57ec865ac261e0ae36d05374102c7827e41e4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/a3f9fac4fabbd0df3ff0960003c6b60269ccd0d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/5b57ec865ac261e0ae36d05374102c7827e41e4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.100.0/23
190.52.112.0-190.52.117.255
190.52.119.0/24
190.52.121.0/24
190.52.123.0/24
190.52.125.0-190.52.127.255
Signature Algorithm: sha256WithRSAEncryption
3d:06:b9:8f:30:eb:06:d4:1f:d9:59:38:3e:31:41:63:5f:1f:
d6:6d:3c:db:00:14:0e:ed:7e:c9:dc:50:0d:0f:40:29:5a:8a:
f3:48:4f:92:d1:16:04:4d:f5:8e:9b:a1:31:cc:7c:d8:3a:78:
e6:e8:07:72:2e:c9:9d:a2:81:63:a9:92:84:99:1e:28:54:19:
d8:05:45:37:72:75:91:35:55:e9:f0:29:87:7a:3e:e4:64:c5:
30:d9:5c:ea:4d:32:99:45:a8:5e:ce:74:8f:06:0d:c9:1f:d7:
f8:6b:db:cd:f8:b7:b0:2a:dd:55:5c:fc:41:a9:c1:35:43:db:
57:a2:6d:a4:c6:a2:24:24:9d:38:fa:41:0c:c2:ed:b5:d4:3e:
8c:6f:5c:99:65:cf:be:e8:a2:06:8f:63:4e:29:52:27:8d:a1:
a8:87:e9:d8:e3:ec:db:90:74:ce:c8:75:4c:d5:ab:59:b0:36:
43:90:56:3c:19:bc:27:17:81:d0:14:0c:c2:04:67:07:09:d4:
fc:20:25:44:8d:48:d0:77:42:a6:33:fc:bc:e8:fe:e7:ca:6d:
44:0f:4f:62:bc:9b:df:7b:a7:b3:1d:5a:16:5a:78:96:03:65:
d5:84:11:ff:3d:e6:23:ef:80:40:b7:44:e9:13:c2:0e:32:c4:
70:0c:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org