Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/51eea0ed6bce2138fc3537f9c01b32cccedd11fb.roa
File: 51eea0ed6bce2138fc3537f9c01b32cccedd11fb.roa (raw, json)
Hash identifier: 2u7LxfhtqE8Yx7f8+MeyWk1aLBFMiilxv7jAlLiz1z0=
Subject key identifier: 41:C4:67:00:AF:9C:3D:E2:BA:85:E7:3F:E4:26:99:02:7A:D7:03:55
Certificate issuer: /CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
Certificate serial: 2159E4
Authority key identifier: 7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/51eea0ed6bce2138fc3537f9c01b32cccedd11fb.roa
Signing time: Fri 02 Jun 2023 14:46:39 +0000
ROA not before: Thu 01 Jun 2023 14:46:39 +0000
ROA not after: Mon 02 Jun 2025 14:46:39 +0000
asID: 52361
IP address blocks: 186.33.192.0/18 maxlen: 24
181.209.0.0/17 maxlen: 24
2800:c30::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185700 (0x2159e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
Validity
Not Before: Jun 1 14:46:39 2023 GMT
Not After : Jun 2 14:46:39 2025 GMT
Subject: CN=51eea0ed6bce2138fc3537f9c01b32cccedd11fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f6:6f:c9:a2:0c:b8:e7:29:71:07:1d:27:1a:
4a:91:f5:bc:42:6c:2b:8c:d5:89:cd:a3:bc:5a:34:
9b:27:9e:de:74:06:bc:48:f7:c4:09:10:77:6b:df:
ce:29:8e:a7:08:33:17:26:50:d1:dd:6d:c9:01:be:
03:32:c9:6b:c2:ac:cc:44:98:23:c6:4f:7e:76:92:
be:8a:0c:81:c0:d6:a1:5a:00:56:16:de:12:b3:29:
61:ce:a9:92:9e:7b:db:e6:5c:e5:41:37:e2:0a:14:
78:ed:8b:67:33:e1:4f:48:6b:af:0b:f7:7b:cf:86:
12:5c:78:5c:84:ff:2b:50:42:70:fb:f3:6c:56:83:
b7:22:82:c1:09:60:f8:76:e5:7a:82:06:98:0b:5d:
6b:7a:60:0c:af:de:7e:aa:dd:42:2c:0f:4d:ed:f1:
9e:b7:ca:43:ad:e5:ce:fd:f1:9f:05:cc:16:97:a4:
e3:3c:3f:0e:57:61:bf:96:e1:83:42:96:70:fa:ef:
69:38:03:95:77:26:83:87:da:78:13:bf:be:98:61:
ec:9d:f8:24:1d:8c:46:66:4c:86:15:41:0b:c9:6a:
91:6f:99:f8:9a:e0:ec:70:bc:ac:72:e0:ea:bc:e8:
12:0f:d7:59:a8:d3:6f:1c:e6:6d:4c:a8:f7:65:bd:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C4:67:00:AF:9C:3D:E2:BA:85:E7:3F:E4:26:99:02:7A:D7:03:55
X509v3 Authority Key Identifier:
keyid:7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/51eea0ed6bce2138fc3537f9c01b32cccedd11fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.209.0.0/17
186.33.192.0/18
IPv6:
2800:c30::/32
Signature Algorithm: sha256WithRSAEncryption
25:00:4d:40:cd:9e:44:c0:0d:6f:06:e7:b3:08:b2:28:87:12:
19:d6:ea:32:e6:ee:40:f9:31:bb:dd:a9:15:14:ef:07:d3:c5:
e1:27:7f:19:d8:ee:a9:fc:d7:23:da:4c:82:7b:78:04:c2:ba:
6a:5c:39:a2:0b:93:4d:7a:76:b4:96:ab:c8:0b:d2:7b:54:ed:
94:fb:bf:b2:3a:a7:e3:18:cb:17:75:da:5a:82:34:a2:d3:62:
d2:84:b1:ef:32:9a:b5:14:59:14:db:35:91:29:49:cb:a1:d1:
b0:f2:10:38:2a:48:75:2c:b9:92:e0:d3:9c:c5:34:68:1f:19:
55:ee:a4:70:ea:94:f3:5b:6b:32:51:aa:22:08:e7:46:27:3e:
2b:70:d5:ab:50:d7:38:fb:ea:84:d1:a2:4e:2b:19:26:7a:22:
45:14:32:7d:db:31:30:4e:07:22:aa:2f:58:69:f1:0b:8d:a2:
f0:d7:7b:81:b2:ff:1b:35:36:0a:3b:73:ec:b6:a4:5a:45:b8:
89:ca:3f:4a:7e:f1:c5:48:65:3d:f9:d5:4a:08:8a:cb:d8:a8:
be:b1:05:19:44:a3:ec:60:06:4c:a5:a9:64:61:23:6d:96:77:
80:c7:9d:2f:93:b1:43:d1:2b:c4:f5:a7:2e:51:72:79:fe:e5:
6e:dd:a6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org