Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2efa464-0902-4477-a433-3476f42cc325/14934769f283800d20a9af775cefca7370089211.roa
File: 14934769f283800d20a9af775cefca7370089211.roa (raw, json)
Hash identifier: tBOKgO04SOEPlAOwj+ceUWKDguIar7bsuuy/ZhsiXv8=
Subject key identifier: 22:39:01:10:D8:42:AE:C3:A4:FE:80:E2:11:A5:4F:A7:D5:FA:54:64
Certificate issuer: /CN=58c2bc7895cd7c147803e7c9790ece03a9e82fa6
Certificate serial: 174806
Authority key identifier: 18:DC:42:6A:C7:DA:80:CB:A2:FA:32:DB:5C:BD:9E:55:15:E2:8F:5B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58c2bc7895cd7c147803e7c9790ece03a9e82fa6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e2efa464-0902-4477-a433-3476f42cc325/14934769f283800d20a9af775cefca7370089211.roa
Signing time: Wed 20 Apr 2022 22:32:58 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 11014
IP address blocks: 143.0.76.0/22 maxlen: 24
170.83.4.0/22 maxlen: 24
170.150.152.0/22 maxlen: 24
190.12.96.0/20 maxlen: 24
190.12.112.0/22 maxlen: 24
190.12.116.0/24 maxlen: 24
190.12.119.0/24 maxlen: 24
190.12.120.0/21 maxlen: 24
190.104.194.0/23 maxlen: 24
190.104.196.0/23 maxlen: 24
190.104.198.0/24 maxlen: 24
190.104.200.0/21 maxlen: 24
190.104.208.0/20 maxlen: 24
190.104.224.0/20 maxlen: 24
190.104.241.0/24 maxlen: 24
190.104.242.0/23 maxlen: 24
190.104.244.0/22 maxlen: 24
190.104.248.0/21 maxlen: 24
190.111.192.0/19 maxlen: 24
190.111.224.0/21 maxlen: 24
190.111.232.0/23 maxlen: 24
190.111.234.0/24 maxlen: 24
190.111.237.0/24 maxlen: 24
190.111.238.0/23 maxlen: 24
190.111.240.0/20 maxlen: 24
200.110.216.0/22 maxlen: 24
200.110.220.0/23 maxlen: 24
200.110.223.0/24 maxlen: 24
2800:a10::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525766 (0x174806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c2bc7895cd7c147803e7c9790ece03a9e82fa6
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=14934769f283800d20a9af775cefca7370089211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:1b:11:94:2c:81:6e:8f:7f:57:73:a3:a6:
d9:83:9e:1f:e7:8e:71:18:2b:4a:9a:80:82:28:56:
58:43:2c:72:14:46:99:e8:d3:93:13:34:c2:4a:d1:
a6:9a:67:cf:14:8c:ff:ef:9e:e8:ab:3c:a1:04:70:
c1:9c:db:c9:47:bc:32:eb:8e:7f:36:2a:72:75:16:
68:44:39:fe:b0:8a:d8:79:7b:91:9f:c5:7d:ac:df:
fd:5c:e8:b6:e0:59:7a:42:1d:e1:b2:3e:f3:c2:79:
a4:8b:ed:f8:ae:4d:34:25:6d:15:5f:77:60:60:87:
3c:bf:bb:62:c9:2d:56:06:a7:d6:f3:6c:06:21:c9:
93:f0:14:44:94:9f:d0:0c:31:30:54:4c:3c:9a:b9:
ca:62:0c:fe:40:f1:8c:fc:b0:df:8c:84:92:ae:01:
ac:32:c0:73:d9:81:88:46:d7:15:46:1f:c9:3f:1f:
52:2d:d0:4a:81:2d:9d:fe:6f:e6:a5:71:25:c2:cc:
3a:5b:6c:84:6f:a0:16:dc:af:01:ad:19:b4:5d:94:
ad:7e:65:60:11:e5:b4:5c:90:ee:97:32:39:9b:a5:
9e:bd:8b:84:2b:9d:af:ce:4c:b9:75:77:00:83:09:
1d:cf:22:07:c4:e7:4a:91:5a:17:0f:e3:8e:ab:aa:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:39:01:10:D8:42:AE:C3:A4:FE:80:E2:11:A5:4F:A7:D5:FA:54:64
X509v3 Authority Key Identifier:
keyid:18:DC:42:6A:C7:DA:80:CB:A2:FA:32:DB:5C:BD:9E:55:15:E2:8F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58c2bc7895cd7c147803e7c9790ece03a9e82fa6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2efa464-0902-4477-a433-3476f42cc325/14934769f283800d20a9af775cefca7370089211.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e2efa464-0902-4477-a433-3476f42cc325/58c2bc7895cd7c147803e7c9790ece03a9e82fa6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.76.0/22
170.83.4.0/22
170.150.152.0/22
190.12.96.0-190.12.116.255
190.12.119.0-190.12.127.255
190.104.194.0-190.104.198.255
190.104.200.0-190.104.239.255
190.104.241.0-190.104.255.255
190.111.192.0-190.111.234.255
190.111.237.0-190.111.255.255
200.110.216.0-200.110.221.255
200.110.223.0/24
IPv6:
2800:a10::/32
Signature Algorithm: sha256WithRSAEncryption
3f:af:2e:c4:54:e7:e3:51:00:6c:98:b1:d1:20:42:96:e2:87:
59:83:6d:17:35:a8:bd:13:be:b1:b1:81:ef:e6:72:e8:ae:ef:
d0:e8:99:83:68:5a:3d:1a:7c:26:da:cb:fc:5f:29:fc:ba:ab:
0c:24:73:20:45:39:ce:dd:78:b5:40:b0:7e:12:52:bd:97:77:
76:e5:e6:bf:35:ab:a1:f4:92:2e:5c:1e:59:a6:8d:42:b1:29:
d4:59:b1:9e:c2:de:0b:1d:26:fd:da:ed:cd:46:c4:66:01:46:
cc:87:70:f1:7c:a7:e6:7e:84:cb:84:37:a3:30:af:2e:23:f7:
2c:f5:96:df:57:95:0d:97:0b:11:fc:52:73:89:7f:c1:42:54:
34:6b:23:29:05:b6:ea:64:a5:5c:61:e0:0c:a1:dd:4c:41:0a:
95:d9:27:b4:9b:2c:8f:18:fb:cb:90:49:0d:d3:1f:ab:3b:99:
14:a2:99:0e:22:0d:b7:07:49:b8:9e:0c:21:2a:75:6d:13:0b:
ef:01:72:fc:d6:be:cc:29:e4:3f:23:4f:40:0e:4a:f7:b8:b4:
18:95:53:ac:0b:55:ad:46:1c:7d:eb:50:e0:70:68:ac:ff:0e:
00:2c:e2:bd:c3:95:4f:8d:1c:db:21:e1:7e:ff:47:13:16:f4:
07:36:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org