Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/19bd9458d03a40d98fc71f5554f517b3f9cb81df.roa
File: 19bd9458d03a40d98fc71f5554f517b3f9cb81df.roa (raw, json)
Hash identifier: IgXO9heuYBRjpLYXL8/aS0+Ek50btNwe2i1cPRNUJ9Q=
Subject key identifier: 87:5D:F5:8F:3F:F0:A6:2B:47:65:4D:E8:43:05:E2:71:3A:E7:64:DA
Certificate issuer: /CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b
Certificate serial: 0D5873
Authority key identifier: B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/19bd9458d03a40d98fc71f5554f517b3f9cb81df.roa
Signing time: Wed 24 Mar 2021 14:32:54 +0000
ROA not before: Wed 24 Mar 2021 14:32:54 +0000
ROA not after: Tue 24 Mar 2026 14:32:54 +0000
asID: 27839
IP address blocks: 132.251.224.0/19 maxlen: 24
181.114.64.0/19 maxlen: 24
181.177.128.0/18 maxlen: 24
190.11.64.0/19 maxlen: 24
190.106.240.0/20 maxlen: 24
190.107.32.0/19 maxlen: 24
200.58.64.0/19 maxlen: 24
201.150.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874611 (0xd5873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b
Validity
Not Before: Mar 24 14:32:54 2021 GMT
Not After : Mar 24 14:32:54 2026 GMT
Subject: CN=19bd9458d03a40d98fc71f5554f517b3f9cb81df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:01:c6:13:59:b1:6f:95:e1:b4:1a:ec:50:
70:1a:fb:48:65:05:db:0f:b5:e8:ba:da:f3:70:5e:
91:99:7d:09:a3:74:ed:95:36:a6:4c:48:20:10:ff:
84:37:d4:3a:87:3a:3d:77:8a:8e:08:d1:4a:ba:a9:
54:c1:fb:3e:47:2c:c4:1a:f9:1f:37:81:6d:9e:b9:
3f:e9:ef:48:53:9c:ef:ef:87:3d:44:26:3e:fd:0f:
73:02:71:0d:e8:5c:1a:ee:25:9b:25:ca:cc:b8:37:
49:80:9b:0d:b3:08:e9:ed:ce:b2:8b:25:97:de:7d:
8f:0e:4a:da:f1:47:6f:24:9d:bd:18:41:00:d4:ca:
93:03:e6:eb:58:fb:4b:eb:10:8d:e0:06:2d:98:76:
96:f6:0b:db:12:01:a7:64:f8:8c:e8:d5:2b:6d:0d:
72:c6:df:60:0f:3c:0f:55:fe:a9:73:7b:b5:15:3f:
59:65:83:04:d0:43:e3:a2:78:45:c8:53:ba:6c:59:
e8:aa:9d:31:0f:df:66:3c:ec:e5:43:c9:34:04:ee:
31:6a:72:d5:89:18:16:9b:77:e8:de:b7:06:70:1c:
32:73:b6:58:f8:ad:ab:3e:b9:be:d9:bb:b9:7b:79:
92:ab:59:1e:20:0c:61:fc:06:f7:0f:c3:df:65:3d:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:F5:8F:3F:F0:A6:2B:47:65:4D:E8:43:05:E2:71:3A:E7:64:DA
X509v3 Authority Key Identifier:
keyid:B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/19bd9458d03a40d98fc71f5554f517b3f9cb81df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/89a0699fe9f460e1f4fcd4dbeee82910785b065b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.251.224.0/19
181.114.64.0/19
181.177.128.0/18
190.11.64.0/19
190.106.240.0/20
190.107.32.0/19
200.58.64.0/19
201.150.160.0/19
Signature Algorithm: sha256WithRSAEncryption
44:55:52:a8:1e:e9:db:36:29:53:88:6a:4b:21:72:f6:42:d9:
34:19:59:4a:cd:03:e5:df:34:34:9b:1a:7c:57:e7:0f:6f:fc:
03:5e:8e:82:b6:ca:9e:6b:fe:7b:7f:ae:67:e6:60:3c:4b:9a:
a0:0e:5f:1a:fc:25:31:22:52:d0:c4:2e:d9:31:f3:da:7c:c3:
a6:2c:bf:0a:f1:6e:e0:14:47:35:8c:0b:f4:e9:80:b2:3a:be:
55:9f:8e:1f:49:7c:4f:27:15:e1:1d:ee:fc:e8:c8:d5:12:40:
9b:83:ee:9f:53:ac:49:13:93:de:38:f1:16:44:99:10:b4:c7:
78:7b:17:b8:c7:f8:1b:1f:c7:4b:ed:4c:54:46:3b:e5:f1:94:
95:26:46:2a:5e:00:f4:64:30:d0:7d:c7:2d:1d:da:f1:25:48:
d4:b0:d8:a3:42:0c:e1:54:1a:5d:de:ff:a5:58:7f:60:ef:92:
57:1a:0c:a6:f7:70:6e:1e:52:3b:9f:17:f1:bb:5e:e9:32:9d:
ae:51:de:f2:20:30:86:11:c1:22:e0:f4:b9:0e:78:6d:d0:b9:
4d:96:d0:08:bd:e4:89:53:3a:ad:4b:b0:48:bc:28:a2:9d:5e:
a3:fe:62:48:96:89:d3:08:88:35:99:aa:c5:3a:d1:ff:ef:2a:
11:60:5a:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org