Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/a669d7f03543c4d08bba10517031a6c90235f57f.roa
File: a669d7f03543c4d08bba10517031a6c90235f57f.roa (raw, json)
Hash identifier: F1JDIK7vB8UkCGOnGi9056o3wAZhERKACztP29uNuhU=
Subject key identifier: E3:06:52:07:C0:5C:D1:91:05:08:7D:B5:A3:9B:E3:4A:28:6A:BC:EA
Certificate issuer: /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial: 0D3430
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/a669d7f03543c4d08bba10517031a6c90235f57f.roa
Signing time: Wed 24 Mar 2021 14:48:10 +0000
ROA not before: Wed 24 Mar 2021 14:48:10 +0000
ROA not after: Tue 24 Mar 2026 14:48:10 +0000
asID: 6306
IP address blocks: 179.20.0.0/14 maxlen: 24
179.44.0.0/14 maxlen: 24
181.180.0.0/14 maxlen: 24
181.184.0.0/14 maxlen: 24
186.24.0.0/17 maxlen: 24
186.24.128.0/17 maxlen: 24
186.25.0.0/16 maxlen: 24
186.164.0.0/15 maxlen: 24
186.166.0.0/16 maxlen: 24
186.184.0.0/15 maxlen: 24
186.186.0.0/15 maxlen: 24
200.31.128.0/19 maxlen: 24
200.35.64.0/18 maxlen: 24
200.71.128.0/20 maxlen: 24
200.71.144.0/20 maxlen: 24
200.71.160.0/19 maxlen: 24
2800:6b0::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865328 (0xd3430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Validity
Not Before: Mar 24 14:48:10 2021 GMT
Not After : Mar 24 14:48:10 2026 GMT
Subject: CN=a669d7f03543c4d08bba10517031a6c90235f57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:37:28:7d:af:e2:dd:88:61:6c:df:8c:3f:d4:
b2:3a:be:1d:79:eb:7e:56:79:d5:c0:f7:3f:ef:e6:
ae:ec:54:b5:ad:a8:19:97:97:ca:9c:49:ca:46:0a:
41:76:89:50:3e:55:6e:00:86:55:fb:b6:68:53:47:
91:15:e9:eb:02:ca:ac:17:a3:44:ff:b6:30:0b:9b:
66:ab:7f:14:5e:03:05:21:11:b7:32:5c:c3:28:93:
5f:0a:48:56:2b:e8:ac:93:63:c6:45:7c:5b:02:c5:
f8:fe:a0:16:54:7d:ac:1d:e8:ff:3d:de:3d:2a:21:
f7:2a:02:31:12:44:6e:eb:41:84:3f:42:fa:91:4c:
fe:bf:84:25:60:57:3e:9b:92:6a:77:9c:31:d2:0d:
6b:6a:ff:30:7d:3e:cc:f6:b0:9c:c5:dd:07:21:11:
f8:ba:61:7e:ac:ea:5e:a6:92:13:04:88:5e:dd:10:
5a:88:20:77:c1:67:88:ee:b7:8d:2b:1d:7b:42:71:
69:62:87:dc:60:ed:1d:86:0e:a4:44:de:87:69:29:
0a:11:27:14:8e:27:08:cf:86:35:33:1f:aa:85:33:
6b:72:8c:2b:9c:6c:7d:8e:10:d2:08:a7:43:97:f7:
ff:96:47:27:fe:9c:a4:9f:84:70:f7:bb:19:b9:35:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:06:52:07:C0:5C:D1:91:05:08:7D:B5:A3:9B:E3:4A:28:6A:BC:EA
X509v3 Authority Key Identifier:
keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/a669d7f03543c4d08bba10517031a6c90235f57f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.20.0.0/14
179.44.0.0/14
181.180.0.0-181.187.255.255
186.24.0.0/15
186.164.0.0-186.166.255.255
186.184.0.0/14
200.31.128.0/19
200.35.64.0/18
200.71.128.0/18
IPv6:
2800:6b0::/28
Signature Algorithm: sha256WithRSAEncryption
22:13:6b:a6:4c:0f:fe:46:e5:51:e9:e3:b4:83:bb:4e:7e:e7:
49:e2:00:3b:62:1a:59:a6:76:0c:d7:aa:19:87:5d:07:f5:06:
92:a3:a6:78:bf:2c:8e:e7:63:c3:69:7d:6f:00:12:6c:8a:7f:
bb:76:06:1b:9b:dc:56:02:82:eb:93:26:30:60:0b:33:f8:12:
df:07:76:5b:19:9b:d3:e6:03:4d:43:28:0b:67:3e:6d:51:bd:
5d:12:a0:2a:a8:2c:f7:5d:bf:a7:12:8a:79:f3:44:06:b7:2b:
df:69:39:c1:42:b1:85:5f:c8:a3:12:52:fd:97:08:8f:e0:28:
31:46:d4:da:26:a7:14:77:7f:3b:e7:8c:28:d8:05:3f:9c:d3:
a1:bf:e3:5f:02:57:ba:6e:e7:21:fe:54:a3:d4:c8:04:18:85:
5a:07:a8:8c:1b:7d:52:ec:64:77:6f:ec:02:44:6a:2a:86:c4:
cd:d3:8d:cb:fc:14:7e:d9:12:d0:5b:fa:02:21:ab:36:9a:91:
f6:67:c6:e7:98:e5:b9:33:75:56:a7:ef:bd:5d:30:76:11:a0:
db:2c:5c:84:70:eb:27:be:aa:a0:a5:2c:bb:3d:aa:52:e2:b9:
85:04:d8:8c:d4:e9:4b:76:07:74:10:08:d9:50:1b:57:c4:65:
03:fa:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org