Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/ffe991baa899faf576e4fd5dcabd67b7fb18495b.roa
File: ffe991baa899faf576e4fd5dcabd67b7fb18495b.roa (raw, json)
Hash identifier: wcFmtFGNUVhAMdUQLtl04WS/zlOtOl90jy7+7uvCkzg=
Subject key identifier: DD:78:88:D9:25:CA:D5:5F:61:90:AE:89:2C:99:BE:BF:69:11:32:29
Certificate issuer: /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial: 254F1A
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/ffe991baa899faf576e4fd5dcabd67b7fb18495b.roa
Signing time: Fri 17 Nov 2023 21:06:21 +0000
ROA not before: Fri 17 Nov 2023 21:06:21 +0000
ROA not after: Mon 17 Nov 2025 21:06:21 +0000
asID: 6306
IP address blocks: 186.24.0.0/22 maxlen: 22
186.24.12.0/22 maxlen: 22
186.24.16.0/20 maxlen: 20
186.24.32.0/19 maxlen: 20
186.24.64.0/20 maxlen: 20
186.24.128.0/17 maxlen: 24
186.25.0.0/16 maxlen: 17
186.164.0.0/15 maxlen: 15
186.184.0.0/14 maxlen: 15
200.31.138.0/24 maxlen: 24
200.71.136.0/21 maxlen: 22
200.71.144.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445082 (0x254f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Validity
Not Before: Nov 17 21:06:21 2023 GMT
Not After : Nov 17 21:06:21 2025 GMT
Subject: CN=ffe991baa899faf576e4fd5dcabd67b7fb18495b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:c4:91:72:97:19:6f:f4:06:56:c0:cb:70:
3d:3f:46:a8:d3:1d:1b:58:c8:ec:43:2a:46:f4:f3:
ff:eb:5d:e8:51:61:65:8e:5d:56:b2:a3:a4:7e:2c:
ab:7d:ca:45:42:19:e2:d8:1e:98:fe:33:45:30:eb:
59:b2:5d:67:b0:d6:4b:b5:32:69:41:2c:8c:4f:60:
18:16:65:bb:3f:7b:4a:55:c4:9a:9f:db:f1:1e:dd:
85:95:d6:71:09:5b:cd:ec:41:7e:38:24:e3:64:7f:
c6:ca:b2:5f:54:15:61:4d:9a:f4:1b:75:3c:ba:e6:
b7:61:a8:7e:e5:75:52:c9:55:02:4f:8e:3b:91:61:
70:fb:94:41:9d:a3:01:2f:10:bc:c2:b4:55:8a:b4:
64:c6:eb:5e:1f:42:53:fb:3b:86:92:95:04:6a:d7:
a3:98:8a:8e:fa:e4:cd:de:42:e4:d1:03:bb:e4:ae:
e7:36:f6:08:93:4e:26:19:54:1c:c0:6b:af:e8:b0:
d0:b5:03:f1:e1:db:61:94:16:22:55:70:fc:b7:7b:
28:40:d2:43:1c:40:d1:3e:4f:f2:f3:43:f9:85:07:
29:ab:9a:b8:38:e3:bc:e8:15:44:e5:18:38:9f:ae:
c6:c3:0e:cf:5d:c8:ea:51:a5:5e:a9:d8:77:f4:6e:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:78:88:D9:25:CA:D5:5F:61:90:AE:89:2C:99:BE:BF:69:11:32:29
X509v3 Authority Key Identifier:
keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/ffe991baa899faf576e4fd5dcabd67b7fb18495b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.24.0.0/22
186.24.12.0-186.24.79.255
186.24.128.0-186.25.255.255
186.164.0.0/15
186.184.0.0/14
200.31.138.0/24
200.71.136.0-200.71.159.255
Signature Algorithm: sha256WithRSAEncryption
53:29:7b:f5:26:45:48:f7:56:91:67:6f:ca:d9:9a:94:ca:ae:
e6:9c:c4:4a:d2:96:2f:48:90:4a:03:7a:c0:e1:95:f6:40:07:
ff:52:36:58:2a:4f:ce:71:dc:b9:f0:f3:a6:bb:5a:3d:b9:f7:
bb:8e:59:13:98:74:6a:bd:a6:6b:22:36:80:fa:d3:e2:ef:4c:
39:1e:f2:50:f9:5e:29:3a:92:99:fe:93:3b:cd:d5:65:9c:6a:
3f:1d:ea:b7:c2:74:6e:b9:bc:70:4b:40:af:bf:1e:3e:1f:0d:
9a:ac:d5:aa:a5:d8:f6:d6:3e:3e:13:1f:f2:5b:02:ca:7b:3a:
85:cc:cd:19:3f:81:16:3b:8d:05:64:47:f7:0c:02:41:62:1b:
3f:9d:bc:87:64:29:d7:7c:16:7f:f0:25:77:9d:0b:86:f6:22:
b7:f1:54:51:6c:b8:d3:a0:9f:a5:0e:0e:fc:bd:87:09:4e:95:
50:a9:03:3f:d7:43:73:d2:2d:98:82:b4:ac:74:d0:fb:2f:01:
4b:da:5a:00:81:68:39:08:6e:b1:a2:30:65:ca:9c:27:7b:1c:
26:4e:02:0a:33:22:26:cb:19:db:2f:6b:09:fc:31:42:bd:7e:
88:22:3c:cc:37:1d:2a:5e:34:10:56:da:d7:85:fd:9a:f3:a1:
27:88:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org