Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/4e6931f53600510c5e10cde97428abd048592b1c.roa
File: 4e6931f53600510c5e10cde97428abd048592b1c.roa (raw, json)
Hash identifier: Wdu9POz3aty7wksIBZtzsRcaZq3np17LXy0ThSIyQkY=
Subject key identifier: BC:15:A9:6F:1B:20:7F:38:4A:11:FB:28:37:A1:F5:90:A6:6F:A0:0A
Certificate issuer: /CN=4f4a3f6a5dda9af6f797130aab25f404e1f2bead
Certificate serial: 29A92D
Authority key identifier: FC:51:EC:49:E9:2D:C6:1B:08:AF:9B:C8:D8:AD:42:E9:4D:B7:4C:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f4a3f6a5dda9af6f797130aab25f404e1f2bead.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/4e6931f53600510c5e10cde97428abd048592b1c.roa
Signing time: Mon 01 Apr 2024 18:51:27 +0000
ROA not before: Mon 01 Apr 2024 18:51:26 +0000
ROA not after: Sun 01 Apr 2029 18:51:26 +0000
asID: 263812
IP address blocks: 170.80.108.0/22 maxlen: 24
138.186.140.0/22 maxlen: 24
45.228.67.0/24 maxlen: 24
190.103.176.0/22 maxlen: 24
2800:ba0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2730285 (0x29a92d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4a3f6a5dda9af6f797130aab25f404e1f2bead
Validity
Not Before: Apr 1 18:51:26 2024 GMT
Not After : Apr 1 18:51:26 2029 GMT
Subject: CN=4e6931f53600510c5e10cde97428abd048592b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:cd:eb:9a:89:af:8e:2a:43:93:42:0b:63:
ca:9e:6d:57:ca:67:30:80:1d:37:14:28:4a:76:a0:
8b:f3:40:dc:b5:9a:7a:ee:f1:0d:da:66:2f:e4:aa:
c7:48:d3:cd:90:2b:ad:92:d0:0a:66:08:17:d0:54:
30:c5:dc:b2:8e:c5:ba:72:a5:3d:ac:68:39:b2:4a:
44:19:a2:45:34:39:99:e5:7a:78:a9:6e:2d:26:fb:
67:a5:c7:b4:35:46:98:05:4a:31:fc:d9:e6:80:8d:
d0:96:6b:ea:60:e5:6f:40:e4:ef:14:8f:09:77:55:
f8:00:fc:27:08:8d:01:c3:e8:2b:19:c5:78:88:84:
9e:3f:b9:68:c4:c6:46:ba:96:18:0a:56:39:76:5b:
92:f9:ec:35:41:3b:36:8b:fa:52:67:7c:29:50:c8:
f1:06:02:70:24:53:fb:df:8e:22:87:d6:65:70:30:
fe:ec:23:3b:98:64:11:31:eb:d0:91:38:a7:8e:71:
41:eb:ae:7a:5b:67:3c:93:8a:25:e2:79:75:fd:56:
a0:bf:08:00:79:95:7d:8f:77:68:1b:e2:8d:1a:e3:
9b:d8:47:9a:05:83:55:ac:eb:91:e6:e8:ed:06:91:
de:a3:b1:f1:ba:da:04:d4:12:9a:6c:51:97:f0:d1:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:15:A9:6F:1B:20:7F:38:4A:11:FB:28:37:A1:F5:90:A6:6F:A0:0A
X509v3 Authority Key Identifier:
keyid:FC:51:EC:49:E9:2D:C6:1B:08:AF:9B:C8:D8:AD:42:E9:4D:B7:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f4a3f6a5dda9af6f797130aab25f404e1f2bead.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/4e6931f53600510c5e10cde97428abd048592b1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/4f4a3f6a5dda9af6f797130aab25f404e1f2bead.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.67.0/24
138.186.140.0/22
170.80.108.0/22
190.103.176.0/22
IPv6:
2800:ba0::/32
Signature Algorithm: sha256WithRSAEncryption
93:9f:c0:fe:89:a9:00:71:64:b1:57:51:e6:87:c8:ca:a1:18:
8c:5d:81:73:ef:3c:66:c7:b4:f7:6c:9f:96:d3:46:ea:de:10:
0b:78:9c:2a:d5:86:a8:90:1f:32:3d:24:e9:6f:99:fe:1e:e3:
c3:e9:c9:9a:bc:e0:e4:b5:0b:51:a9:7d:96:c4:5a:cf:b3:b4:
25:28:8c:7f:69:f1:35:4f:9d:61:42:08:a9:ff:f3:60:42:c3:
df:d5:dd:94:c0:be:58:63:5b:13:c2:a9:ac:0f:fa:cc:c0:1b:
31:40:c8:06:8b:61:82:b4:2c:6c:f6:be:6f:ad:d0:53:12:5e:
c0:38:f7:4e:12:3d:f2:21:d4:26:95:ef:29:1f:76:a5:02:13:
4e:7d:36:11:b1:d6:97:31:4d:04:45:30:c9:89:53:73:b9:d7:
64:3b:26:8c:06:07:4a:1c:23:69:56:fc:b8:b9:ab:6d:e6:07:
ac:78:4f:87:90:99:90:f9:ca:3b:80:c5:f4:79:9d:5f:62:19:
6b:cd:4e:1a:d0:cb:3b:46:e7:41:5a:bd:d8:cb:0d:d4:c6:81:
89:f1:56:30:42:63:64:a5:56:89:27:97:34:02:84:73:9c:e9:
29:21:2d:33:cb:b8:f0:d5:35:5b:31:49:0e:cd:b7:c0:ad:42:
c6:b3:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org