Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/dc9a53feb9aeff6f077af83f5c356f1a0fc3734b.roa
File: dc9a53feb9aeff6f077af83f5c356f1a0fc3734b.roa (raw, json)
Hash identifier: msG1nl8UzpFqkP2ScpXU17afYQIuRnQW2rfzizOXXJ4=
Subject key identifier: 23:CB:26:CB:DA:A0:FB:2B:89:9A:2A:02:04:C7:11:EA:02:CB:D8:A0
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DF06E
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/dc9a53feb9aeff6f077af83f5c356f1a0fc3734b.roa
Signing time: Thu 07 Dec 2023 12:43:03 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 64099
IP address blocks: 190.228.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010670 (0x2df06e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=dc9a53feb9aeff6f077af83f5c356f1a0fc3734b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:78:c0:31:f7:63:d7:39:f1:ca:f8:db:d5:
4a:9b:be:8e:f3:f9:ab:56:c7:dc:79:0d:22:86:d8:
67:ae:c9:b3:59:3d:04:74:66:26:8b:82:90:63:73:
0d:f7:c3:09:dc:c6:a7:50:9c:24:93:70:b6:bb:6f:
20:9d:59:32:a2:eb:c7:1d:86:13:68:46:99:6f:5c:
54:a6:7c:bf:06:68:8f:19:0c:f2:b3:3a:85:96:b9:
fe:a8:ce:fd:df:40:42:76:fa:d9:19:d9:05:a7:e7:
f2:23:37:8e:47:47:3c:04:71:95:df:0c:8c:14:64:
9a:24:45:7f:00:7b:ce:94:a9:95:db:37:1e:a0:92:
96:71:99:45:5c:50:1c:0c:ac:dc:7f:ed:ca:18:25:
a3:ab:1e:69:43:da:5c:be:f9:e7:d8:b7:48:3c:d0:
c1:84:ad:93:d7:fd:f3:81:dc:5a:7b:79:01:07:87:
2a:89:54:2e:e3:68:14:62:2d:cd:0a:7d:b6:c1:9d:
50:c1:6c:c3:5f:08:e1:fa:e8:5c:00:fd:47:25:d5:
03:03:d1:d9:a6:ec:fb:df:e8:d4:13:46:57:68:c0:
7a:15:68:10:e0:65:55:8b:95:bd:d9:a1:b2:4f:b1:
03:1c:4b:4f:23:f9:af:1c:5c:02:13:3a:3c:13:a0:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CB:26:CB:DA:A0:FB:2B:89:9A:2A:02:04:C7:11:EA:02:CB:D8:A0
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/dc9a53feb9aeff6f077af83f5c356f1a0fc3734b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.228.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1c:6d:75:1f:b5:d9:30:c7:e2:e2:6a:82:d3:68:83:bb:6f:
dd:1b:b8:06:c1:f3:75:38:79:6d:cc:6b:c0:d2:d0:87:7a:2c:
0f:ba:e0:ec:90:da:e7:16:00:3a:90:9c:de:e5:8d:88:44:b1:
6e:64:cf:d6:70:da:29:ab:48:1f:9c:91:8d:97:53:7c:21:c7:
39:59:38:c7:b0:e4:44:f4:5e:e2:0a:30:7d:bb:09:fd:2c:48:
b5:da:e2:29:79:bf:66:32:ae:1f:6f:f1:10:9a:d0:e9:c9:c0:
f0:6e:4c:87:92:ae:c5:3d:d2:60:fc:10:0f:ed:84:26:fe:df:
fd:9f:56:a4:2b:bc:5a:cc:fe:41:65:1c:d0:61:ac:7c:7a:9e:
ba:7c:95:70:d6:98:a2:1d:df:46:72:a2:05:f5:68:c0:e1:e7:
50:4c:62:ab:50:b7:57:62:9e:59:36:2b:ea:f8:8b:e0:04:00:
f4:38:eb:63:2f:51:f5:3e:15:25:4d:03:95:bd:27:87:92:20:
06:0e:aa:1d:8b:1b:86:95:96:6b:5d:47:4f:48:cc:0a:5a:72:
3d:b8:26:46:d5:99:0b:e0:d3:4f:d4:2c:6e:ba:c3:95:54:45:
1d:9b:0d:b5:d4:36:4c:3e:8a:fc:dd:c7:f4:b4:dd:6a:0c:79:
0b:ff:8d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org