Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/902ed5c683192d00bb05eb46d51f0c9086e27f94.roa
File: 902ed5c683192d00bb05eb46d51f0c9086e27f94.roa (raw, json)
Hash identifier: F54wKX9rfVSr1qEFOKyC8NUDNNJdEL6XmDR9Fein5QA=
Subject key identifier: E8:94:D8:55:AE:1F:85:74:18:3D:1C:4D:7B:47:3B:DC:42:60:C2:78
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 181CC0
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/902ed5c683192d00bb05eb46d51f0c9086e27f94.roa
Signing time: Tue 26 Apr 2022 08:44:43 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 28036
IP address blocks: 190.98.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580224 (0x181cc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=902ed5c683192d00bb05eb46d51f0c9086e27f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:8c:57:9f:9f:d5:52:b2:a8:9f:c3:e3:d0:
0e:19:8f:fd:c0:01:99:9c:bd:a4:76:c1:79:88:1e:
81:3a:30:d1:d1:16:22:0b:0b:72:dc:55:bf:92:7f:
2e:d9:33:93:59:3c:57:f1:93:7c:52:e8:99:57:22:
d5:83:55:8c:61:78:9a:6b:03:10:6b:8d:b8:b2:dd:
89:95:7e:7c:70:50:be:80:7b:49:45:4d:5c:c6:d6:
e8:ec:d3:dd:44:6d:a4:72:f1:1f:ea:a0:9f:8a:e2:
43:2e:68:c7:1f:92:29:f8:15:23:3a:86:8b:97:a9:
1c:eb:df:ad:ff:54:14:71:d4:90:4a:2a:de:97:fb:
0e:37:21:ce:fd:7e:27:4e:e1:a9:93:6f:e8:84:cd:
68:4a:b1:83:b6:17:fc:9a:9a:72:59:77:b7:26:1c:
5b:61:72:51:89:a8:bf:af:48:14:06:8a:9d:0d:dc:
09:8a:4d:4c:26:45:4b:46:56:50:ba:eb:3c:0c:3a:
91:a3:64:1d:42:a1:6a:22:cc:ba:c8:c4:de:d8:8c:
a8:4a:32:fe:06:77:7b:4e:65:6e:0b:e9:88:08:9e:
dc:4d:1a:73:e5:7c:22:e6:33:04:46:d2:39:70:dd:
9d:b0:85:19:52:22:38:6d:18:de:e9:22:00:93:0b:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:94:D8:55:AE:1F:85:74:18:3D:1C:4D:7B:47:3B:DC:42:60:C2:78
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/902ed5c683192d00bb05eb46d51f0c9086e27f94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.98.136.0/22
Signature Algorithm: sha256WithRSAEncryption
54:1b:57:b1:74:83:99:a4:e8:5a:c1:0b:ee:98:49:02:e6:52:
29:7b:1d:57:2e:cb:59:79:00:73:5d:53:1a:99:ce:36:c8:66:
21:e6:11:ae:12:0e:06:c9:5f:21:c0:1e:bf:72:7a:a2:6a:37:
ff:63:25:77:0c:1a:9a:74:b6:82:81:51:0e:05:aa:5b:88:b0:
ad:f6:6c:4a:d0:a9:e1:4e:98:6a:c0:cf:d8:f9:19:33:d6:b1:
11:48:ac:bf:a9:a7:21:a9:65:0f:1b:92:19:2d:63:87:33:20:
f5:f9:fa:0d:da:1b:14:14:6b:4a:39:43:fb:0a:31:8e:ca:e0:
69:84:5b:ae:fc:59:4e:37:2f:4e:3a:e4:fd:8c:1a:3b:04:fa:
1d:60:5b:c7:40:d8:69:d0:c2:ca:62:bd:b3:62:b9:69:d6:a6:
54:4c:2c:e5:e9:71:33:5c:c2:01:39:6d:1b:7c:84:a1:b4:3f:
09:87:89:13:9a:d4:1c:c5:27:4c:49:04:2b:a3:7f:dc:e4:ae:
12:87:0f:7c:20:d4:e1:c6:ac:c5:f7:b9:9c:24:db:fe:1f:86:
70:6b:17:21:b5:cf:3e:75:98:1b:55:bf:cc:32:23:47:02:d6:
c8:83:54:c5:e8:eb:25:d9:78:40:ea:e3:d3:09:4d:7b:60:92:
7d:5a:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org