Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/089aa0a75a446f5d15d44496f5159584da4248a3.roa
File: 089aa0a75a446f5d15d44496f5159584da4248a3.roa (raw, json)
Hash identifier: R2Sg9yQaGpe7f0EYGrBEBlvR/Af+C71/23D7fCgOJhY=
Subject key identifier: 2D:C3:C3:08:D8:AC:3B:78:D0:0D:D4:BD:05:88:ED:FD:2E:95:52:50
Certificate issuer: /CN=e8e60ce967bb3600b1ab69a25627f26d48b06694
Certificate serial: 212635
Authority key identifier: 02:F3:E8:5B:88:E9:BB:34:88:F5:9A:4E:52:5C:EC:64:B5:66:AE:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8e60ce967bb3600b1ab69a25627f26d48b06694.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/089aa0a75a446f5d15d44496f5159584da4248a3.roa
Signing time: Mon 05 Jun 2023 22:08:49 +0000
ROA not before: Sun 04 Jun 2023 22:08:49 +0000
ROA not after: Thu 05 Jun 2025 22:08:49 +0000
asID: 28048
IP address blocks: 190.112.64.0/18 maxlen: 23
200.91.32.0/21 maxlen: 24
2803:ea80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172469 (0x212635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e60ce967bb3600b1ab69a25627f26d48b06694
Validity
Not Before: Jun 4 22:08:49 2023 GMT
Not After : Jun 5 22:08:49 2025 GMT
Subject: CN=089aa0a75a446f5d15d44496f5159584da4248a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:4b:97:ee:7e:cc:9a:ef:01:c5:db:cb:8b:
dc:28:08:03:2a:07:bb:11:17:2e:71:95:9a:32:64:
b3:1b:62:fa:31:26:31:ac:7a:5c:00:cb:dc:39:46:
0d:1a:a6:e9:85:28:49:5f:b6:fe:32:dc:88:ed:e4:
02:e5:07:b0:40:23:52:d6:7d:c5:4c:bc:04:f2:b1:
58:16:34:40:71:18:3e:98:8c:19:2e:08:60:bb:09:
5a:62:f5:12:5e:b5:43:25:b6:34:c2:58:4c:7e:89:
3f:95:a4:a8:50:b0:16:20:65:a4:47:24:4b:78:1b:
e6:7a:56:78:6f:83:a9:f0:c3:76:29:6c:4f:cb:03:
12:1e:d5:b0:2f:fc:be:e7:9f:0d:29:73:e3:05:0f:
fb:7f:5f:d8:9f:69:14:f7:66:b4:b9:c0:00:dc:2e:
a3:e4:fc:4b:1e:9b:b0:31:3c:6d:a4:f4:35:67:7d:
0f:65:62:26:3b:79:3a:5f:61:1b:34:65:81:7f:a5:
ce:5d:1c:43:2f:b8:65:01:12:9b:be:6d:b2:85:7b:
f6:69:3d:e0:83:1a:bd:4a:a7:82:52:40:9a:32:d6:
e8:6e:52:4c:cf:e5:a1:7e:c3:11:93:b3:62:7d:26:
e3:7f:3d:0c:77:ce:e6:fc:39:6b:38:ed:99:82:d7:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C3:C3:08:D8:AC:3B:78:D0:0D:D4:BD:05:88:ED:FD:2E:95:52:50
X509v3 Authority Key Identifier:
keyid:02:F3:E8:5B:88:E9:BB:34:88:F5:9A:4E:52:5C:EC:64:B5:66:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8e60ce967bb3600b1ab69a25627f26d48b06694.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/089aa0a75a446f5d15d44496f5159584da4248a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/e8e60ce967bb3600b1ab69a25627f26d48b06694.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.64.0/18
200.91.32.0/21
IPv6:
2803:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
1d:4c:1e:ec:76:8f:3c:96:ea:e4:13:8c:83:84:b2:84:48:8a:
1e:0f:88:7f:96:af:c3:31:de:96:ec:93:83:b5:d1:75:39:44:
11:55:79:a8:ca:f4:6d:33:29:c7:9e:84:b6:b6:0a:4b:1f:12:
9c:1a:98:fb:29:fa:f2:30:13:de:e4:c1:f0:cd:58:da:96:da:
83:d2:cb:0e:79:01:d5:98:73:d3:a1:c0:6c:da:3e:85:7b:13:
58:28:98:95:85:e3:61:ac:cf:06:c1:c7:db:e2:19:94:51:c4:
6d:16:b0:b8:00:a6:f1:0d:b0:57:e5:51:da:c0:47:a5:8b:cf:
6e:55:80:52:64:0b:24:ae:36:31:f1:e9:35:47:a9:e0:8d:77:
fe:93:9f:5a:e2:51:28:73:ab:b3:2d:3b:83:a0:b1:b8:bf:15:
86:75:27:6a:40:5f:4c:85:5d:ee:61:3d:9d:d7:43:45:a0:b8:
69:95:27:f4:0b:be:6d:7d:e9:a1:1b:73:b1:2b:da:eb:c3:da:
ed:dc:43:db:c3:f7:1c:ac:b8:82:6e:c5:9a:da:06:32:d2:d6:
3c:c6:8c:61:ea:d0:e1:38:60:01:a4:82:ee:2f:da:5b:be:4b:
01:90:ed:17:a3:e4:52:88:9a:f7:42:8b:2b:9a:c3:d0:26:0c:
31:5e:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org