Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/04888eff23b102776d2a23d6cfc7f2d5d44766ae.roa
File: 04888eff23b102776d2a23d6cfc7f2d5d44766ae.roa (raw, json)
Hash identifier: +mnbalkFj8wrFqTLRdrEkOACX4T0ieZ6473Yi17uPnQ=
Subject key identifier: 34:64:34:89:B0:04:6A:FB:F4:4C:5B:C0:1C:76:F1:D1:34:75:DC:AD
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 2BD93F
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/04888eff23b102776d2a23d6cfc7f2d5d44766ae.roa
Signing time: Wed 31 Jan 2024 13:52:07 +0000
ROA not before: Wed 31 Jan 2024 13:52:07 +0000
ROA not after: Sat 31 Jan 2026 13:52:07 +0000
asID: 14080
IP address blocks: 190.143.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2873663 (0x2bd93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Jan 31 13:52:07 2024 GMT
Not After : Jan 31 13:52:07 2026 GMT
Subject: CN=04888eff23b102776d2a23d6cfc7f2d5d44766ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:ad:12:e9:58:14:ec:2f:13:2e:fd:dd:a0:
70:6a:91:84:b3:2b:1c:f4:6e:7f:95:9c:0d:2d:62:
d2:f7:25:38:6a:9c:29:95:4c:cd:47:12:e2:eb:e2:
89:65:2f:07:24:26:b5:4c:1e:36:62:1d:1f:17:55:
db:92:cd:f0:ab:d4:c1:87:eb:09:58:93:fe:e1:2f:
46:2b:59:3e:f0:ff:2b:11:5b:b1:74:f9:73:30:d4:
b1:a8:30:64:1e:d5:99:9d:fb:eb:af:e0:a3:f9:39:
2f:ea:d0:92:62:3e:9c:f3:a6:fb:72:df:ce:f3:82:
2c:ee:97:68:1a:24:3b:ef:d7:95:96:b1:b8:44:94:
4b:e3:8a:04:34:75:33:15:e1:8f:10:e1:db:dd:62:
db:6b:2d:66:a0:27:64:cc:7d:1a:77:5e:76:58:82:
1f:9f:c5:8b:9e:57:df:da:22:44:3c:37:a3:0a:6c:
4e:9f:e3:fc:cd:90:da:dc:c6:5a:ad:80:ef:07:cf:
e3:0d:9d:59:a8:e9:01:5d:e5:b6:48:26:d4:39:c1:
67:0a:07:a3:6b:3b:cc:ef:30:a9:3b:fd:8c:5e:3c:
2b:a6:9b:45:97:f8:c8:58:47:3b:61:da:69:8d:4f:
51:26:f0:3f:38:58:e4:ba:9a:b3:62:b5:1c:56:fb:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:64:34:89:B0:04:6A:FB:F4:4C:5B:C0:1C:76:F1:D1:34:75:DC:AD
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/04888eff23b102776d2a23d6cfc7f2d5d44766ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.143.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:dd:bd:dc:00:d5:65:42:67:25:97:27:16:6e:14:73:72:73:
10:2f:94:38:13:b1:19:d4:aa:1b:3a:38:a9:d3:5f:ed:35:cf:
71:55:17:c6:17:d4:ee:9d:ec:4e:1e:2a:af:f5:ed:12:71:26:
b1:de:27:81:40:df:05:5b:3e:fa:8f:de:f1:d4:07:6b:79:f8:
6a:cb:c9:4c:32:84:c5:f8:da:be:0a:51:01:be:26:58:e0:e3:
1a:83:07:1d:6a:2e:1b:a2:d5:95:37:ba:89:f5:e0:d5:b0:48:
ca:ea:83:55:7a:c0:15:9c:e8:f6:ba:4a:1c:3a:7e:a4:24:57:
17:7f:4f:76:0b:1c:56:38:54:1b:6c:16:40:31:9a:bb:8c:46:
d5:df:ba:e0:94:e5:aa:76:ec:cd:be:c1:88:25:1b:24:8a:3a:
82:91:9f:5a:05:a6:70:a4:44:8b:4a:6d:e4:2f:05:b5:c1:03:
58:4e:b9:b5:ec:ea:69:c8:a2:6b:02:79:08:a7:e6:ea:f1:74:
79:4f:eb:ae:c2:45:ae:29:a5:d0:21:1b:1c:ce:c3:8a:8a:83:
62:9f:b3:35:c9:bb:3e:ea:a9:e4:6d:de:89:2c:e7:72:17:a8:
9e:c0:9b:cf:0c:b8:90:43:7a:2a:fd:16:dc:46:9c:6f:40:90:
14:ed:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org