Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0a87d368e88f9b6e5927ab3ab3c60b98ed3f709d.roa
File: 0a87d368e88f9b6e5927ab3ab3c60b98ed3f709d.roa (raw, json)
Hash identifier: kuj7rULNrxmXh6unxCl1Isr0WP1Z3TBYdHFZbMijoYc=
Subject key identifier: A7:17:CD:EC:2F:A6:25:29:4A:93:04:A9:08:BF:58:38:42:5C:36:EB
Certificate issuer: /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial: 2E2106
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0a87d368e88f9b6e5927ab3ab3c60b98ed3f709d.roa
Signing time: Sun 17 Mar 2024 18:46:42 +0000
ROA not before: Sun 17 Mar 2024 18:42:19 +0000
ROA not after: Sat 17 Mar 2029 18:42:19 +0000
asID: 14080
IP address blocks: 190.156.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3023110 (0x2e2106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
Validity
Not Before: Mar 17 18:42:19 2024 GMT
Not After : Mar 17 18:42:19 2029 GMT
Subject: CN=0a87d368e88f9b6e5927ab3ab3c60b98ed3f709d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:ba:a5:33:78:83:f3:2f:ca:fe:6d:1c:9d:
e7:b7:bc:7e:d5:2b:3f:e6:46:0b:f6:a0:40:be:16:
ea:fe:59:d3:e7:bd:28:a1:3d:e8:98:a2:dc:bb:17:
4b:c9:5b:6d:d2:c9:e0:e9:e8:13:b9:03:d6:b5:23:
18:b5:f7:ef:a6:71:b3:43:f1:33:e8:5f:e9:e4:f1:
8e:cf:88:cd:c6:f7:b7:89:24:09:69:70:c4:d6:4d:
dd:86:ab:37:50:ec:50:15:7e:b2:40:6d:05:47:b5:
ff:93:4d:b2:a6:c3:51:3d:80:3e:5c:72:4e:bb:41:
60:71:1b:55:9e:9b:64:12:bd:0f:f2:82:6f:d1:3d:
c3:2a:76:d2:05:55:a2:e8:50:34:0c:f8:fe:cb:21:
f4:07:a7:8f:91:86:15:92:f0:70:f0:61:53:64:e0:
ca:87:63:dc:53:df:92:df:8b:db:50:0a:f2:f5:73:
e7:0c:97:c2:cc:8b:20:97:e8:eb:96:9f:de:a1:89:
d6:e8:c3:89:52:7c:dd:52:3f:20:82:04:34:1e:7c:
e8:79:1b:ec:07:ff:4b:99:2a:5d:f5:4d:91:e1:62:
36:0d:9e:84:84:05:d6:aa:4e:65:71:e5:b5:93:36:
65:9c:ab:60:5c:34:53:85:e4:cf:e3:3c:6b:20:25:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:17:CD:EC:2F:A6:25:29:4A:93:04:A9:08:BF:58:38:42:5C:36:EB
X509v3 Authority Key Identifier:
keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0a87d368e88f9b6e5927ab3ab3c60b98ed3f709d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.156.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:7a:e9:b8:26:d1:69:96:e4:45:78:2b:0f:17:b6:ae:7a:30:
92:a0:69:f8:d8:a0:cc:e7:0b:36:33:0f:31:2c:62:85:8d:2d:
cd:0b:23:7e:53:1f:d2:49:79:2d:35:13:5d:23:34:f8:7b:ec:
85:f8:d0:db:1a:d2:2f:4d:a3:35:16:e7:40:8b:8c:4b:46:bf:
09:b8:0b:d3:e0:51:1a:88:a9:d7:dd:15:f6:a6:d4:e9:4e:03:
da:7e:38:10:0f:2b:5a:fa:8c:bf:93:b1:99:1d:a3:11:0b:58:
5f:6d:f0:08:da:09:21:c8:9f:12:34:82:3d:f1:37:7a:89:ce:
2c:9d:74:43:ac:f9:66:fe:14:31:48:b8:f2:2c:30:13:c4:b7:
bb:a8:58:30:4b:35:db:06:27:f1:be:50:ec:8a:26:2b:7b:cf:
ac:53:99:1e:1b:44:1e:43:5e:17:7c:bc:1b:c2:95:47:21:8b:
ee:78:1a:d0:d7:d7:2c:98:78:3b:42:96:6f:84:42:fb:98:0f:
68:fc:12:74:56:fe:90:60:2b:38:47:34:bc:7c:63:aa:94:5c:
20:b4:af:02:5d:f5:8e:29:9c:09:34:a5:82:d6:10:5a:53:3c:
20:f1:5b:16:d5:d0:57:95:81:3f:9a:0f:1e:29:c7:68:46:82:
fa:05:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org