Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5963e729414e420ba13735ba0f859dcebd8e789d.roa
File: 5963e729414e420ba13735ba0f859dcebd8e789d.roa (raw, json)
Hash identifier: 4iELitS+pgJ+DGm6MScKcH9zY/ncPoS0C0rMdMgvgSQ=
Subject key identifier: C4:17:C2:A6:8E:C4:40:5C:6C:DD:7D:1E:0D:FF:AE:22:94:81:7F:E5
Certificate issuer: /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial: 2D3227
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5963e729414e420ba13735ba0f859dcebd8e789d.roa
Signing time: Sun 17 Mar 2024 18:42:36 +0000
ROA not before: Sun 17 Mar 2024 18:42:19 +0000
ROA not after: Sat 17 Mar 2029 18:42:19 +0000
asID: 10620
IP address blocks: 190.143.64.0/18 maxlen: 24
190.144.177.0/24 maxlen: 24
190.144.128.0/18 maxlen: 24
190.144.196.0/24 maxlen: 24
190.144.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2961959 (0x2d3227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
Validity
Not Before: Mar 17 18:42:19 2024 GMT
Not After : Mar 17 18:42:19 2029 GMT
Subject: CN=5963e729414e420ba13735ba0f859dcebd8e789d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:c9:2e:70:16:8b:29:10:ec:08:59:98:c1:
1c:20:68:a0:d9:aa:8f:11:71:16:22:cb:d6:21:67:
7a:ab:ed:06:be:59:bc:f6:f0:7d:1a:0b:33:2e:30:
58:ba:a9:88:8b:41:85:79:2a:f0:f6:f8:0f:e4:bb:
a7:37:94:c6:8e:d6:4c:e2:8e:54:c7:a8:67:2c:cf:
95:42:93:5e:d9:93:9c:b3:bc:cb:83:5b:79:3b:d1:
3b:75:62:54:53:bf:39:95:43:29:76:b3:bd:61:b0:
ce:3b:31:b8:4c:7e:42:4a:19:da:ea:87:9f:79:ad:
ac:c2:46:c1:30:48:30:5c:26:0e:14:be:bc:72:8a:
25:ac:7c:87:4e:17:aa:7e:09:46:e4:9d:b4:18:ed:
ba:ce:3b:b3:73:16:14:66:dc:41:30:8f:94:17:3c:
08:c6:c1:07:8c:f6:5f:d5:6f:ef:7f:24:4c:e1:ec:
cd:35:77:30:a4:02:84:a9:b0:79:8d:98:05:c1:be:
21:56:81:c9:90:aa:b7:61:f4:11:12:9f:d3:73:cb:
b6:ae:ed:23:b1:ec:42:9b:4a:12:e4:1d:43:f7:e8:
b0:c9:01:6f:80:24:ba:07:aa:83:73:80:22:e2:a9:
07:e4:32:eb:5f:7f:c0:4a:77:ef:0c:c5:21:3b:1b:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:17:C2:A6:8E:C4:40:5C:6C:DD:7D:1E:0D:FF:AE:22:94:81:7F:E5
X509v3 Authority Key Identifier:
keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5963e729414e420ba13735ba0f859dcebd8e789d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.143.64.0/18
190.144.128.0-190.144.223.255
Signature Algorithm: sha256WithRSAEncryption
48:64:67:f3:ce:c8:5f:b6:f3:0d:79:1a:fb:b7:0c:29:0a:9d:
20:7b:9e:c6:ad:9e:22:cf:1f:a0:29:61:ab:39:06:c7:d0:a5:
8f:74:67:27:f4:1c:3a:6f:da:41:79:55:d4:8f:7d:4e:a0:10:
60:41:72:6d:51:61:7b:11:9a:a6:7a:9a:2d:9e:65:d5:63:50:
3a:4b:98:6c:c0:39:8d:0b:5d:dd:9a:7e:f1:fd:d9:95:db:52:
62:8c:b8:b4:a7:d3:bc:9e:1e:33:39:c6:d9:23:2f:2e:57:1f:
1d:33:a0:54:97:98:4a:d0:53:cc:5f:f6:a6:91:3f:75:23:3e:
87:81:b1:dd:03:1f:ab:57:74:ff:22:b9:15:fe:37:00:7f:08:
18:7c:7d:ba:ae:fc:fb:60:c9:0d:b0:53:62:b3:f8:8b:a2:bb:
c1:49:3c:ff:05:c0:65:b8:8b:44:97:2c:fd:5d:70:55:fe:0b:
cd:0e:07:c4:c2:4f:9f:40:fc:6d:05:d0:7a:a0:cf:81:cd:49:
e0:45:08:ac:f8:6b:ff:88:ab:95:73:09:65:2f:c2:dd:86:8e:
12:38:69:51:af:44:e0:c0:4c:ac:6a:b4:57:95:d4:db:13:cd:
a4:0a:1a:bc:e0:c3:4b:22:58:13:6c:71:87:f4:2b:dd:dd:2f:
d2:b4:93:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org