Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5a371adb7c9109f4cd566336d142a55db61f04ed.roa
File: 5a371adb7c9109f4cd566336d142a55db61f04ed.roa (raw, json)
Hash identifier: vC5xvyLXtMa3BXDDtvJRtlnSmaEAflpoS0ek7iuYn6s=
Subject key identifier: A4:5D:4C:50:89:EC:41:70:7D:82:DE:D8:E4:10:78:60:4A:95:D7:AB
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 24E31C
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5a371adb7c9109f4cd566336d142a55db61f04ed.roa
Signing time: Fri 12 May 2023 17:07:36 +0000
ROA not before: Thu 11 May 2023 17:07:36 +0000
ROA not after: Mon 12 May 2025 17:07:36 +0000
asID: 14080
IP address blocks: 190.144.128.0/18 maxlen: 24
190.144.192.0/19 maxlen: 24
186.86.0.0/16 maxlen: 24
190.147.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2417436 (0x24e31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: May 11 17:07:36 2023 GMT
Not After : May 12 17:07:36 2025 GMT
Subject: CN=5a371adb7c9109f4cd566336d142a55db61f04ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1c:94:f8:7d:96:8a:b9:6f:05:05:2c:30:a1:
bf:36:39:f1:ac:58:0e:d0:db:34:ff:51:cd:cb:38:
8f:4f:46:f0:4b:25:e8:4a:a8:cc:be:44:7e:87:de:
32:7f:28:a6:c6:49:2e:d2:39:f7:47:18:2c:f7:9e:
35:e5:87:fe:b6:8a:9f:65:cb:1e:5f:85:3f:50:86:
cc:bb:b5:9a:11:9e:9e:0c:85:fe:9b:86:23:df:74:
9a:bb:fa:58:4f:ad:4b:73:f2:ec:7b:31:1d:e2:87:
bf:f4:92:d4:02:22:47:49:4a:78:08:78:dc:13:d3:
35:4b:63:31:18:6d:41:50:51:ae:f4:7c:7c:c7:87:
26:43:3a:40:10:55:cf:e8:de:26:c6:37:3c:2c:1b:
76:c6:a2:9a:6a:9f:d4:35:7a:55:07:1d:50:88:52:
5d:b8:6b:d2:25:e3:02:a7:f2:3a:b6:6a:fd:38:f6:
b8:aa:71:39:24:a2:62:c0:40:e5:35:88:54:69:63:
41:fd:ba:6d:e0:d1:73:96:b9:ab:32:00:ac:ac:b3:
7c:2e:15:72:97:03:bf:d3:24:df:4e:e3:4a:30:de:
5e:7c:27:03:db:df:8c:0c:c9:2a:61:43:74:4d:8d:
8c:9a:66:8d:32:a1:4b:a7:f2:83:27:76:03:da:38:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5D:4C:50:89:EC:41:70:7D:82:DE:D8:E4:10:78:60:4A:95:D7:AB
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5a371adb7c9109f4cd566336d142a55db61f04ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.86.0.0/16
190.144.128.0-190.144.223.255
190.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:d4:6e:08:3b:4c:78:a6:29:ab:8d:25:53:4a:79:97:75:99:
39:46:00:6d:23:73:4a:9c:23:86:4e:e5:48:e1:0a:04:56:45:
01:9d:87:95:3c:64:26:19:6e:a9:83:03:41:0c:d1:bb:c2:86:
13:4a:92:c5:83:3d:d7:8e:87:65:75:1c:af:df:92:45:b7:14:
80:68:9d:3b:86:66:3c:6f:02:f3:20:47:36:5f:d3:b9:fe:5b:
db:67:f4:a2:ae:0d:8d:9e:eb:8a:2d:40:8d:25:da:b6:d2:f2:
87:eb:d6:3c:73:d4:1d:ea:02:59:9a:75:48:5f:f9:55:ca:2f:
53:91:34:64:e6:af:21:27:5d:fa:25:eb:ec:21:b2:bd:da:6a:
af:20:52:9f:48:f2:cc:d2:44:e6:40:c8:da:67:3a:f5:af:9d:
09:13:58:4a:5c:02:5a:5b:3e:8e:66:85:f4:a8:08:75:27:79:
60:30:2c:91:6c:f7:b0:09:b4:61:c8:27:b4:5a:fe:ac:bd:f9:
a5:87:15:3b:6a:82:be:f0:89:e1:86:db:2f:77:1b:34:0b:52:
97:57:5b:d6:6f:b2:dd:6d:97:00:31:3a:75:bb:6c:c2:53:ef:
a4:49:69:a8:39:a8:39:2c:54:0b:d9:92:2b:41:1b:17:9c:49:
96:db:45:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org