Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e2ec50d91be1ab3cc64ce1ef1acebe4c3f483b1c.roa
File: e2ec50d91be1ab3cc64ce1ef1acebe4c3f483b1c.roa (raw, json)
Hash identifier: 4oKmXtlzyQuT94CV53sbK0hWq4a5VGZMKPRD8Jv+0EQ=
Subject key identifier: 0A:F0:1F:24:1B:B5:25:4E:1A:9B:0B:24:E0:62:F2:B0:1B:D6:25:1F
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 24400E
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e2ec50d91be1ab3cc64ce1ef1acebe4c3f483b1c.roa
Signing time: Thu 20 Apr 2023 03:23:30 +0000
ROA not before: Wed 19 Apr 2023 03:23:30 +0000
ROA not after: Sun 20 Apr 2025 03:23:30 +0000
asID: 14080
IP address blocks: 190.158.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2375694 (0x24400e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Apr 19 03:23:30 2023 GMT
Not After : Apr 20 03:23:30 2025 GMT
Subject: CN=e2ec50d91be1ab3cc64ce1ef1acebe4c3f483b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:69:00:a5:5a:75:71:39:1b:d1:53:a2:4d:
40:2e:e2:2d:7e:01:9b:11:e8:fb:47:35:3d:5b:0b:
3e:7c:a7:f9:ee:3f:d9:df:86:eb:ba:c7:ad:c9:15:
d9:59:b5:bb:91:c1:f9:2c:f9:c9:c4:c5:1d:de:e5:
18:9f:a0:e5:9a:97:d5:1e:e1:9c:3a:52:f0:08:05:
3e:87:c2:f5:dd:b8:6c:e6:84:42:bf:53:2c:e6:79:
e5:49:57:03:ab:29:62:76:f0:b0:b2:cd:be:3e:f4:
ce:5b:5d:7d:97:81:59:e3:7a:64:20:11:6b:c8:fa:
ae:13:47:03:53:ff:5d:4e:5d:f1:01:0f:96:f0:b4:
b9:5a:8a:14:9d:63:8f:72:ea:ed:f7:e4:6a:b0:15:
68:1e:ca:51:d4:8d:a1:d9:95:3f:ee:75:83:f3:d5:
fc:4e:fa:84:ea:95:da:e6:1e:20:d4:4c:6d:6d:e4:
86:cf:de:9b:a9:a1:83:88:53:8c:cf:88:21:eb:58:
13:7b:a8:45:44:b1:2f:ee:c1:1d:4d:58:b2:40:1e:
8b:44:72:03:e4:39:10:f1:40:fa:68:b9:a4:76:bb:
7b:37:12:3a:c4:c9:70:58:5b:eb:93:8e:73:65:45:
ca:30:3a:d6:40:de:83:15:3e:45:21:04:bc:3d:f6:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F0:1F:24:1B:B5:25:4E:1A:9B:0B:24:E0:62:F2:B0:1B:D6:25:1F
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e2ec50d91be1ab3cc64ce1ef1acebe4c3f483b1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.158.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:21:da:77:18:e6:15:e3:e1:e0:97:fd:8e:04:6d:b0:32:06:
58:ef:1f:38:25:3e:59:b6:34:df:5d:1f:8c:74:e7:c8:a6:2d:
92:b5:07:a1:bb:6c:c0:64:5f:30:c1:bd:93:1e:46:6e:a2:cb:
ef:16:af:0f:75:10:b4:e8:d9:db:74:3d:4b:4d:76:21:b6:73:
98:37:ef:05:a6:90:b3:aa:50:31:a9:9d:6d:d5:d4:af:ea:51:
a9:b9:a3:63:d9:98:ff:75:07:81:0a:b1:22:da:f6:83:60:91:
65:7c:19:3f:f5:9d:c8:90:db:64:83:63:81:ba:79:96:2b:c1:
71:9f:7d:f7:6e:50:ce:99:df:d0:67:29:c5:3d:ea:41:40:12:
05:d3:8b:82:a8:fd:af:4d:75:d4:fc:59:52:2c:d2:21:95:aa:
6a:d8:b1:4b:fe:cb:38:da:b6:19:cd:ae:3e:06:06:bf:a8:c6:
50:7b:a5:6b:ec:57:ad:9b:9e:f8:62:e4:ad:c1:0d:2e:2b:19:
3a:3d:57:fc:a7:c2:95:f9:c3:14:64:51:4b:9f:61:ea:e5:61:
f8:7c:85:75:63:e3:f0:90:1f:7f:f0:96:72:75:1f:90:3f:be:
ab:fa:e9:67:95:fe:86:eb:23:df:05:09:56:5f:aa:76:5a:1b:
59:c4:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org