Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/2f4fcbb4876d3c6b63d03f4c66cac6216b991bd3.roa
File: 2f4fcbb4876d3c6b63d03f4c66cac6216b991bd3.roa (raw, json)
Hash identifier: 0qwNBEEcriD1SK0KJcnuoe2IsJiuAVRaFMmipcmSYSY=
Subject key identifier: 4F:85:33:53:2C:76:5D:C0:87:38:0F:14:43:47:CE:34:52:F1:EF:8C
Certificate issuer: /CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
Certificate serial: 41D0
Authority key identifier: CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/2f4fcbb4876d3c6b63d03f4c66cac6216b991bd3.roa
Signing time: Thu 14 Mar 2024 04:15:17 +0000
ROA not before: Thu 14 Mar 2024 04:15:17 +0000
ROA not after: Sat 14 Mar 2026 04:15:17 +0000
asID: 262944
IP address blocks: 189.201.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16848 (0x41d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
Validity
Not Before: Mar 14 04:15:17 2024 GMT
Not After : Mar 14 04:15:17 2026 GMT
Subject: CN=2f4fcbb4876d3c6b63d03f4c66cac6216b991bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:32:eb:ad:d2:60:42:d3:0f:4c:77:49:b5:35:
40:89:4c:cf:99:f9:07:19:1c:1d:c6:08:3f:bb:87:
5b:17:67:97:f2:a4:07:17:8b:aa:18:20:41:6b:04:
a8:cf:17:f3:38:bb:34:24:93:ce:3e:c9:6d:49:8a:
f9:e6:8d:01:ce:e7:3d:46:08:95:0e:52:0f:5f:8a:
91:2b:62:2b:d4:64:1e:db:82:06:f2:fd:f4:b7:d5:
2f:1c:e6:dd:03:83:7c:1a:5e:e9:df:27:fe:4a:b4:
bd:b4:6c:e9:f7:1f:32:5b:69:0a:6e:fc:91:03:3f:
b0:1e:27:66:98:5e:65:d2:36:ac:45:c9:d8:da:4b:
5f:f9:d6:c3:a8:ab:28:58:fd:d0:89:8e:80:a2:1c:
07:55:39:7c:8b:69:20:df:24:73:6d:9a:53:92:72:
2e:f4:fd:a1:2a:5b:8a:2a:c7:80:29:0d:32:9e:43:
41:a9:9f:ab:78:fe:4d:b0:18:96:fd:05:ff:f1:e2:
56:dc:26:a3:8c:61:5e:b1:ba:a0:a3:01:de:0b:1e:
1b:a7:9f:83:98:95:99:70:33:57:a7:c7:7f:ae:b1:
24:25:81:ad:dd:7f:30:d4:cc:de:de:55:9c:4e:ef:
c3:5b:7b:d6:77:22:db:a5:36:29:d7:e0:fe:ce:56:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:33:53:2C:76:5D:C0:87:38:0F:14:43:47:CE:34:52:F1:EF:8C
X509v3 Authority Key Identifier:
keyid:CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/2f4fcbb4876d3c6b63d03f4c66cac6216b991bd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.192.0/22
Signature Algorithm: sha256WithRSAEncryption
38:11:f5:4a:db:9a:07:3d:de:8b:93:c7:01:37:18:63:fe:86:
cb:06:24:55:4e:19:5d:70:e1:51:5a:b3:d2:00:1d:ad:de:2a:
e3:7d:bc:be:ca:c0:bc:c0:db:1f:0e:9c:7e:f6:ff:61:57:d6:
53:98:22:04:bb:ed:e0:32:a3:52:f7:fe:bd:d9:2a:a4:f2:f5:
70:09:30:05:2f:76:3a:8a:75:54:0a:2c:66:4d:cd:12:d0:61:
a6:31:c0:5b:39:88:31:a4:fd:7c:36:17:a5:a9:f3:d8:b9:47:
dd:ba:d0:74:5c:ca:d0:b3:8c:75:f7:57:77:a9:77:80:eb:f3:
3e:8a:1f:0d:9f:18:85:5e:54:16:09:68:a3:a0:0d:f7:3c:6d:
d5:3b:3f:13:98:c7:07:b4:a0:57:c6:ab:52:24:2f:ed:9c:63:
52:a6:3b:b1:64:31:f0:3b:f3:58:7b:f2:90:9b:03:55:b6:40:
10:eb:61:16:bb:4c:64:f9:de:b4:2e:04:36:a0:37:88:4e:f6:
c6:d1:6e:07:4b:c1:27:bc:b5:67:46:21:22:c3:ee:fc:b5:c3:
17:5f:6e:2e:a2:2b:d3:e4:f1:61:39:50:34:ef:91:8d:ce:0a:
89:47:fd:42:0b:d6:22:eb:41:45:13:07:93:de:03:59:bd:1b:
42:4c:2b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org