Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/0fade3e0d3e714233b404cdfff05e8804e575597.roa
File: 0fade3e0d3e714233b404cdfff05e8804e575597.roa (raw, json)
Hash identifier: Zit/1ggT9B3YvjFMtuCgpKlVy7oeNiIkDy5l0XEIzAI=
Subject key identifier: 64:56:C5:F1:5B:77:34:18:11:1D:49:E8:94:01:91:C3:60:CB:56:25
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 04DEB8
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/0fade3e0d3e714233b404cdfff05e8804e575597.roa
Signing time: Wed 09 Feb 2022 21:31:59 +0000
ROA not before: Wed 09 Feb 2022 03:00:00 +0000
ROA not after: Fri 09 Feb 2024 03:00:00 +0000
asID: 26617
IP address blocks: 190.104.113.0/24 maxlen: 24
190.104.117.0/24 maxlen: 24
200.12.36.0/24 maxlen: 24
200.12.38.0/24 maxlen: 24
200.12.41.0/24 maxlen: 24
200.12.44.0/24 maxlen: 24
200.12.46.0/24 maxlen: 24
200.12.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319160 (0x4deb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Feb 9 03:00:00 2022 GMT
Not After : Feb 9 03:00:00 2024 GMT
Subject: CN=0fade3e0d3e714233b404cdfff05e8804e575597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:c3:ad:3b:92:6f:ec:2e:3f:30:c2:2f:95:
4d:7d:e3:e6:e5:3b:a9:b3:03:09:6c:fb:11:ce:c4:
8c:d2:f4:f6:e8:8a:d5:19:0e:6b:bc:ae:0b:16:bf:
03:92:f2:92:fc:2a:19:da:22:5d:64:93:01:57:b7:
6f:89:85:2f:9e:d6:61:a7:f5:35:81:73:ab:1d:4f:
5e:a3:e0:a8:1e:45:2a:dd:d9:98:2d:15:f6:ae:90:
76:6a:19:8d:1d:1c:68:46:d8:1a:b7:cc:64:89:02:
6c:c0:8b:a8:89:8c:64:5e:62:fe:d6:8e:40:03:3e:
74:b0:df:82:c9:97:62:9f:bb:73:54:af:44:53:b1:
32:43:a9:c3:45:a8:4c:eb:6f:8f:95:e6:97:58:ee:
bd:4f:5a:20:44:0b:42:df:e4:c4:3a:b5:8f:3d:c0:
80:ad:b4:0f:42:88:c6:10:e8:e7:e5:de:0e:3b:89:
98:73:b9:7d:df:70:b0:64:27:05:d7:b8:90:66:ba:
c3:0f:31:93:0d:d8:61:a1:dd:2d:52:68:58:40:85:
b9:30:ed:80:7a:21:ef:2c:8f:ea:dd:24:2c:90:f5:
02:7b:47:5b:84:b6:07:dc:28:fd:a5:31:a2:60:27:
4b:5d:ed:cd:fd:af:9f:c0:21:ef:5e:ae:fd:1c:0f:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:56:C5:F1:5B:77:34:18:11:1D:49:E8:94:01:91:C3:60:CB:56:25
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/0fade3e0d3e714233b404cdfff05e8804e575597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.113.0/24
190.104.117.0/24
200.12.36.0/24
200.12.38.0/24
200.12.41.0/24
200.12.44.0/24
200.12.46.0/24
200.12.56.0/24
Signature Algorithm: sha256WithRSAEncryption
67:61:bb:e2:f9:83:c8:0d:b6:a7:b2:cd:ec:ec:65:ea:06:ce:
ca:bb:c4:d0:27:2e:b5:97:0b:69:be:2e:e8:1a:47:ef:ef:b8:
57:48:ee:e2:6f:13:56:be:99:f7:04:d4:af:79:15:60:1b:c0:
93:87:b6:18:f5:22:94:5c:0e:ea:e3:da:e0:51:87:14:0e:0f:
2c:50:af:5a:55:15:2c:c7:1b:01:a9:24:0d:bb:18:15:70:d1:
c8:3c:67:b5:e4:65:8d:cc:b2:61:1e:b9:1f:04:35:78:04:27:
4f:31:0d:a7:45:68:c8:ba:8f:44:ea:0d:cd:21:30:37:e4:5f:
5d:a9:0f:07:61:ce:83:45:8c:09:79:eb:20:e6:4b:0e:30:3e:
16:f3:30:21:d9:ff:1d:8c:f3:14:6a:59:df:f5:f9:fe:5b:5f:
13:65:cb:25:34:46:e8:fb:bf:81:31:71:ce:34:0d:3d:b3:07:
14:98:37:88:44:13:b2:56:07:f4:ac:d1:78:1d:4e:32:56:50:
28:75:42:df:62:d0:20:9a:ca:5f:13:33:da:1c:22:25:98:d7:
b6:94:d5:68:52:30:17:4d:24:b9:83:05:23:de:9e:e8:8c:c8:
db:5f:06:43:06:b6:c3:8c:94:b7:8d:4e:69:36:58:e8:db:75:
76:01:18:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org