Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/065f66cbb04b209a3bb1dc3161ffa04ca9cf9342.roa
File: 065f66cbb04b209a3bb1dc3161ffa04ca9cf9342.roa (raw, json)
Hash identifier: 6w7MKRjKOr8YnePQQPPGwqYw0PKkFx6ey93NXpwhNDQ=
Subject key identifier: 69:2B:F5:53:71:40:C0:9C:A7:85:16:F9:B7:5C:E5:A8:28:C3:40:9A
Certificate issuer: /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial: 239283
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/065f66cbb04b209a3bb1dc3161ffa04ca9cf9342.roa
Signing time: Sat 08 Jul 2023 11:54:57 +0000
ROA not before: Fri 07 Jul 2023 11:54:56 +0000
ROA not after: Tue 08 Jul 2025 11:54:56 +0000
asID: 61461
IP address blocks: 190.124.30.0/23 maxlen: 24
190.124.28.0/22 maxlen: 24
2803:d700::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2331267 (0x239283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Validity
Not Before: Jul 7 11:54:56 2023 GMT
Not After : Jul 8 11:54:56 2025 GMT
Subject: CN=065f66cbb04b209a3bb1dc3161ffa04ca9cf9342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:67:47:72:c1:bc:c6:88:5c:53:1b:06:11:
17:5f:d7:ca:91:76:a5:42:a2:d5:fb:8f:54:09:59:
11:22:87:7d:43:4a:9a:81:44:f2:c6:db:0f:8b:1a:
3b:56:12:eb:76:35:91:6a:48:ce:18:b6:e8:8d:10:
a9:21:ef:45:0f:e9:99:91:d9:29:58:6a:80:c1:2c:
fe:17:80:0e:26:10:fc:c2:90:96:1d:df:f6:27:e8:
2f:cf:60:06:87:56:6c:90:8f:52:e8:84:a3:b6:13:
42:16:1f:4e:1a:43:4a:37:46:4b:6e:b7:46:ef:f0:
e7:f8:bf:65:0e:16:b9:bd:a8:cc:8e:8e:3f:93:7d:
4e:9d:48:00:7d:29:2e:95:0f:5b:d9:0a:be:62:c1:
c9:31:67:46:f1:a1:41:34:0b:d8:cc:45:52:df:d3:
b7:7f:7f:05:79:14:19:28:de:eb:04:3f:bb:3a:cf:
93:08:38:c4:04:76:bc:f4:11:a6:28:79:b9:62:8a:
ae:4a:e8:dc:3b:d9:26:48:41:54:73:09:f5:09:2e:
04:3b:64:20:d4:c8:04:a5:db:2f:5e:2e:73:28:70:
4c:30:5f:b9:0a:02:19:4e:41:fa:dc:33:2f:95:31:
4e:f6:da:ad:7f:b8:79:06:bf:0b:10:14:69:81:c7:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2B:F5:53:71:40:C0:9C:A7:85:16:F9:B7:5C:E5:A8:28:C3:40:9A
X509v3 Authority Key Identifier:
keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/065f66cbb04b209a3bb1dc3161ffa04ca9cf9342.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.28.0/22
IPv6:
2803:d700::/32
Signature Algorithm: sha256WithRSAEncryption
6d:9b:d9:ab:47:2d:ce:5c:b2:0b:3a:06:74:ec:99:bd:c3:6c:
80:d1:5c:65:8f:2b:2b:8f:0e:30:a1:40:99:cd:91:d4:b7:ab:
2c:ef:39:60:db:5e:ec:e1:16:50:fb:7b:ea:31:55:c1:37:02:
67:79:71:39:09:ab:a6:e7:1f:7a:63:ed:ea:d5:cc:6a:4d:0b:
7a:d0:91:7a:91:cc:d2:e0:d8:1e:dd:37:a4:71:f0:9b:8f:ec:
37:b8:14:23:8b:77:c9:33:05:0b:61:71:de:a9:27:ad:1c:34:
b0:da:c6:30:93:a8:cc:18:b5:4d:7d:56:76:25:f7:44:ef:af:
0c:bb:e6:3f:3a:32:7c:02:0c:4c:7c:84:ab:53:0e:51:97:c6:
ee:d8:2c:64:c8:50:72:c4:f3:91:a0:16:23:ff:23:e4:6a:e5:
df:bf:47:8e:3a:f8:bf:17:4d:1a:de:65:fc:fd:a7:fe:a7:d7:
d5:41:e8:44:94:90:68:df:30:25:60:6d:ca:c0:68:ed:3c:b8:
24:c2:39:ff:83:9a:f7:76:c0:ba:2f:cc:dc:6a:db:73:d3:30:
f5:fa:38:d5:c8:6c:f4:e3:3c:f8:fb:b0:02:a0:eb:da:17:9f:
f9:dc:37:44:87:a4:8f:73:0a:fc:a6:cc:b9:0c:51:24:87:d1:
07:20:e2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org