Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/081b5ae3628fd39cb31ac159b80e922af90b4ddb.roa
File: 081b5ae3628fd39cb31ac159b80e922af90b4ddb.roa (raw, json)
Hash identifier: 2lJJ0tINT4S431gG0Tu//DNe2lvYye7pZvfAiXacLRE=
Subject key identifier: EF:32:CE:C7:B4:C9:22:3F:69:A1:E1:BE:2A:B6:53:BB:0C:A4:EC:3A
Certificate issuer: /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial: 23895F
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/081b5ae3628fd39cb31ac159b80e922af90b4ddb.roa
Signing time: Sat 08 Jul 2023 11:37:16 +0000
ROA not before: Fri 07 Jul 2023 11:37:15 +0000
ROA not after: Tue 08 Jul 2025 11:37:15 +0000
asID: 61461
IP address blocks: 190.124.28.0/22 maxlen: 24
190.124.30.0/23 maxlen: 24
2803:d700::/32 maxlen: 48
2803:d700:8000::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2328927 (0x23895f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Validity
Not Before: Jul 7 11:37:15 2023 GMT
Not After : Jul 8 11:37:15 2025 GMT
Subject: CN=081b5ae3628fd39cb31ac159b80e922af90b4ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:7f:43:10:49:4e:fe:63:34:0f:b1:87:dc:
fe:ed:25:8d:14:48:84:f1:37:d5:4d:ad:a2:5d:c3:
25:80:ab:10:63:e9:76:dc:e1:d7:03:0e:9d:19:85:
ad:e6:d8:03:f9:65:69:07:51:27:31:0f:ca:e4:8a:
88:f3:ec:9f:b1:c4:71:56:03:bc:9d:7f:04:de:cf:
e6:9c:60:48:2f:3e:78:54:eb:76:f5:d9:f8:01:98:
11:93:de:b5:25:6b:ad:aa:18:d2:61:9b:d3:21:30:
58:a2:7e:fd:dc:6d:fd:c1:3e:78:8a:5f:24:36:75:
32:aa:7e:aa:80:90:6d:d2:58:db:4b:3b:25:24:1f:
11:8d:17:ca:94:55:34:f2:0d:3f:e5:07:e4:a5:2e:
1e:cb:db:83:4c:41:01:a3:1a:ae:e1:03:7c:8f:71:
a7:26:e7:40:20:2c:fa:c2:03:b3:e5:28:79:f3:91:
73:f0:f1:31:aa:aa:7f:17:df:c1:98:0f:53:65:5e:
c5:cd:49:c8:dc:ca:ad:b1:ff:e1:6b:3d:52:5a:a3:
f7:68:81:3a:7c:1e:c5:a1:1d:26:21:8d:2c:9d:7e:
aa:14:a7:4f:d3:38:d1:f1:64:8d:35:41:b4:96:11:
13:77:da:d3:70:8e:63:2d:9d:d5:79:96:7b:9a:65:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:32:CE:C7:B4:C9:22:3F:69:A1:E1:BE:2A:B6:53:BB:0C:A4:EC:3A
X509v3 Authority Key Identifier:
keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/081b5ae3628fd39cb31ac159b80e922af90b4ddb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.28.0/22
IPv6:
2803:d700::/32
Signature Algorithm: sha256WithRSAEncryption
3b:c5:bf:4b:75:d7:63:f0:20:5d:38:0e:bc:a6:3a:59:71:7d:
26:dc:33:30:1b:e0:e0:d4:74:b2:33:f4:32:35:d4:d4:4a:8a:
f8:f7:b5:5f:25:d1:ee:74:f3:ba:5d:cc:43:87:85:9c:c6:cc:
85:8a:84:b2:8c:26:5e:02:fb:ab:c1:8d:5a:27:52:ad:22:4c:
09:e9:04:cf:d6:0f:3c:2c:a9:37:f5:4b:20:79:c9:89:0c:34:
3f:db:0a:8a:63:19:5b:1b:4f:51:1a:13:6e:38:35:d0:14:09:
8f:b0:90:75:e8:db:61:fc:9b:ea:fc:85:48:ea:b7:5a:5b:77:
f6:c3:7b:b6:59:89:0a:07:e7:4c:48:c3:d1:f5:49:5e:b3:43:
84:3e:8d:be:17:39:29:f2:34:21:e9:56:4b:e0:91:67:00:76:
37:9e:11:81:8a:93:ee:52:eb:9f:c3:1d:f9:ee:2a:5e:8f:5c:
68:de:9b:5f:e3:de:db:fc:0c:e1:96:78:31:df:7b:22:46:32:
e0:88:3c:e1:ad:20:8f:98:6b:ec:d6:8f:3e:bd:0e:d9:2e:93:
6f:eb:2c:66:4a:20:88:c9:4b:43:4e:6d:3a:d2:c6:54:e4:ab:
13:f2:64:53:28:bf:77:e9:af:7a:d3:53:88:a5:3c:4e:63:6d:
a7:67:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org