Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/43d332cc232b0141ea05254718ea831d4df5de7e.roa
File: 43d332cc232b0141ea05254718ea831d4df5de7e.roa (raw, json)
Hash identifier: S4lWymsd3ql3LvC/IvXG7sIju5PZ+MvJ8VNcpKfjL74=
Subject key identifier: 2A:B3:65:E1:3E:19:43:81:CB:CA:DD:A1:43:FE:27:AD:0E:DF:72:84
Certificate issuer: /CN=af4e172d4f103eb44af4320052788d1ee84bc8ff
Certificate serial: 0D3BA7
Authority key identifier: 27:20:93:1A:79:7E:EA:1B:9C:78:87:E7:FC:63:C4:F6:FB:DF:20:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af4e172d4f103eb44af4320052788d1ee84bc8ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/43d332cc232b0141ea05254718ea831d4df5de7e.roa
Signing time: Wed 24 Mar 2021 14:38:19 +0000
ROA not before: Wed 24 Mar 2021 14:38:19 +0000
ROA not after: Tue 24 Mar 2026 14:38:19 +0000
asID: 262178
IP address blocks: 190.113.64.0/20 maxlen: 24
200.16.90.0/23 maxlen: 24
2001:13e0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867239 (0xd3ba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4e172d4f103eb44af4320052788d1ee84bc8ff
Validity
Not Before: Mar 24 14:38:19 2021 GMT
Not After : Mar 24 14:38:19 2026 GMT
Subject: CN=43d332cc232b0141ea05254718ea831d4df5de7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:6e:fd:16:1b:ed:ec:e6:82:68:52:ed:53:
e5:81:fd:aa:0a:1c:22:dd:4b:0e:c9:fd:ab:35:c4:
36:72:86:9d:21:eb:60:32:d5:f0:97:5e:05:0e:6b:
92:31:b6:47:73:a7:6e:28:04:4b:0f:9c:2c:66:fe:
ee:a9:27:a4:cd:97:02:37:36:32:35:05:40:38:74:
b7:6d:22:07:9f:42:ad:08:59:2f:4b:0d:59:6a:12:
81:41:f0:5f:8e:d7:ab:a0:d3:da:c8:c3:96:87:c7:
3c:5c:90:56:c7:1b:75:f6:5a:13:44:78:b1:9b:59:
db:84:7d:3a:9f:42:5e:6f:3d:72:81:9c:c0:64:61:
b2:2d:a3:99:13:40:74:ac:8b:ba:ad:c5:c9:81:6e:
60:fb:01:9d:0f:30:5c:a9:d2:2f:d8:a5:d5:0f:7b:
e8:2e:71:40:80:15:92:47:ff:6d:3d:75:6b:75:b9:
fd:77:61:88:ec:b9:4d:91:79:d7:09:af:2b:25:3f:
c5:a5:fc:5a:43:79:d9:95:5d:cc:40:4d:fe:d3:38:
df:09:23:0b:39:a6:0c:fc:90:6c:bb:fa:72:a1:33:
a5:eb:49:e5:cf:2b:90:c4:73:0d:b7:fe:82:89:97:
90:8a:c4:a6:40:ea:aa:68:91:0c:10:4a:43:65:a0:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B3:65:E1:3E:19:43:81:CB:CA:DD:A1:43:FE:27:AD:0E:DF:72:84
X509v3 Authority Key Identifier:
keyid:27:20:93:1A:79:7E:EA:1B:9C:78:87:E7:FC:63:C4:F6:FB:DF:20:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af4e172d4f103eb44af4320052788d1ee84bc8ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/43d332cc232b0141ea05254718ea831d4df5de7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/af4e172d4f103eb44af4320052788d1ee84bc8ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.113.64.0/20
200.16.90.0/23
IPv6:
2001:13e0::/32
Signature Algorithm: sha256WithRSAEncryption
56:e3:93:32:6f:e5:57:b9:81:bf:9e:e8:32:ea:ad:54:c8:f6:
2c:4a:a5:ef:4d:f6:71:ce:a9:94:5d:47:8f:73:a9:30:42:3c:
43:9b:68:17:7c:66:12:a9:43:25:e3:68:d6:6c:5d:1c:1c:2e:
e5:4c:e0:eb:bf:e1:f9:86:73:bc:fc:59:c3:fa:92:d1:1c:b7:
ff:70:25:b8:dc:7f:14:ec:3e:9d:40:74:da:6c:ff:e3:6f:62:
24:1b:ca:19:67:12:8f:b5:2c:a5:c8:77:5c:d4:ff:73:78:46:
31:c5:48:c8:6d:48:4c:19:06:7b:14:1c:c2:ba:b4:5a:24:6b:
b2:2a:ed:ae:fc:2a:38:30:e0:4f:69:1b:56:be:00:c3:3a:1b:
96:46:37:3a:1b:61:1e:0e:0a:08:e1:7d:f7:2e:bd:66:c1:bb:
25:69:72:22:6b:85:7a:01:83:f7:40:8e:8d:e1:77:24:c2:85:
ce:fd:8b:93:7a:d7:70:3f:54:7e:ff:a2:9c:5d:a8:e7:88:17:
d0:54:03:7d:da:11:8d:9e:6c:84:c0:3d:60:02:63:d2:fd:23:
fc:00:45:31:78:89:e3:bc:75:fc:63:85:7e:9f:73:b3:c3:54:
26:74:35:9d:9c:72:73:c7:71:57:5e:6b:0a:1e:15:99:6e:59:
10:52:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org