Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2228ba93-e80e-4c80-bd51-c9bc0349f804/fb68991bdcfa3cce2e3c33a810003b25662c294c.roa
File: fb68991bdcfa3cce2e3c33a810003b25662c294c.roa (raw, json)
Hash identifier: pBfWSDQfkfoeIrcLUDBuwYUJgfu6XNHWMlz7/JxnhwM=
Subject key identifier: 25:58:E6:A2:F0:E2:CB:87:66:F9:CD:A9:C2:96:38:5A:06:6A:27:DB
Certificate issuer: /CN=11af1ad561a4033a4bb52ec6632e6ad97a270585
Certificate serial: 0D19C9
Authority key identifier: 16:4D:BB:1F:09:AC:3D:5B:00:86:A1:27:F6:76:16:B3:60:26:6A:70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/11af1ad561a4033a4bb52ec6632e6ad97a270585.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2228ba93-e80e-4c80-bd51-c9bc0349f804/fb68991bdcfa3cce2e3c33a810003b25662c294c.roa
Signing time: Wed 24 Mar 2021 14:34:41 +0000
ROA not before: Wed 24 Mar 2021 14:34:41 +0000
ROA not after: Tue 24 Mar 2026 14:34:41 +0000
asID: 27855
IP address blocks: 190.7.64.0/19 maxlen: 24
190.103.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858569 (0xd19c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11af1ad561a4033a4bb52ec6632e6ad97a270585
Validity
Not Before: Mar 24 14:34:41 2021 GMT
Not After : Mar 24 14:34:41 2026 GMT
Subject: CN=fb68991bdcfa3cce2e3c33a810003b25662c294c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:87:4d:5b:9c:6e:4e:d9:79:e2:e3:d2:3f:
3f:99:83:09:7b:cb:71:47:9d:64:a0:13:05:08:17:
f9:dd:a8:76:f1:0d:79:03:f9:8b:9a:04:69:54:bb:
42:68:5a:4b:97:e3:8e:03:ee:da:df:17:f4:ed:23:
b8:47:32:cc:38:2a:0b:26:fc:ee:56:28:2b:e2:21:
33:60:ea:24:e0:46:cf:91:25:00:68:c4:d9:1c:86:
68:25:2e:a5:89:77:f3:65:0d:c3:ef:6d:ec:fb:b1:
df:1c:96:ea:05:9e:ae:f4:cf:1d:38:57:23:1e:82:
00:ea:89:dd:e5:59:ce:bf:a3:cf:b6:4c:5b:f3:18:
b9:ff:5c:3c:03:1d:a3:53:41:ef:99:48:02:9e:db:
ae:03:d1:1f:47:57:00:a8:64:88:8c:cc:ef:64:0d:
45:93:d0:98:66:e6:25:7f:d9:45:6f:dd:66:26:d4:
2f:11:ee:60:c6:87:82:45:51:28:c4:40:34:de:14:
78:9f:bb:4f:63:b3:18:a1:77:1f:31:cc:53:9a:4d:
6a:cf:6d:38:27:6c:df:62:e1:67:43:0d:c4:9f:41:
ec:14:94:79:72:31:eb:f3:02:ab:62:54:e0:fb:47:
ee:04:be:b9:05:62:46:b2:fb:64:25:53:76:69:71:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:58:E6:A2:F0:E2:CB:87:66:F9:CD:A9:C2:96:38:5A:06:6A:27:DB
X509v3 Authority Key Identifier:
keyid:16:4D:BB:1F:09:AC:3D:5B:00:86:A1:27:F6:76:16:B3:60:26:6A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/11af1ad561a4033a4bb52ec6632e6ad97a270585.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2228ba93-e80e-4c80-bd51-c9bc0349f804/fb68991bdcfa3cce2e3c33a810003b25662c294c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2228ba93-e80e-4c80-bd51-c9bc0349f804/11af1ad561a4033a4bb52ec6632e6ad97a270585.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.7.64.0/19
190.103.96.0/19
Signature Algorithm: sha256WithRSAEncryption
23:33:8c:97:88:6e:0e:b5:a8:76:93:b6:11:69:70:57:13:b7:
c6:9c:93:0f:2b:f5:52:26:a6:38:24:89:1e:d1:49:f2:91:e2:
9d:0c:7e:64:10:fa:c6:01:24:7f:63:6d:e0:ba:eb:b7:02:e7:
63:71:f8:22:52:bd:ae:ad:7b:88:72:ca:cb:57:ee:7d:3b:d4:
14:c7:3c:60:91:4c:4b:3c:8e:90:9b:ad:70:71:c1:47:6d:9a:
49:41:40:e9:f0:f0:82:8d:40:86:5d:e7:2c:96:52:64:a0:ca:
6c:1c:11:a9:f5:64:11:ff:dd:4c:2a:99:a0:9d:0c:aa:cc:67:
f9:ac:ac:ef:68:7b:a3:08:44:2d:47:ba:f0:e3:31:06:0b:7a:
40:0d:56:6d:d6:63:64:d2:93:76:4d:0d:cc:a5:4e:e4:16:2f:
95:b1:31:b1:0d:e4:56:28:03:e4:d0:d6:c6:26:2b:61:d0:e3:
78:dc:83:15:b4:d3:4d:89:80:a9:04:36:10:a4:40:6b:93:7b:
91:df:18:6b:72:f0:02:cc:9a:e6:f7:d1:17:72:67:19:38:af:
fd:89:1b:86:12:d0:1d:53:cc:93:b9:d3:95:ca:f5:ac:2c:e3:
4a:fd:a2:67:52:18:e2:92:d3:84:b3:ed:04:14:55:52:4b:ee:
e7:75:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org