Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/236a4fd36f12afdf13353db26bf410c691392c48.roa
File: 236a4fd36f12afdf13353db26bf410c691392c48.roa (raw, json)
Hash identifier: Xunn3Cvo150Xfda6dEYdcYjLg5Tm6hyv30xoCp6aLkw=
Subject key identifier: C2:13:BA:D0:61:74:2F:A9:76:4F:CF:88:CD:F8:27:6D:4A:64:5A:48
Certificate issuer: /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial: 2A82DA
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/236a4fd36f12afdf13353db26bf410c691392c48.roa
Signing time: Thu 15 Feb 2024 20:41:25 +0000
ROA not before: Thu 15 Feb 2024 20:41:24 +0000
ROA not after: Thu 15 Feb 2029 20:41:24 +0000
asID: 263699
IP address blocks: 190.114.96.0/22 maxlen: 24
190.114.96.0/22 maxlen: 24
190.114.100.0/23 maxlen: 24
200.123.36.0/22 maxlen: 24
200.123.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2786010 (0x2a82da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Validity
Not Before: Feb 15 20:41:24 2024 GMT
Not After : Feb 15 20:41:24 2029 GMT
Subject: CN=236a4fd36f12afdf13353db26bf410c691392c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:63:e3:33:1b:8f:46:e2:9f:a2:ae:7d:f1:
1e:01:ab:34:ce:8e:17:74:6e:2c:85:77:e5:8c:1e:
7a:98:02:92:5d:64:4c:0b:80:a0:f2:00:f9:a1:7c:
c8:fb:51:9e:82:2a:52:73:79:22:de:57:46:63:42:
57:a7:c8:77:d1:a5:ae:58:78:ae:0c:27:40:ed:aa:
6c:fe:6b:d3:84:5a:52:fe:d4:7b:0f:a5:c2:a1:ec:
f0:94:0d:c3:82:e6:09:a2:71:2b:27:78:1e:38:12:
7a:51:72:75:4b:61:c7:68:aa:35:ed:10:b0:fa:9e:
5a:14:95:9e:4e:20:14:d8:b3:66:b9:9c:72:3b:03:
61:22:e2:e6:e4:5d:10:92:4c:d2:cc:bd:fa:f9:f7:
6a:24:4e:42:b3:23:f0:be:a9:36:bb:66:9b:8f:41:
d4:da:c6:24:c5:9f:dc:f7:99:1d:fb:57:82:ec:93:
69:86:7a:e8:62:4d:89:08:2c:6b:64:23:0a:35:d6:
58:6b:11:90:15:f9:48:9e:19:f3:a0:95:d2:ef:23:
af:c3:1c:e8:25:d0:28:d4:4a:6a:6f:0c:91:08:e5:
8a:c3:ae:45:75:ac:ab:32:3e:5d:e9:46:ab:ce:44:
db:2f:59:56:73:92:68:93:34:0d:8a:f6:b3:4b:09:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:BA:D0:61:74:2F:A9:76:4F:CF:88:CD:F8:27:6D:4A:64:5A:48
X509v3 Authority Key Identifier:
keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/236a4fd36f12afdf13353db26bf410c691392c48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.114.96.0-190.114.101.255
200.123.36.0-200.123.47.255
Signature Algorithm: sha256WithRSAEncryption
46:95:57:12:af:90:85:6d:fc:6f:9e:f0:0a:4a:c0:85:f2:78:
c2:74:32:ce:44:53:d5:86:94:04:26:1e:bd:3e:51:bf:1c:c3:
b9:f8:75:57:74:17:c4:50:df:2a:ee:e2:af:2b:16:e6:e3:16:
23:79:f4:1f:8f:b8:2a:f7:09:38:ac:c3:de:5e:6e:71:f8:c3:
64:73:67:3f:24:ef:15:5e:b1:81:c0:e2:24:32:29:7e:91:80:
69:55:c0:8a:b9:09:b7:6d:c5:66:fb:3b:25:78:ef:cf:80:29:
a8:82:2e:f2:41:77:83:08:07:f6:e4:cc:56:72:95:fd:fd:46:
89:a1:98:51:aa:45:56:bf:8a:c6:2e:b3:23:4e:97:c8:b7:00:
13:d0:ff:f5:d7:19:38:0d:df:0b:9c:fd:1d:5f:cb:40:a6:39:
2d:55:d4:96:d3:96:60:90:37:c3:53:55:45:8c:ad:3e:8c:35:
8c:53:dd:ff:08:66:4c:35:01:1e:ea:b5:a9:7e:c7:9b:9f:56:
59:be:2f:92:a0:c0:99:0e:53:b7:a6:b6:a6:d3:11:6d:f7:7c:
d4:4d:eb:0f:0b:4c:01:87:77:4e:33:f2:0c:ab:8d:f8:ad:84:
6e:68:0b:27:25:39:e9:a2:2e:ba:c2:79:23:47:b6:75:70:9a:
95:ad:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org