Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3a67ffde2595a90a6fc644be9aa92bf07c0b9fcd.roa
File: 3a67ffde2595a90a6fc644be9aa92bf07c0b9fcd.roa (raw, json)
Hash identifier: ioC86mFUcSgQWGEpjsTj19SStQb/OJEJ7SrHUb2Aobo=
Subject key identifier: C2:81:0C:28:AD:67:48:F6:ED:B6:3D:59:F7:40:B5:F3:34:5F:3F:C1
Certificate issuer: /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial: 29F441
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3a67ffde2595a90a6fc644be9aa92bf07c0b9fcd.roa
Signing time: Tue 30 Jan 2024 15:00:58 +0000
ROA not before: Tue 30 Jan 2024 15:00:49 +0000
ROA not after: Tue 30 Jan 2029 15:00:49 +0000
asID: 262932
IP address blocks: 190.114.104.0/21 maxlen: 24
190.114.104.0/21 maxlen: 24
190.114.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2749505 (0x29f441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Validity
Not Before: Jan 30 15:00:49 2024 GMT
Not After : Jan 30 15:00:49 2029 GMT
Subject: CN=3a67ffde2595a90a6fc644be9aa92bf07c0b9fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:7c:f5:72:25:ae:b4:af:3f:52:38:ae:28:
18:6f:3e:dc:9d:29:10:9d:fb:1b:a2:42:98:9a:94:
c5:a8:46:d8:8c:a8:69:a7:a2:55:71:8b:2d:78:8c:
a9:c2:d6:ae:39:53:2e:65:5d:06:4a:57:9b:f8:97:
c1:2f:57:fc:ea:3d:b2:72:bd:e7:71:36:97:24:ef:
37:99:4f:67:a8:7b:e7:1b:3e:42:46:56:1f:3c:6a:
6b:64:5b:96:b6:57:e8:c2:85:80:8d:8f:c9:0c:84:
40:d6:77:17:60:c4:26:df:d4:8d:15:0a:b2:bd:8b:
33:76:48:6e:6e:ed:cd:59:7a:1b:07:13:73:17:11:
f0:ad:ca:b3:19:9a:30:4a:cf:ef:b3:0d:cc:83:93:
f4:0d:cb:fe:b5:11:48:46:cd:09:d1:14:d4:51:ce:
ee:f5:ff:4f:88:d6:08:77:aa:ea:82:2f:78:23:7a:
bb:b7:40:a3:7b:2c:db:42:89:87:ef:bc:92:f2:37:
fa:82:a5:35:e9:6a:62:55:e5:53:fb:4e:e2:92:67:
5b:9f:65:c7:ec:70:36:e4:ee:e0:5e:b5:62:4b:25:
20:8b:a7:52:2d:b6:95:25:98:ff:52:d6:1f:73:f6:
ac:b8:32:66:4f:29:9b:af:f6:d9:d0:6d:df:fb:47:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:81:0C:28:AD:67:48:F6:ED:B6:3D:59:F7:40:B5:F3:34:5F:3F:C1
X509v3 Authority Key Identifier:
keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3a67ffde2595a90a6fc644be9aa92bf07c0b9fcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.114.104.0-190.114.127.255
Signature Algorithm: sha256WithRSAEncryption
b6:a6:09:36:5d:24:3e:f9:4c:f1:2d:9d:11:36:3d:b1:02:6b:
0c:fa:d9:ae:cf:36:f7:f3:fc:21:9d:8f:2a:cb:60:5a:59:db:
4f:6e:c2:13:4f:3b:66:b9:94:8d:14:6d:a3:1b:e4:2f:83:35:
1f:f2:4b:5a:29:49:a7:9f:b8:31:b2:a6:a9:6d:6f:b3:fd:10:
a1:dc:e9:64:ac:a5:15:34:ed:b3:00:1a:f7:ba:b4:16:a1:ea:
0a:30:72:cd:38:66:f4:2d:62:b8:2f:f8:b9:60:d0:ff:ff:06:
aa:8f:5a:65:ef:52:3f:1f:17:ed:c3:6f:e9:a3:cb:c5:68:52:
05:12:be:98:7d:9c:94:35:0c:49:23:98:d9:2b:42:97:6c:10:
76:d4:8c:74:93:11:e5:ad:b8:6a:27:82:81:f1:fd:aa:51:81:
54:8a:32:e1:38:ac:8a:db:d1:da:ea:e0:67:a6:71:d5:c5:6e:
15:92:b9:02:88:f1:e7:a0:8e:75:a9:5d:91:36:20:21:43:0a:
6f:01:ea:1c:2c:5c:33:ea:8a:cb:65:e0:9d:43:7e:87:26:ab:
23:50:df:6d:92:fb:1f:d8:fc:c4:71:79:6d:fe:c3:ca:8f:1d:
b0:3d:01:30:66:64:2f:6e:42:32:35:37:79:c5:94:75:06:43:
03:7b:54:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 21:34:55 2024 by rpki-client on console-ams.rpki-client.org