Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/418f4bfc3ed69015f16764bdb4801084b9e37f13.roa
File: 418f4bfc3ed69015f16764bdb4801084b9e37f13.roa (raw, json)
Hash identifier: sHNK+YAe1KbJ6RJ0UDlwOjnlcAmocO/L3iWbKfcDTu0=
Subject key identifier: 0A:0B:D9:9B:DE:15:13:1A:17:58:7C:F6:26:61:4F:6D:E0:20:9F:53
Certificate issuer: /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial: 24DC3F
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/418f4bfc3ed69015f16764bdb4801084b9e37f13.roa
Signing time: Thu 10 Aug 2023 18:00:37 +0000
ROA not before: Wed 09 Aug 2023 18:00:35 +0000
ROA not after: Thu 10 Aug 2028 18:00:35 +0000
asID: 52312
IP address blocks: 190.110.240.0/21 maxlen: 24
190.110.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2415679 (0x24dc3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
Validity
Not Before: Aug 9 18:00:35 2023 GMT
Not After : Aug 10 18:00:35 2028 GMT
Subject: CN=418f4bfc3ed69015f16764bdb4801084b9e37f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:00:35:ec:a6:49:36:d8:90:09:87:c8:47:
18:63:b7:45:fb:3a:17:56:78:a6:13:d8:c4:0f:7c:
de:12:6c:e5:f8:0e:11:80:f2:7e:b9:5e:be:b9:f9:
1c:ac:08:d5:f7:07:36:8e:cd:d5:fa:83:c1:32:f9:
7f:83:d1:6d:6e:7f:d0:df:18:c3:ad:25:d8:77:45:
d1:89:54:0b:3c:53:84:a3:38:45:66:f9:c5:2b:67:
2d:11:dc:e4:11:b7:e3:d9:e9:a7:e2:89:82:78:06:
ce:db:ff:9e:64:b1:86:9a:1f:5b:fb:f3:9d:69:b9:
ce:a8:f7:4e:ea:c7:c8:40:2c:43:2a:ba:7a:00:0a:
48:84:80:06:1b:e0:d0:7f:c8:93:a9:82:9c:0b:53:
4c:6d:0e:ea:3e:5a:05:d3:09:66:80:83:d9:56:e9:
7c:d5:b3:bc:79:53:bf:a8:1b:32:27:75:c4:55:16:
43:f5:4c:d4:a2:29:77:47:18:05:3f:0b:2c:32:a3:
9f:d8:eb:96:8b:9a:e7:77:89:86:29:c9:fd:ef:33:
87:1a:68:b6:76:53:43:6b:38:b3:3b:ca:25:09:69:
da:c2:b8:85:e4:c5:e7:19:ec:69:05:2f:e5:20:ce:
92:59:d3:06:e1:75:9e:ac:67:02:65:a4:ea:bc:d7:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0B:D9:9B:DE:15:13:1A:17:58:7C:F6:26:61:4F:6D:E0:20:9F:53
X509v3 Authority Key Identifier:
keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/418f4bfc3ed69015f16764bdb4801084b9e37f13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.236.0/23
190.110.240.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:aa:80:5a:6f:9f:62:66:e3:57:56:2c:9f:cc:4a:4b:01:cf:
5d:6a:9f:84:91:b4:d5:a5:26:a5:16:80:24:8c:3d:2f:8a:ed:
ae:46:69:f6:e3:03:7b:e0:02:c8:37:e9:e4:ef:de:ee:ec:fe:
e9:5a:1c:19:0f:35:28:bc:70:b2:09:7f:77:30:d9:0b:bb:97:
5e:52:87:37:cf:a9:75:de:0e:5b:af:b6:37:d9:43:db:13:99:
59:2c:81:9b:b0:76:aa:7d:ad:75:8e:b4:08:d2:46:17:46:c2:
be:b2:9f:5d:73:77:39:e6:2d:18:6a:ff:8e:14:69:b5:08:e5:
9d:0b:7f:64:78:95:20:6d:0f:2e:75:c3:4e:94:8a:b0:a9:a6:
a4:66:5b:2b:80:2c:5f:00:3b:0d:22:bb:3f:71:a4:b3:e0:20:
50:06:5f:28:e1:41:fb:94:b4:da:94:a7:42:6d:75:36:87:32:
25:35:33:61:9a:ba:79:f8:37:fb:a2:ae:94:36:58:d3:10:27:
47:d0:40:de:4b:9f:d6:3c:7f:23:30:0a:15:53:88:d1:76:d4:
aa:b6:5e:b8:5e:c8:5e:fa:f6:64:0f:b8:fb:c2:b8:b7:47:aa:
a4:fc:7d:36:b4:ce:23:79:4c:c4:23:27:b9:7e:b6:ce:e1:38:
89:df:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:57:29 2023 by rpki-client on console-ams.rpki-client.org