Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/5574de7e1dc859faa7108174d53ee6f76466c4a5.roa
File: 5574de7e1dc859faa7108174d53ee6f76466c4a5.roa (raw, json)
Hash identifier: c4QJahDBPGdaklq2z5gWBS//iOlHpGVBI/yMVoAY1Bo=
Subject key identifier: E9:B4:26:A6:A8:FD:B2:97:F7:44:95:94:E1:EE:82:7A:B4:78:93:A2
Certificate issuer: /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial: 27B847
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/5574de7e1dc859faa7108174d53ee6f76466c4a5.roa
Signing time: Wed 08 Nov 2023 15:00:40 +0000
ROA not before: Wed 08 Nov 2023 15:00:37 +0000
ROA not after: Wed 08 Nov 2028 15:00:37 +0000
asID: 11514
IP address blocks: 190.110.253.0/24 maxlen: 24
190.114.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603079 (0x27b847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Validity
Not Before: Nov 8 15:00:37 2023 GMT
Not After : Nov 8 15:00:37 2028 GMT
Subject: CN=5574de7e1dc859faa7108174d53ee6f76466c4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a4:73:2b:cf:8c:27:3a:f8:fd:dc:68:47:c2:
63:f2:5b:e6:2a:57:77:00:f0:6c:4a:1f:8a:fd:2e:
eb:95:a3:8a:49:bc:15:09:f7:8e:58:d4:6d:40:78:
b1:71:35:36:ae:f8:5c:81:57:e5:f2:e5:4a:f6:60:
b8:8a:d5:c0:2c:26:ac:92:32:55:cc:d7:01:04:82:
00:d4:d2:5b:eb:bf:5b:79:8b:5a:5d:59:cd:43:77:
29:7e:77:f8:bb:15:c8:7c:ab:ea:e9:b0:ca:19:5f:
27:27:33:9d:5a:82:a0:72:e6:7d:f2:29:b4:6a:1e:
99:bb:fc:7a:06:5d:a9:b5:f1:e6:29:22:c7:4c:be:
ea:7c:e0:52:b7:a2:96:b3:d8:7c:9c:7a:92:84:7b:
3e:a6:67:7d:2c:18:20:0b:96:2f:28:30:35:45:23:
e9:8e:9c:93:aa:59:59:55:71:ba:ec:2b:a5:15:3e:
c7:0d:33:6c:89:3e:03:4e:5d:0f:89:fb:07:54:b2:
f6:d7:f1:f9:4c:e8:fd:0a:d8:3f:b6:22:ad:58:5c:
f1:14:7e:1c:2d:96:81:cb:dc:d6:16:60:ec:97:40:
44:f4:90:a9:44:03:31:b5:91:ea:b0:68:ba:73:e9:
02:73:bb:67:24:69:17:62:4c:da:59:84:35:89:49:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:26:A6:A8:FD:B2:97:F7:44:95:94:E1:EE:82:7A:B4:78:93:A2
X509v3 Authority Key Identifier:
keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/5574de7e1dc859faa7108174d53ee6f76466c4a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.253.0/24
190.114.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:41:e9:f0:ce:e2:1d:76:eb:5e:5c:17:e8:c8:0d:5f:a0:05:
66:3a:af:30:c7:4e:85:b1:de:a4:5f:37:1c:b9:0c:05:0c:61:
f4:e8:bb:ea:cd:e5:74:f9:c7:ca:f0:df:13:37:c4:76:6c:3a:
36:b3:8b:ef:68:09:8e:f1:b7:d7:6c:e9:01:62:f5:d7:ec:3f:
e9:a6:f5:37:27:c4:35:52:f4:ab:f8:ce:b6:d7:d9:20:91:81:
20:fd:12:50:1f:b4:4d:9e:24:a7:cc:d3:2c:ef:a4:98:10:c0:
7e:61:97:11:03:42:c7:3a:c4:27:e2:8f:7c:8e:74:eb:0b:5b:
31:7e:72:a5:95:7d:c1:5b:da:67:8c:e5:9c:66:90:d3:e2:ce:
8e:42:31:65:11:b3:49:d1:32:0c:c7:c0:1f:d0:6f:b8:f0:27:
72:cb:cb:d7:5f:49:38:ba:c4:79:b6:5f:17:50:d4:98:22:ee:
2b:56:34:2e:e9:14:c5:34:0d:5d:fe:a8:89:58:3d:d0:10:fd:
06:5b:a5:ed:f6:8c:0c:95:88:55:11:b0:8b:3e:65:61:38:10:
2e:bc:6a:11:c9:1d:90:51:53:63:fa:e7:85:be:67:68:fe:c7:
9f:99:d4:bf:1d:02:b9:1d:14:66:4e:1d:c3:c8:5c:4c:fc:c6:
66:ef:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:51 2024 by rpki-client on console-fra.rpki-client.org