Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/846f219e60a90c0ae99b648e82f61d6072f6466d.roa
File: 846f219e60a90c0ae99b648e82f61d6072f6466d.roa (raw, json)
Hash identifier: gmHo7rtzsgrZ8xsvRbc/Gis8QlGmOHcILOFefayGfuQ=
Subject key identifier: AE:E4:30:07:0C:34:D3:C2:09:31:56:5F:88:CF:DF:98:3F:8F:AB:DF
Certificate issuer: /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial: 2A02CB
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/846f219e60a90c0ae99b648e82f61d6072f6466d.roa
Signing time: Tue 30 Jan 2024 15:01:04 +0000
ROA not before: Tue 30 Jan 2024 15:00:49 +0000
ROA not after: Tue 30 Jan 2029 15:00:49 +0000
asID: 20207
IP address blocks: 190.110.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2753227 (0x2a02cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Validity
Not Before: Jan 30 15:00:49 2024 GMT
Not After : Jan 30 15:00:49 2029 GMT
Subject: CN=846f219e60a90c0ae99b648e82f61d6072f6466d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:89:e6:30:75:2d:94:92:dd:81:5e:1c:45:
4c:86:af:b3:a8:0b:fa:8c:48:2b:17:32:f3:fe:29:
f2:a0:8d:c0:6f:58:6e:33:9e:ae:be:35:8b:8b:2b:
c7:43:7c:bc:51:ff:0a:c2:20:85:9b:24:30:a2:3a:
11:4f:a6:30:5c:98:0c:dc:ee:cd:e8:d6:b6:1f:9e:
03:ad:18:42:07:dc:cf:b4:7a:4b:db:f1:07:ec:bf:
38:b4:23:9d:dd:38:6a:cd:9d:75:75:e9:59:2f:00:
2a:c9:99:8f:36:79:75:73:43:9b:5a:1a:3d:3b:56:
f4:b0:9f:dc:ab:f2:b1:15:44:db:17:96:66:2d:5f:
cc:50:85:9f:9d:99:ee:53:73:1f:b7:6a:f0:96:13:
8e:71:04:65:f8:c5:70:1e:9d:6a:5c:b7:d9:69:d3:
0f:c2:9f:73:63:fb:3b:a6:fb:b5:5f:f0:51:46:d5:
f4:2d:0f:e3:e2:cb:34:c3:34:92:92:b9:70:1d:23:
7b:35:e4:17:f9:b4:67:a1:88:84:eb:6c:0f:93:32:
3a:bf:15:6d:61:1b:3b:df:b3:a8:f0:e4:40:68:03:
fa:d0:de:9d:ab:05:34:be:40:13:1b:db:c5:83:55:
2f:81:6d:ad:a0:68:be:9a:13:26:c7:a7:13:8a:20:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E4:30:07:0C:34:D3:C2:09:31:56:5F:88:CF:DF:98:3F:8F:AB:DF
X509v3 Authority Key Identifier:
keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/846f219e60a90c0ae99b648e82f61d6072f6466d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.239.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:55:01:bc:ea:f9:52:ee:bf:76:96:2f:e9:bc:47:f7:61:75:
eb:0f:3b:0c:80:74:fc:f2:ae:8e:a0:29:26:00:6a:89:fd:ce:
39:cc:31:32:ed:c7:54:84:94:50:db:a6:db:66:15:fa:a7:f5:
9d:09:69:1e:17:84:74:66:36:06:27:9c:f2:00:a3:b5:1f:68:
f6:02:d0:79:33:73:2b:20:a0:3c:9e:4f:69:82:9b:94:46:f6:
57:3b:eb:b0:6d:19:79:76:3f:ea:34:10:eb:38:c4:01:30:ff:
f1:ca:47:16:fb:37:ea:c2:6b:0c:9e:b7:c1:5b:e8:5b:29:20:
44:95:e6:4d:91:29:c0:74:93:fc:c9:f2:11:2f:40:ce:0b:37:
6a:5d:02:7a:88:3d:42:b0:00:d4:71:96:95:f1:05:2d:7b:4f:
e1:de:93:15:8d:38:5e:cb:8b:8f:8d:96:2a:e0:82:e5:a3:d8:
f5:b4:fd:1e:c8:39:8c:ae:eb:d6:19:7a:db:da:d5:c7:46:91:
7d:83:3f:db:9c:1d:64:3c:9c:ed:27:fe:8c:37:4e:f6:67:b3:
1c:71:65:a6:b8:aa:8b:b6:0f:24:74:12:c0:63:17:c6:3f:24:
ec:99:42:2e:11:76:20:e5:d7:df:ee:cf:a7:25:fa:ed:85:ad:
e6:44:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 23:53:32 2024 by rpki-client on console-fra.rpki-client.org