Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9075770929a59f4a11499ef29186bab888f841d5.roa
File: 9075770929a59f4a11499ef29186bab888f841d5.roa (raw, json)
Hash identifier: BkfawFTVIgdhtA+/0buV7a/GB1t4zvJaO+QeBnxHXfA=
Subject key identifier: 08:D3:CD:01:8C:CB:7E:4C:00:B3:FD:50:02:D2:8E:77:9F:5B:3F:F6
Certificate issuer: /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial: 29D9BF
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9075770929a59f4a11499ef29186bab888f841d5.roa
Signing time: Tue 30 Jan 2024 15:00:52 +0000
ROA not before: Tue 30 Jan 2024 15:00:49 +0000
ROA not after: Tue 30 Jan 2029 15:00:49 +0000
asID: 11514
IP address blocks: 190.110.253.0/24 maxlen: 24
190.114.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2742719 (0x29d9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Validity
Not Before: Jan 30 15:00:49 2024 GMT
Not After : Jan 30 15:00:49 2029 GMT
Subject: CN=9075770929a59f4a11499ef29186bab888f841d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8a:6f:b4:3c:4d:6b:7e:aa:c2:ee:55:3f:c7:
a9:e1:67:9f:4f:45:d9:4b:d6:d6:06:35:38:af:ec:
70:af:b6:9c:e2:0f:36:4a:f8:88:b6:33:78:7d:c1:
08:ad:5f:98:5d:0c:42:cc:20:86:1e:23:8b:15:3e:
bb:93:95:a6:1d:02:9a:76:83:c1:51:4b:4d:29:65:
71:dc:62:27:55:65:a6:4e:4e:59:ff:88:9f:9a:b0:
50:e3:9e:6f:9b:ac:8b:f7:ad:f8:7d:96:2c:78:60:
a6:e9:0b:e7:92:92:12:dc:94:b5:a5:be:38:23:de:
28:92:ef:ef:b8:b3:a5:20:d8:6d:4c:cd:6d:e6:12:
a2:11:7a:e5:11:21:ed:ae:10:08:0a:c7:77:86:08:
98:ea:c9:45:66:12:81:6b:a7:5e:6e:b9:69:4e:55:
91:77:7f:7d:9b:b2:fe:c9:8e:24:a6:69:76:28:81:
9e:ef:6f:4e:88:04:33:71:37:75:88:8e:d2:24:88:
c5:9d:ed:ae:e0:60:5d:d1:99:8f:ff:90:48:b6:55:
e8:7f:86:81:bc:0a:9d:33:39:a7:ad:e3:11:b0:3d:
be:ee:85:8b:7f:ca:6a:2a:00:7e:47:b5:1e:fe:f4:
44:f0:fd:0c:65:88:b2:f9:99:4a:b7:66:e5:7b:e4:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D3:CD:01:8C:CB:7E:4C:00:B3:FD:50:02:D2:8E:77:9F:5B:3F:F6
X509v3 Authority Key Identifier:
keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9075770929a59f4a11499ef29186bab888f841d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.253.0/24
190.114.103.0/24
Signature Algorithm: sha256WithRSAEncryption
07:dd:8d:15:e4:ff:a6:ea:e5:f7:64:e0:2e:a9:32:d3:52:a7:
37:1e:5b:ac:ea:ff:f7:be:11:43:dc:7a:2f:dc:a7:79:22:24:
93:38:cd:d5:b6:36:03:c5:f4:f0:45:2a:52:8c:e2:f3:14:26:
19:41:dd:21:66:90:22:11:77:0b:0a:80:da:6f:26:4b:11:cc:
8b:1d:48:a2:6c:f6:c1:83:06:b7:fd:c2:7d:f0:84:52:91:28:
30:14:17:de:ce:a9:e5:5c:6e:25:34:13:71:4f:1f:ef:6d:d6:
02:9d:84:aa:50:49:18:77:17:59:b4:7f:e4:db:f2:b7:b3:ca:
5b:ae:a1:c4:b1:c0:0b:05:b3:5a:a7:31:38:fd:de:78:d8:de:
98:86:24:00:81:48:58:46:43:46:2e:17:79:af:ee:15:cb:6b:
e7:64:5f:8d:d3:d6:1d:e8:d7:43:94:d8:ae:51:ae:b9:e8:68:
a2:d1:4a:e7:a8:d7:94:69:cc:e2:be:5e:b3:20:15:33:74:1c:
b8:bb:ad:82:4a:d5:ba:fa:96:e7:31:a6:87:c6:7f:23:90:0a:
66:f4:b8:59:fe:e9:b5:46:68:7b:54:de:5c:c5:48:39:cd:94:
ec:95:c5:b4:95:69:84:61:55:17:98:f8:da:e7:e1:2a:8f:bb:
54:19:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 23:53:32 2024 by rpki-client on console-fra.rpki-client.org