Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/92b06f549ef556823fe08cc1b286cb54def0fce2.roa
File: 92b06f549ef556823fe08cc1b286cb54def0fce2.roa (raw, json)
Hash identifier: OhNaNqyKgM3T6YNtiQPqigu6GxKecEOIuENh5BRIUZg=
Subject key identifier: 2D:D4:04:98:AA:0D:5F:88:4B:24:1E:D4:38:93:3A:1A:F2:49:90:58
Certificate issuer: /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial: 24DEEF
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/92b06f549ef556823fe08cc1b286cb54def0fce2.roa
Signing time: Thu 10 Aug 2023 18:00:38 +0000
ROA not before: Wed 09 Aug 2023 18:00:35 +0000
ROA not after: Thu 10 Aug 2028 18:00:35 +0000
asID: 264797
IP address blocks: 190.110.248.0/23 maxlen: 24
190.110.252.0/24 maxlen: 24
200.123.49.0/24 maxlen: 24
200.123.51.0/24 maxlen: 24
200.123.54.0/23 maxlen: 24
200.50.166.0/24 maxlen: 24
200.50.169.0/24 maxlen: 24
200.50.171.0/24 maxlen: 24
200.50.172.0/24 maxlen: 24
200.50.174.0/23 maxlen: 24
200.50.174.0/23 maxlen: 24
200.50.176.0/21 maxlen: 24
200.50.184.0/22 maxlen: 24
200.50.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2416367 (0x24deef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
Validity
Not Before: Aug 9 18:00:35 2023 GMT
Not After : Aug 10 18:00:35 2028 GMT
Subject: CN=92b06f549ef556823fe08cc1b286cb54def0fce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:ae:53:70:53:ae:fd:69:9c:7b:3a:96:4c:
84:c5:6e:ef:41:a4:1d:76:5b:82:93:33:d9:fb:e3:
e6:bc:1e:f4:e1:52:a4:1f:5e:4b:48:07:c8:3d:80:
31:0e:1c:b3:1d:69:6c:07:77:32:de:84:79:cd:a6:
61:08:33:6d:80:e6:1a:91:2b:04:a3:77:51:c9:63:
a9:5d:70:82:e5:b1:4f:c8:75:d4:be:56:2d:de:80:
a0:8b:81:38:f1:4f:47:f0:15:2e:38:1f:c9:3b:de:
3a:b0:05:0f:1e:a5:81:23:e3:55:a6:03:5f:dc:b2:
ab:de:82:a6:a6:96:24:42:9f:bb:7f:c8:57:12:13:
07:14:eb:f2:4e:4d:1b:f2:35:04:79:f1:98:63:78:
e6:45:2c:ba:39:fd:0b:41:62:ce:f9:77:7e:5e:1b:
42:3d:c5:68:9b:d8:4d:2a:e4:eb:b4:d9:04:b2:6b:
e9:a5:45:bc:cc:f8:dd:0d:0a:86:72:24:af:3e:df:
43:d8:ad:3e:f1:6a:a1:f5:0a:aa:ab:89:e6:fa:21:
c7:53:14:71:82:7b:b0:9d:da:a8:5e:19:e3:cd:40:
4a:d9:ce:ed:0c:c7:d7:4f:01:cc:16:aa:b5:8f:e4:
7c:87:7b:99:19:22:35:16:c7:d9:19:d2:65:b0:0f:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D4:04:98:AA:0D:5F:88:4B:24:1E:D4:38:93:3A:1A:F2:49:90:58
X509v3 Authority Key Identifier:
keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/92b06f549ef556823fe08cc1b286cb54def0fce2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.248.0/23
190.110.252.0/24
200.50.166.0/24
200.50.169.0/24
200.50.171.0-200.50.172.255
200.50.174.0-200.50.189.255
200.123.49.0/24
200.123.51.0/24
200.123.54.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:f2:ed:82:01:5f:3d:94:6d:de:8e:87:bf:2e:2f:c9:34:1e:
c6:5c:96:51:02:6d:68:b4:8b:4b:6a:47:8e:85:cf:fc:1f:ef:
d9:63:de:f0:16:2c:2d:3c:e3:ac:ea:59:98:cc:5e:85:63:92:
f6:4c:88:0d:39:9a:8b:bb:2e:e4:58:98:2b:1a:b1:47:2a:fa:
9a:78:1b:6e:19:87:36:f6:13:2e:95:62:ef:8c:60:c0:27:16:
08:82:97:44:11:91:a7:d6:87:7f:b0:e5:46:6d:b1:78:50:f4:
fd:46:41:c8:0e:7f:d6:c9:3f:79:ea:2c:62:03:14:7c:2a:1f:
bf:7c:b9:d1:f4:fe:08:84:d9:8a:1c:cb:37:8e:ab:29:26:6b:
e7:6a:15:0e:ce:e3:ed:4b:79:86:76:30:19:d3:0d:77:f2:36:
66:79:54:6b:d2:88:ac:d4:b5:53:f7:94:f8:96:88:57:b0:1e:
ad:42:2d:9c:fe:33:9f:9b:ff:75:fb:b5:e9:b9:05:54:db:35:
f9:b5:d7:0e:c8:be:27:14:6c:06:08:ee:6c:68:9c:7a:78:7c:
4a:08:1d:be:07:eb:75:03:d3:16:7c:08:4a:7f:36:81:7e:7f:
82:9f:5d:91:aa:59:bd:00:7c:2d:9b:0f:a9:e8:20:e1:c3:13:
72:ec:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:27:49 2023 by rpki-client on console-fra.rpki-client.org