Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ace847822e719ae09282dee8181c7743ca86b1f3.roa
File: ace847822e719ae09282dee8181c7743ca86b1f3.roa (raw, json)
Hash identifier: c1Pgfqv6j2NvrGFOLma6lBK8cyqbIxD2bl4xbqf0keI=
Subject key identifier: 23:0E:F5:A6:CA:AF:0E:26:36:83:E0:E9:02:AA:E6:B1:4E:65:AB:1B
Certificate issuer: /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial: 24D965
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ace847822e719ae09282dee8181c7743ca86b1f3.roa
Signing time: Thu 10 Aug 2023 18:00:36 +0000
ROA not before: Wed 09 Aug 2023 18:00:35 +0000
ROA not after: Thu 10 Aug 2028 18:00:35 +0000
asID: 263699
IP address blocks: 190.114.96.0/22 maxlen: 24
190.114.96.0/22 maxlen: 24
190.114.100.0/23 maxlen: 24
200.123.36.0/22 maxlen: 24
200.123.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414949 (0x24d965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
Validity
Not Before: Aug 9 18:00:35 2023 GMT
Not After : Aug 10 18:00:35 2028 GMT
Subject: CN=ace847822e719ae09282dee8181c7743ca86b1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:2f:62:f2:7f:24:4b:cd:cc:47:a3:53:0b:
37:24:3b:3c:36:d5:ec:84:e5:9c:1e:72:71:04:47:
1d:f1:14:1d:3b:bf:e0:d6:ad:e3:cb:f0:0b:47:46:
24:ad:c1:0e:b9:58:ce:5c:ca:c5:48:55:fa:b9:86:
ff:e8:e1:ff:67:7a:69:0b:ee:da:08:4e:bc:0f:09:
45:03:4b:fc:6e:fd:e8:c5:18:ff:41:48:7d:70:af:
ca:02:ab:c6:cf:f0:2f:33:97:56:e1:be:61:3a:a3:
a8:cc:75:aa:4e:3a:f6:63:fa:2d:77:7a:24:2b:c0:
ec:a4:48:11:c9:a9:78:8a:c6:74:21:1f:03:52:8b:
8d:61:44:6d:f7:cf:39:7a:4b:86:87:0a:bb:b2:a0:
21:1e:ee:1f:ad:fe:54:d9:84:6f:02:29:6b:42:db:
fa:5d:d7:46:ec:03:03:cc:30:a5:29:f5:06:e6:8f:
1d:43:dc:96:5c:04:c6:3a:75:44:ea:90:a7:4c:1b:
df:30:24:00:8e:f7:68:4f:3b:ed:bf:d2:30:35:d4:
54:38:30:d2:4c:04:9e:89:6c:07:ae:5b:37:21:34:
52:1c:a6:1c:d9:04:bc:ba:3e:b0:c2:03:48:f6:ca:
7e:72:57:a3:b0:d4:80:ca:ca:aa:de:81:58:8f:b2:
d6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0E:F5:A6:CA:AF:0E:26:36:83:E0:E9:02:AA:E6:B1:4E:65:AB:1B
X509v3 Authority Key Identifier:
keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ace847822e719ae09282dee8181c7743ca86b1f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.114.96.0-190.114.101.255
200.123.36.0-200.123.47.255
Signature Algorithm: sha256WithRSAEncryption
30:67:89:e5:75:8a:85:fc:a1:e7:0b:05:33:de:5c:96:3c:9e:
37:15:5e:d0:fd:a6:f3:ba:47:dc:3b:4e:44:ee:78:c6:72:6c:
c8:98:5c:97:5a:11:8d:05:d6:1c:39:29:fe:73:30:3f:ef:59:
65:cb:b8:e9:dd:4e:d8:9a:81:c3:f8:e9:38:c8:df:30:34:41:
1a:72:82:80:f0:80:37:8b:26:d2:87:24:da:bd:2e:74:0d:da:
99:8e:f0:80:1b:87:81:70:52:2d:1a:ff:80:8f:28:f1:a4:e5:
fc:09:77:07:30:7f:d7:b2:7e:12:05:95:ae:52:8e:26:24:3f:
ee:02:a4:be:de:38:4a:00:f5:a6:f2:e9:dd:c0:5a:fd:c5:0c:
04:e7:2a:db:b7:31:3e:7b:d9:5d:0d:84:34:1a:ba:cc:6d:59:
0c:a0:69:95:bf:bd:44:52:6a:b5:26:6e:e7:08:e6:b5:c2:3a:
3a:c4:cc:d6:27:40:7c:da:b1:c3:44:67:5a:71:43:17:ae:6e:
0c:f5:c0:cf:e3:2a:ac:56:66:3e:23:4e:6a:ed:a3:f3:c0:42:
1f:a7:ec:88:21:31:f8:cb:9c:07:8b:2b:b3:6c:94:70:fc:8a:
d0:ce:4e:a5:e6:b0:25:aa:a0:02:41:da:56:c6:31:b1:0a:97:
d7:4e:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:57:29 2023 by rpki-client on console-ams.rpki-client.org