Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/af46bbd00d34dfb7aeb1629b4ed9d83ab3608ee5.roa
File: af46bbd00d34dfb7aeb1629b4ed9d83ab3608ee5.roa (raw, json)
Hash identifier: FVTG+3bYgddyhj3lQO2MNtSJDO2EGIhFnepEYG/PuCU=
Subject key identifier: FF:DF:14:59:B3:16:CE:35:39:EA:61:A5:25:35:53:9D:B4:A5:3C:4C
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 244298
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/af46bbd00d34dfb7aeb1629b4ed9d83ab3608ee5.roa
Signing time: Mon 17 Jul 2023 16:19:18 +0000
ROA not before: Sun 16 Jul 2023 16:19:18 +0000
ROA not after: Thu 17 Jul 2025 16:19:18 +0000
asID: 263834
IP address blocks: 190.110.229.0/24 maxlen: 24
190.110.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376344 (0x244298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Jul 16 16:19:18 2023 GMT
Not After : Jul 17 16:19:18 2025 GMT
Subject: CN=af46bbd00d34dfb7aeb1629b4ed9d83ab3608ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:eb:fb:7c:52:83:be:24:af:84:a1:8d:4c:91:
57:df:78:8a:e0:ab:0c:13:10:54:b2:72:39:f8:fa:
a3:9b:4c:3a:72:bf:3f:c7:ff:c6:1d:0f:6d:bd:80:
f3:ee:ef:c2:83:4a:36:63:f5:42:f8:1b:85:fc:21:
c3:d7:cf:c8:31:c5:28:c2:04:fb:0c:a3:75:82:a4:
05:5d:94:33:c4:c6:af:76:01:79:32:dc:16:96:f0:
bf:e1:ba:95:f4:59:e6:59:c5:96:5a:21:6b:ef:73:
6d:e8:af:d3:53:c8:a6:f9:b1:2e:82:b9:d1:0e:e4:
b0:01:03:1f:36:d9:97:29:33:11:4f:f9:3a:2f:ad:
f0:7c:21:9e:7d:54:db:aa:4e:6f:e6:70:a0:dd:a1:
6d:de:5a:43:5a:2a:7c:90:58:0b:76:c7:ae:5c:6c:
94:9e:3a:68:02:09:7d:70:89:9a:36:21:df:57:1b:
f1:e2:a9:af:fc:bf:7e:d8:c3:97:6e:e5:35:7a:b1:
01:0d:82:07:f0:dd:1c:5a:02:51:05:f6:f5:35:a5:
b3:cd:c2:32:29:ac:74:ac:fd:99:fd:c1:7c:07:cc:
2d:74:b5:62:50:e8:5f:cf:46:e9:e4:8e:b6:8e:f8:
a8:ee:5b:26:ce:ff:97:80:f6:4f:7f:fd:00:d9:2a:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DF:14:59:B3:16:CE:35:39:EA:61:A5:25:35:53:9D:B4:A5:3C:4C
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/af46bbd00d34dfb7aeb1629b4ed9d83ab3608ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.229.0-190.110.231.255
Signature Algorithm: sha256WithRSAEncryption
4f:cb:be:e1:3c:6d:ce:7c:ac:23:70:ff:5d:dd:fc:d2:b8:a9:
db:e0:6b:2f:d6:ca:9d:af:41:ec:4c:6b:9b:10:ad:4e:24:ba:
18:90:6a:f7:e1:c4:56:fa:41:1c:43:5d:b3:7d:d7:b0:34:9e:
72:53:2b:78:02:43:13:c2:e7:3c:41:2a:da:2a:09:f7:3c:5c:
da:34:12:eb:6c:ea:a5:fd:54:d8:bb:01:ae:52:ea:7f:ca:6f:
3e:2a:24:b5:db:d4:2a:34:12:68:34:68:0e:78:1d:c5:4a:cd:
3f:d2:87:72:9d:1e:d1:ba:fe:11:aa:24:79:be:72:13:1b:64:
99:96:52:0b:bd:39:07:72:1a:d3:43:71:ae:aa:ce:f9:86:35:
68:9c:ba:a1:b1:f3:8d:ec:8c:64:d3:8a:3f:d0:a6:9e:e5:85:
58:b7:2e:3e:94:49:73:3f:f0:ac:f6:a7:ab:23:9e:4b:dd:0a:
dc:53:e7:0c:84:79:9c:c7:3f:0b:51:f8:c3:7f:4c:b4:e1:90:
9f:8b:3b:46:fc:e1:cc:6a:8c:3d:03:6d:0b:a5:24:57:5e:8a:
9e:78:e4:dd:3e:86:25:bd:57:20:7f:4d:9a:64:41:51:d2:bd:
03:89:f8:40:79:8a:67:a8:2e:00:11:5e:d4:04:b2:36:68:48:
de:c0:bd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:46:42 2023 by rpki-client on console-ams.rpki-client.org