Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c0239f822a6a3b91fff04ea9e542ebc0a747bdf7.roa
File: c0239f822a6a3b91fff04ea9e542ebc0a747bdf7.roa (raw, json)
Hash identifier: It15pa2KbF+A7Cz1SReN2z9LTxrbOH3cDOUeH+pqcgQ=
Subject key identifier: 22:8D:82:3F:47:1A:78:B2:B8:66:A6:6C:49:4A:09:C5:F1:79:29:24
Certificate issuer: /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial: 275EC3
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c0239f822a6a3b91fff04ea9e542ebc0a747bdf7.roa
Signing time: Tue 07 Nov 2023 16:00:40 +0000
ROA not before: Tue 07 Nov 2023 16:00:38 +0000
ROA not after: Tue 07 Nov 2028 16:00:38 +0000
asID: 52312
IP address blocks: 190.110.240.0/21 maxlen: 24
190.110.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580163 (0x275ec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Validity
Not Before: Nov 7 16:00:38 2023 GMT
Not After : Nov 7 16:00:38 2028 GMT
Subject: CN=c0239f822a6a3b91fff04ea9e542ebc0a747bdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:3d:8e:d3:6a:6a:39:cc:0e:dc:d1:21:b1:
c0:3c:ea:34:ec:c0:5b:ef:9d:77:35:66:05:06:f3:
d0:dd:ec:7e:63:f6:e6:6d:01:89:12:1f:81:ea:87:
f5:41:42:f9:1d:61:fc:e8:8d:83:21:6b:20:fe:bd:
c9:9d:69:21:c8:ef:58:48:0c:36:86:72:7c:1f:e9:
46:a0:de:8f:27:ce:ca:fd:19:09:52:14:54:a2:f4:
7a:ad:23:59:ed:b0:60:ed:e0:2c:de:54:6d:63:b4:
cd:1b:f2:de:19:43:62:43:af:f7:f9:04:4f:54:92:
83:fc:a0:67:f4:fe:14:5d:93:08:2d:b3:56:4a:69:
71:7f:4d:37:b4:2d:6e:8b:d0:9a:12:13:a7:76:75:
92:22:34:89:47:dc:2b:be:a4:33:8f:b2:6c:b5:a1:
94:af:d8:4f:b8:cd:81:01:ff:48:fa:68:4a:09:be:
5c:25:a8:cd:a9:b9:b6:4b:8b:cc:c5:3d:a2:08:b3:
00:fa:c8:7d:3d:4e:8e:8a:65:05:fd:2a:f9:9e:35:
d9:e0:5f:e5:8e:83:6c:86:c8:bc:b7:cb:87:a6:7e:
3e:26:7f:f1:b3:81:43:9f:c3:3b:16:89:e7:c1:89:
68:b6:c0:24:da:b8:a3:7d:0e:4b:ec:52:c6:04:4e:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:82:3F:47:1A:78:B2:B8:66:A6:6C:49:4A:09:C5:F1:79:29:24
X509v3 Authority Key Identifier:
keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c0239f822a6a3b91fff04ea9e542ebc0a747bdf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.236.0/23
190.110.240.0/21
Signature Algorithm: sha256WithRSAEncryption
48:eb:6f:12:95:a8:26:0d:94:d3:49:59:b3:5b:a6:6c:68:5c:
98:52:a9:0a:a0:63:e8:02:8f:6e:5c:1d:91:59:6d:0d:66:c1:
ae:bf:64:19:9a:25:07:41:59:cd:5c:11:99:83:8e:56:b1:69:
a4:68:de:9b:04:ef:1e:60:62:5b:78:0f:c3:94:a5:57:cd:d1:
70:9e:ae:8f:68:5d:6d:f9:11:15:eb:4e:e4:5d:02:44:f4:54:
eb:90:a3:37:cc:ef:1e:79:c5:37:3a:43:15:7a:00:6b:72:12:
d6:93:96:45:02:66:11:cf:b1:c5:cd:7d:72:af:ad:b6:be:05:
89:27:09:ba:83:e4:e1:af:1f:53:3d:3d:e5:aa:1d:00:57:ea:
f1:30:f9:80:af:1f:f3:90:e4:c4:a2:06:ad:76:fe:48:f2:6a:
d3:cd:82:3f:fc:e6:77:9f:59:75:0c:e0:15:73:d7:3b:f6:7a:
a1:a0:db:ef:f4:f0:54:b5:96:11:8c:29:12:86:e3:5f:0c:6c:
6b:f2:ef:37:b1:95:d2:e7:ed:0e:92:28:fc:d3:c7:8d:2a:80:
25:15:11:38:f3:af:9f:89:a4:03:2d:31:d7:97:cb:65:87:58:
42:c6:a8:56:86:8a:ca:b0:5a:c6:f3:be:ad:a0:ec:b5:ee:f2:
e9:7c:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:33 2023 by rpki-client on console-fra.rpki-client.org