Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/fec116a6fcb767a2a94c12a0b4489c2d5d86ba68.roa
File: fec116a6fcb767a2a94c12a0b4489c2d5d86ba68.roa (raw, json)
Hash identifier: WWetut3JXhT2ZwMmzyIxmWIiOvHN0jxXOTox7djsr9o=
Subject key identifier: F7:98:18:AB:C5:2A:16:DB:31:BF:34:D0:A4:B3:D0:7D:87:9F:DE:F3
Certificate issuer: /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial: 275C93
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/fec116a6fcb767a2a94c12a0b4489c2d5d86ba68.roa
Signing time: Tue 07 Nov 2023 16:00:39 +0000
ROA not before: Tue 07 Nov 2023 16:00:38 +0000
ROA not after: Tue 07 Nov 2028 16:00:38 +0000
asID: 263699
IP address blocks: 190.114.96.0/22 maxlen: 24
190.114.96.0/22 maxlen: 24
190.114.100.0/23 maxlen: 24
200.123.36.0/22 maxlen: 24
200.123.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579603 (0x275c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Validity
Not Before: Nov 7 16:00:38 2023 GMT
Not After : Nov 7 16:00:38 2028 GMT
Subject: CN=fec116a6fcb767a2a94c12a0b4489c2d5d86ba68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:a9:e5:e7:8c:48:15:89:c7:41:a1:1e:57:
45:71:f8:67:eb:d1:89:14:09:f8:fa:01:6d:80:f2:
a6:37:4c:f6:61:8f:e7:c0:57:4f:c2:f3:5f:d6:a3:
c6:ce:1f:14:66:28:a3:db:19:5f:63:37:67:9a:a7:
eb:e4:61:6b:ec:86:ea:29:28:e1:60:73:eb:2e:bf:
a8:2d:6f:ea:fc:e9:75:ca:5c:dc:e9:1b:73:ec:15:
9a:b1:f1:a1:33:76:3e:dc:6b:97:79:0b:13:dd:da:
48:03:b3:f5:24:70:aa:63:88:b1:dd:eb:1d:c7:a0:
05:74:09:16:0d:d7:d7:74:ec:74:7b:7d:9b:9c:c2:
21:4f:b8:28:ab:15:1d:19:ad:d5:5e:3f:c1:2f:6d:
a5:24:22:9f:21:f6:c2:fd:25:f2:2f:b1:28:6c:b9:
21:bc:0b:7a:49:78:93:05:0c:4a:50:1e:aa:ec:ea:
2f:fd:83:35:55:29:4a:3b:bb:45:17:8e:d0:22:32:
b9:b6:fa:bd:3a:b0:20:31:82:6a:96:ca:ca:e6:dc:
6d:50:ef:01:74:2f:e2:f5:b4:2c:4b:07:6c:b4:45:
aa:c6:e1:65:93:06:2a:16:2b:d6:f9:d4:5f:c3:21:
1f:30:a8:7f:43:be:c7:a6:42:8c:7c:8f:89:ea:4c:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:98:18:AB:C5:2A:16:DB:31:BF:34:D0:A4:B3:D0:7D:87:9F:DE:F3
X509v3 Authority Key Identifier:
keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/fec116a6fcb767a2a94c12a0b4489c2d5d86ba68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.114.96.0-190.114.101.255
200.123.36.0-200.123.47.255
Signature Algorithm: sha256WithRSAEncryption
5a:8d:54:e5:d6:16:86:10:ec:8a:71:9e:75:47:c8:29:ea:05:
5d:e7:02:73:61:0c:d7:be:ff:fe:92:3f:07:09:01:82:b6:cb:
77:3a:f0:24:9e:c4:15:35:a9:9f:a2:2d:28:b7:7c:87:55:f9:
84:9b:c1:f2:37:0f:20:af:80:5b:14:d0:2b:ed:c1:9c:ee:7d:
f3:97:55:59:c6:fb:76:40:28:59:48:86:cf:7a:b6:d4:95:4d:
66:32:1a:9e:a0:9a:ec:ee:44:08:cf:fa:b6:c6:38:9e:0e:88:
b1:60:1b:49:09:7f:e2:e2:30:d4:ae:df:34:ef:46:84:4a:ab:
ce:c1:d9:34:c3:03:34:c9:ef:df:a7:eb:1a:e1:78:b0:71:25:
d6:ad:b5:87:ba:56:2c:6d:ab:d9:91:71:11:2d:57:93:d2:0f:
8d:b6:e1:f0:54:ba:32:0d:85:a4:7f:ae:7b:71:4d:c5:08:de:
c3:87:49:6c:06:05:b6:d6:40:d7:5b:4d:c9:96:ed:f1:5b:f5:
46:22:30:6b:6f:88:a0:5a:80:36:65:29:8f:fd:81:54:a4:77:
08:04:9a:01:5d:c9:3b:2a:fa:29:cc:b6:e6:3e:56:6d:83:8c:
be:1a:56:f2:ec:1e:0b:fe:c9:dc:59:eb:54:cb:ff:cb:b6:22:
11:10:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:33 2023 by rpki-client on console-fra.rpki-client.org