Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/0c2dab1ab6cbdd802cedc92f70482bc762c6b71b.roa
File: 0c2dab1ab6cbdd802cedc92f70482bc762c6b71b.roa (raw, json)
Hash identifier: haO+22pRRKogOUBqXYXWoQS0MUVkGtDglED9ZUIeP1A=
Subject key identifier: AE:28:F7:4A:BB:0D:0A:D7:BF:17:9E:31:4A:FA:18:B2:A3:0E:DD:D3
Certificate issuer: /CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Certificate serial: 168B6D
Authority key identifier: F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/0c2dab1ab6cbdd802cedc92f70482bc762c6b71b.roa
Signing time: Wed 08 Nov 2023 03:00:50 +0000
ROA not before: Wed 08 Nov 2023 03:00:50 +0000
ROA not after: Sat 08 Nov 2025 03:00:50 +0000
asID: 271773
IP address blocks: 190.13.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1477485 (0x168b6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Validity
Not Before: Nov 8 03:00:50 2023 GMT
Not After : Nov 8 03:00:50 2025 GMT
Subject: CN=0c2dab1ab6cbdd802cedc92f70482bc762c6b71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:b5:28:5b:fc:50:48:d2:2e:04:fa:ed:6d:
2b:4a:75:e2:ef:5a:fb:c5:f6:80:f8:9d:bc:b6:7f:
d1:ae:f9:a0:5f:5f:2e:eb:c0:3a:6d:88:94:d1:7f:
d8:c5:e7:d6:b6:a8:46:4e:c3:33:62:2a:5e:e2:b9:
4d:bf:cb:7f:3f:03:0d:02:f7:5f:a8:64:c1:cb:b1:
06:44:b7:db:c2:1d:9f:b9:8a:84:c7:de:b3:c7:08:
0a:e2:66:18:40:fe:7a:2c:55:61:e2:14:af:cf:cc:
4c:9b:47:0f:35:90:05:f4:74:37:d8:58:cf:37:a3:
81:57:49:ba:3d:53:1e:bf:bb:38:be:5d:44:35:b3:
d9:29:9f:5f:3e:f7:dc:d6:ec:91:5c:e5:a8:e1:9e:
09:5c:f6:a5:38:5d:eb:ac:17:02:e1:6b:4c:50:a8:
70:f7:ab:d5:96:53:09:b8:01:8a:c1:f1:23:4d:e3:
7e:89:37:25:ed:47:f0:82:49:49:fc:37:27:44:19:
72:65:bc:b0:10:28:d8:5e:3f:e5:ae:87:f6:e7:a8:
25:42:25:ee:53:11:c1:94:47:7e:3f:0f:70:21:a1:
56:5c:95:ef:f5:15:0c:57:55:91:7d:eb:6f:ed:41:
45:d2:1d:dd:d7:a1:b1:99:76:a3:5a:71:d5:b5:ba:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:F7:4A:BB:0D:0A:D7:BF:17:9E:31:4A:FA:18:B2:A3:0E:DD:D3
X509v3 Authority Key Identifier:
keyid:F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/0c2dab1ab6cbdd802cedc92f70482bc762c6b71b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.13.192.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:7c:35:bf:e8:25:ee:0e:4d:31:81:6c:1b:0e:a0:a9:6d:2c:
6b:21:17:59:0b:c0:c8:91:fc:b2:b1:e1:1f:bc:c1:8a:e8:cb:
69:7d:56:f4:24:61:43:e5:ba:00:f3:bc:9d:de:99:4a:e7:35:
01:d4:be:5b:a9:cc:d0:07:13:e6:86:fb:a8:6b:b0:bd:6f:e9:
58:a2:98:dc:97:0d:71:0d:c3:76:c9:d2:c4:10:79:4b:f7:c5:
d9:00:47:c9:55:d4:ba:d3:6b:6e:d0:96:fe:19:24:81:30:f5:
3a:13:73:72:e3:22:11:c8:6b:17:1a:2b:82:ab:ac:f3:c8:1c:
8c:d2:5a:8a:c3:77:28:de:03:55:4e:3e:43:3f:11:dd:46:da:
68:0c:54:2e:c9:db:4d:22:19:bc:0a:f9:3c:f7:c7:ad:0f:91:
8f:a4:2f:dc:f7:27:26:17:7b:d6:6e:3f:09:85:97:0c:bf:e8:
4d:7b:cb:d6:b3:21:16:07:1a:f4:a8:8b:42:29:4a:25:d1:63:
94:dd:23:02:27:01:39:05:91:36:1f:50:25:c8:cc:ea:ae:8d:
11:3f:e5:09:9b:9a:14:90:9d:be:42:46:54:48:f7:b5:30:bf:
d8:8d:05:a0:3e:39:6e:c0:5b:95:78:65:62:e8:21:9a:3a:7b:
1e:40:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org