Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46011afb-db30-4ace-88fd-e960c83ba1bd/0e03d74b6ae74ff6cbb7c2fb2f48fafe154880f8.roa
File: 0e03d74b6ae74ff6cbb7c2fb2f48fafe154880f8.roa (raw, json)
Hash identifier: XZiIiuS42+p/DRSyXTUibptFgAAvq4cKgoBOY1JrWQk=
Subject key identifier: 2A:42:9E:24:C2:D9:19:A4:B2:1A:38:D8:5B:B8:F3:1E:31:4C:B7:FB
Certificate issuer: /CN=08e9d01990e098cff41050acf137c8e5045f6724
Certificate serial: 196177
Authority key identifier: AC:29:28:6D:22:D4:6D:32:A9:FE:EA:85:CA:21:0B:AE:96:E2:55:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e9d01990e098cff41050acf137c8e5045f6724.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/46011afb-db30-4ace-88fd-e960c83ba1bd/0e03d74b6ae74ff6cbb7c2fb2f48fafe154880f8.roa
Signing time: Mon 25 Jul 2022 14:22:43 +0000
ROA not before: Mon 25 Jul 2022 03:00:00 +0000
ROA not after: Thu 25 Jul 2024 03:00:00 +0000
asID: 28015
IP address blocks: 190.5.160.0/20 maxlen: 24
190.5.177.0/24 maxlen: 24
190.5.178.0/23 maxlen: 23
190.5.180.0/22 maxlen: 24
190.5.184.0/22 maxlen: 24
190.5.188.0/23 maxlen: 24
190.5.191.0/24 maxlen: 24
190.6.210.0/23 maxlen: 24
190.6.212.0/22 maxlen: 24
190.6.216.0/21 maxlen: 24
190.107.96.0/19 maxlen: 24
190.124.128.0/20 maxlen: 24
190.124.144.0/21 maxlen: 24
190.124.154.0/23 maxlen: 24
190.124.156.0/22 maxlen: 24
200.63.32.0/21 maxlen: 24
201.217.224.0/20 maxlen: 24
201.219.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1663351 (0x196177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e9d01990e098cff41050acf137c8e5045f6724
Validity
Not Before: Jul 25 03:00:00 2022 GMT
Not After : Jul 25 03:00:00 2024 GMT
Subject: CN=0e03d74b6ae74ff6cbb7c2fb2f48fafe154880f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:cf:92:35:3b:ea:44:71:14:73:b7:5b:41:
6f:7b:78:37:81:67:f9:ab:e3:04:96:31:6c:6f:58:
3c:68:ab:dd:16:02:ee:44:9d:5b:38:3c:df:b9:9c:
60:8a:59:93:57:70:be:75:55:df:df:5d:04:37:3e:
c5:5e:61:73:6a:2a:51:d0:de:b9:11:1f:66:44:3a:
46:97:d8:52:1e:50:37:52:0d:9b:e6:da:9d:02:01:
04:d5:6b:51:1a:3d:3f:7b:60:38:de:1b:c4:b8:27:
a7:3d:77:95:83:5f:85:62:eb:bd:bb:55:9d:50:f6:
7e:62:56:1c:f4:a7:e0:60:11:a0:03:6a:75:7c:29:
37:33:04:9c:f5:16:78:f3:b2:19:9f:f9:e2:f3:6b:
af:e4:b7:9a:cd:b9:63:48:a5:b3:9d:80:4d:13:b9:
83:8e:a9:63:92:b9:af:c3:2f:ff:7d:91:c9:56:fc:
68:5c:da:1d:3e:98:38:14:d0:be:95:cd:22:de:89:
2a:c4:3f:64:2d:b3:86:03:d4:2f:3f:31:7f:d8:1d:
d3:1a:4b:83:fc:6e:f2:58:a5:e8:09:ef:9f:0f:6b:
4b:93:f4:fb:54:f1:1e:de:8d:60:b2:00:33:5d:4e:
af:32:0a:a9:11:1e:30:50:b6:93:fb:54:09:8d:3f:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:42:9E:24:C2:D9:19:A4:B2:1A:38:D8:5B:B8:F3:1E:31:4C:B7:FB
X509v3 Authority Key Identifier:
keyid:AC:29:28:6D:22:D4:6D:32:A9:FE:EA:85:CA:21:0B:AE:96:E2:55:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e9d01990e098cff41050acf137c8e5045f6724.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46011afb-db30-4ace-88fd-e960c83ba1bd/0e03d74b6ae74ff6cbb7c2fb2f48fafe154880f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/46011afb-db30-4ace-88fd-e960c83ba1bd/08e9d01990e098cff41050acf137c8e5045f6724.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.5.160.0/20
190.5.177.0-190.5.189.255
190.5.191.0/24
190.6.210.0-190.6.223.255
190.107.96.0/19
190.124.128.0-190.124.151.255
190.124.154.0-190.124.159.255
200.63.32.0/21
201.217.224.0/20
201.219.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:0b:2b:40:c5:42:47:fb:33:27:4b:2f:0b:a4:df:84:f9:34:
9f:2d:a5:6d:c2:5c:83:1a:8c:1a:11:d1:c0:82:91:8f:76:18:
b3:46:20:11:88:f8:95:78:ce:34:2f:9a:c0:36:2c:a4:0d:fd:
75:48:05:dc:65:66:9d:c9:84:0e:95:e8:ad:b1:0f:43:ef:e7:
44:ea:48:16:72:81:df:2d:c0:58:55:bd:19:29:c4:04:a7:99:
76:f9:7f:f9:50:02:46:4c:c3:a0:28:f8:25:82:74:b5:cd:89:
7a:90:a2:5c:c3:62:28:81:43:66:54:16:94:ee:a9:41:2f:9d:
27:4a:22:e7:e7:98:84:7a:01:5c:15:af:14:ef:d4:51:4a:e2:
c1:60:a0:85:d8:fa:0b:b7:4f:5e:13:3c:12:c6:19:a5:be:9d:
82:47:27:0a:63:b6:bf:30:c6:18:9e:7c:21:a3:58:fe:ec:57:
35:d0:12:0e:49:31:c9:50:60:ee:d0:8a:f6:07:ec:9d:39:6e:
0e:17:93:a1:9c:8b:f5:72:00:4c:b1:95:6e:d0:d0:be:10:da:
00:4e:bf:b9:13:99:39:e3:e5:a0:2d:96:34:28:72:71:0d:f9:
21:b0:37:09:24:69:55:7c:81:dc:20:80:ee:62:d4:e0:a9:7c:
54:08:70:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org