Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/48fb834f1e0794375ab1ef6d947be1f69549cc00.roa
File: 48fb834f1e0794375ab1ef6d947be1f69549cc00.roa (raw, json)
Hash identifier: jsYazWnIEjewmuWfysS9nzgJq/zRsvuMTGviV3EIDWo=
Subject key identifier: BD:5E:2C:4E:10:63:BC:AE:45:DC:A8:3B:5E:56:28:FA:65:DF:E9:F7
Certificate issuer: /CN=3a42a7b9520279dc23cca505fffe138c6e922475
Certificate serial: 21C226
Authority key identifier: 14:A5:D5:FB:37:98:45:41:6C:D0:23:61:A8:3A:8C:C7:DD:E5:D6:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a42a7b9520279dc23cca505fffe138c6e922475.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/48fb834f1e0794375ab1ef6d947be1f69549cc00.roa
Signing time: Thu 29 Jun 2023 20:27:06 +0000
ROA not before: Wed 28 Jun 2023 20:27:06 +0000
ROA not after: Sun 29 Jun 2025 20:27:06 +0000
asID: 52468
IP address blocks: 190.107.208.0/22 maxlen: 24
170.80.16.0/22 maxlen: 24
2803:1e00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212390 (0x21c226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a42a7b9520279dc23cca505fffe138c6e922475
Validity
Not Before: Jun 28 20:27:06 2023 GMT
Not After : Jun 29 20:27:06 2025 GMT
Subject: CN=48fb834f1e0794375ab1ef6d947be1f69549cc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a9:41:e8:aa:85:8f:06:b6:fa:a7:ac:7f:a2:
b1:3f:31:d0:20:07:9e:b0:96:30:be:d3:88:f3:aa:
62:cd:d6:4b:a6:7a:e0:e2:33:8d:65:b6:04:05:70:
fc:9c:83:a6:b8:fc:3c:57:6a:3c:f0:6f:66:47:46:
e5:81:d0:d2:2d:56:14:d2:c4:94:21:01:2d:80:a3:
08:a8:8f:2f:d9:19:28:43:6f:a1:9a:4e:d1:01:83:
dd:f9:7f:51:3a:df:a3:44:3f:23:82:e4:07:38:ea:
11:b6:04:09:ec:1a:90:28:b1:54:86:fc:28:db:c1:
aa:21:61:92:12:e3:9c:39:47:74:0b:8f:a6:76:a8:
88:c7:58:32:9f:0a:59:52:02:f2:d0:7c:2f:0f:90:
84:59:90:ba:f3:f8:e1:44:6d:61:fe:cd:62:b1:b1:
2c:05:50:bf:6e:5f:a6:ed:5d:63:97:2c:fe:f6:d9:
ec:dc:e8:43:0d:20:ab:9d:96:fb:9d:26:9b:da:50:
05:11:4d:67:eb:8d:49:2b:77:b8:80:6f:c5:4f:8e:
bb:64:23:83:01:cb:2e:58:b1:30:7f:8a:9c:10:fa:
59:20:0e:61:c1:bf:eb:3a:9f:47:e5:0b:25:28:59:
c5:10:f3:c5:df:fc:32:60:9d:2a:4c:1c:31:66:14:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5E:2C:4E:10:63:BC:AE:45:DC:A8:3B:5E:56:28:FA:65:DF:E9:F7
X509v3 Authority Key Identifier:
keyid:14:A5:D5:FB:37:98:45:41:6C:D0:23:61:A8:3A:8C:C7:DD:E5:D6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a42a7b9520279dc23cca505fffe138c6e922475.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/48fb834f1e0794375ab1ef6d947be1f69549cc00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/3a42a7b9520279dc23cca505fffe138c6e922475.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.16.0/22
190.107.208.0/22
IPv6:
2803:1e00::/32
Signature Algorithm: sha256WithRSAEncryption
07:36:44:8e:65:9e:74:da:0d:52:4c:35:28:6f:72:95:a8:4d:
70:d5:10:32:e2:f8:e5:8b:a8:70:0f:50:2c:a2:90:06:35:d7:
a8:c8:fb:f8:1e:92:23:4f:82:8a:b9:c6:17:75:b1:52:b5:8c:
96:74:4a:e6:c2:e8:64:ba:0f:7b:22:73:88:25:e1:fe:81:cb:
10:c1:bf:e4:6e:c3:26:c0:05:b1:50:21:6f:a2:f6:80:09:9a:
03:69:dd:64:05:fb:a2:43:de:ec:dc:d2:8f:89:3d:11:0a:45:
2a:2e:e5:ae:b1:94:4f:56:8f:97:1f:fd:f5:2d:f2:c7:c9:cb:
5b:66:b3:f5:2d:21:51:c5:c4:64:36:37:9a:30:25:92:86:5b:
16:1e:e1:13:fa:77:7b:d7:42:cb:14:a4:4c:4d:f0:0a:f4:21:
b5:fd:1b:86:94:61:b0:93:31:8d:b9:bd:13:e0:67:7a:c4:e4:
97:90:72:04:ae:4a:4f:8d:df:65:30:50:82:9b:07:cc:00:0b:
2f:f0:79:ef:27:79:4f:c0:0b:4a:c7:87:b1:2d:ce:52:5e:8a:
52:1d:fe:8e:63:36:5e:35:fb:0e:72:03:bd:58:f1:fe:86:79:
be:94:64:46:ad:22:13:9a:ff:7c:08:75:3e:cc:77:8a:7d:47:
5b:4b:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org