Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/c5ffd10c6c50e343bdb4cd8d8cd6316b3d922aaf.roa
File: c5ffd10c6c50e343bdb4cd8d8cd6316b3d922aaf.roa (raw, json)
Hash identifier: kd5R4iyPe5ERJvAdKHEbOkkgEqWesiXzEni6AmuNRl8=
Subject key identifier: D3:A3:EE:A2:C5:CB:32:EE:CB:82:99:89:C7:2E:74:F9:7E:64:16:84
Certificate issuer: /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial: 092379
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/c5ffd10c6c50e343bdb4cd8d8cd6316b3d922aaf.roa
Signing time: Fri 15 Mar 2024 12:47:33 +0000
ROA not before: Fri 15 Mar 2024 12:47:22 +0000
ROA not after: Thu 15 Mar 2029 12:47:22 +0000
asID: 6503
IP address blocks: 189.205.0.0/17 maxlen: 24
200.36.96.0/19 maxlen: 24
189.205.128.0/17 maxlen: 24
207.249.128.0/19 maxlen: 24
189.213.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598905 (0x92379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Validity
Not Before: Mar 15 12:47:22 2024 GMT
Not After : Mar 15 12:47:22 2029 GMT
Subject: CN=c5ffd10c6c50e343bdb4cd8d8cd6316b3d922aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:c6:aa:12:32:26:6f:2d:60:20:ff:b4:69:
43:90:02:fb:5c:b3:75:70:7d:6e:9c:0b:83:07:77:
3b:e3:fa:2c:8f:5c:4a:e9:cc:48:89:6b:b5:f4:68:
b1:44:95:73:b5:b1:83:bb:89:1d:69:97:1c:19:df:
11:3d:2b:98:1b:77:f0:ce:68:a4:13:4c:ed:f4:6b:
bd:45:4b:3e:fa:97:f4:03:67:f6:bd:1d:bf:92:a3:
3f:9c:fd:6b:e4:10:cf:a0:e7:cb:0d:32:53:b6:1c:
93:bd:4b:13:92:a7:5b:2e:23:ca:7c:fd:08:e5:7f:
17:ae:01:ad:85:4c:92:50:5c:06:26:c7:4f:78:f8:
03:b4:ef:05:cd:4f:c5:0b:98:91:ce:7b:a5:38:4e:
f3:ee:d8:f1:21:8e:df:fe:9e:54:e3:55:6d:c2:20:
ee:2f:13:ff:a8:ac:0a:ce:7f:d7:02:aa:13:22:f7:
fa:58:88:df:58:86:1f:2b:dc:7b:d8:ff:87:8d:47:
90:f9:22:a5:97:9b:13:d6:35:1b:ce:f2:48:d1:5d:
b8:da:e0:d0:c3:87:26:0b:da:21:d4:90:2a:d9:38:
b9:c9:9f:3c:93:7a:ae:c0:2e:46:c7:c5:a4:b9:c5:
e2:c8:78:00:3f:4c:47:04:c6:a7:40:ca:82:f2:f3:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A3:EE:A2:C5:CB:32:EE:CB:82:99:89:C7:2E:74:F9:7E:64:16:84
X509v3 Authority Key Identifier:
keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/c5ffd10c6c50e343bdb4cd8d8cd6316b3d922aaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.205.0.0/16
189.213.0.0/17
200.36.96.0/19
207.249.128.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:48:8d:6c:48:fa:ba:d7:ae:c1:d2:14:6e:59:33:11:1e:06:
8e:aa:ed:39:b4:44:1a:53:f4:28:56:64:0f:c6:5c:3f:16:e8:
56:ff:bf:62:f0:24:a2:d2:88:70:83:0b:a4:d9:56:86:f9:a7:
a8:fa:93:a6:ea:dc:2d:c8:3d:87:15:b1:d5:4e:aa:70:97:10:
74:12:2c:64:06:d8:62:e4:26:f6:6c:88:95:9c:68:50:ff:df:
e8:ca:84:c2:36:46:20:10:25:a2:1d:8b:c1:d6:0c:69:17:dc:
61:97:f7:5e:10:25:0c:99:50:c3:ce:21:4f:7c:1f:25:3a:3f:
e9:8c:07:11:ca:53:d0:06:97:09:a7:70:d5:f6:98:f6:8e:58:
7a:92:cb:10:3a:1c:8f:24:f1:f7:4d:81:af:2a:65:50:28:d1:
e9:fc:16:60:40:34:1c:c7:a8:37:7f:ec:6d:5d:e3:c5:2a:d4:
19:a9:99:cf:10:e9:c8:6e:ea:03:5f:90:e8:1a:5d:d5:6c:14:
e6:41:7d:a0:a6:0e:43:9f:43:cb:01:c4:2a:62:fb:41:93:35:
9f:a9:ea:a8:a0:bb:1c:f4:b2:73:a4:28:77:ce:e7:d2:3d:ce:
01:84:44:33:8c:24:05:61:07:5d:92:54:a3:88:07:c6:80:8c:
2d:66:30:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org