Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/1d3987864cd5cb416097812cf52e2bd88657bb0b.roa
File: 1d3987864cd5cb416097812cf52e2bd88657bb0b.roa (raw, json)
Hash identifier: /boLHvsv1yo475no0z7nOwU1ZC+UPhaZWZzUHGHyvko=
Subject key identifier: 21:A2:9C:3C:84:67:7F:27:60:BF:61:94:EF:48:46:FA:00:7A:82:31
Certificate issuer: /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial: 2E9883
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/1d3987864cd5cb416097812cf52e2bd88657bb0b.roa
Signing time: Thu 07 Dec 2023 13:01:55 +0000
ROA not before: Thu 07 Dec 2023 13:00:46 +0000
ROA not after: Thu 07 Dec 2028 13:00:46 +0000
asID: 263777
IP address blocks: 190.227.188.0/22 maxlen: 24
190.228.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053699 (0x2e9883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Validity
Not Before: Dec 7 13:00:46 2023 GMT
Not After : Dec 7 13:00:46 2028 GMT
Subject: CN=1d3987864cd5cb416097812cf52e2bd88657bb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:f9:15:27:38:5e:87:33:18:98:d8:cf:d5:
dc:97:3f:31:9a:f5:01:66:19:78:d1:22:5f:cb:a4:
f1:1f:3d:a2:4e:c6:10:5e:d0:d7:2a:85:98:2f:c6:
87:2b:fd:83:df:04:3b:ea:6e:f0:ec:da:d6:f2:e9:
c0:77:f0:cf:b3:79:7a:39:a1:2e:03:88:0e:aa:8d:
bd:d7:db:a1:bb:c8:5a:af:75:f2:42:f1:8c:65:c1:
cc:7b:6a:c9:69:bd:46:83:8d:68:a0:37:16:29:82:
ed:9c:6c:6b:18:ee:71:47:13:5a:f0:0b:8a:5f:67:
ed:b9:4f:e6:f4:7e:a8:47:6e:e4:7a:71:c9:94:1f:
55:10:b2:df:d7:97:ca:68:bc:ac:4e:c9:5a:79:90:
24:bc:3e:2a:d4:23:c1:1a:db:6e:c5:85:a5:f1:b8:
d5:25:50:63:2e:78:09:13:88:55:24:70:a4:a8:49:
64:f0:fd:a0:e0:72:76:f8:a3:a9:b1:83:12:33:56:
ef:da:be:28:0d:d1:cf:14:73:de:34:29:6c:b8:73:
96:8a:9f:66:1b:d4:bb:ec:34:85:00:66:da:2d:24:
46:9c:39:2f:73:6d:8c:f6:a0:ba:d6:17:ec:75:6e:
de:ba:cb:46:49:8c:d8:19:ac:a2:af:60:59:52:6c:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A2:9C:3C:84:67:7F:27:60:BF:61:94:EF:48:46:FA:00:7A:82:31
X509v3 Authority Key Identifier:
keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/1d3987864cd5cb416097812cf52e2bd88657bb0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.227.188.0/22
190.228.44.0/23
Signature Algorithm: sha256WithRSAEncryption
03:05:da:02:e9:f7:10:61:c7:4f:b4:b2:0f:19:0a:a1:2d:73:
99:5e:4b:b4:56:e7:d3:92:8e:3f:b8:ec:c1:dc:56:72:27:d4:
82:fd:a0:82:3d:1e:d5:ee:e2:9a:4c:3d:3b:92:95:4a:d1:bf:
ff:24:88:6c:f0:62:b9:65:17:6b:a5:0c:bf:31:cc:0b:9a:45:
f7:ed:f3:8d:39:42:2e:0f:ba:a0:ae:d6:3a:1f:36:98:1c:b8:
ca:21:93:be:3d:0a:cc:b6:e3:6e:8a:85:eb:4d:7e:4a:bf:e7:
13:15:49:58:f6:c7:19:b3:cb:13:67:b9:eb:9d:2c:64:f6:68:
7a:a8:1a:56:08:97:3c:d4:75:6c:0b:ce:6d:28:5d:e4:f9:d7:
59:46:92:30:1e:35:ec:51:c8:f4:9e:fa:3e:fe:f0:66:56:cc:
d4:38:0d:74:c0:0f:4f:37:3c:8c:99:89:82:00:a7:6d:42:18:
26:eb:e7:db:17:7a:eb:96:2d:15:2d:3d:97:93:7c:c6:e3:31:
bc:5c:47:86:6c:c5:46:a7:d6:e7:ec:42:96:a5:2f:31:d6:19:
d0:5a:26:3e:ad:5e:e2:a1:03:c1:a9:77:dc:2e:d9:66:6a:37:
5a:a0:48:f5:c2:12:9e:a0:1f:28:61:90:3b:e5:b0:f4:55:ec:
fc:2f:c1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org