Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/21488bba84a94a74d053b82fec7d6323beb4842f.roa
File: 21488bba84a94a74d053b82fec7d6323beb4842f.roa (raw, json)
Hash identifier: sg9o07ekpr4NcuSm72hBwZr9kSR1jIi9NpQ9kK0bsm4=
Subject key identifier: 58:68:E6:11:85:B8:6E:5F:0D:CE:FD:8D:4B:9C:B5:01:EC:96:CB:88
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DE8B6
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/21488bba84a94a74d053b82fec7d6323beb4842f.roa
Signing time: Thu 07 Dec 2023 12:42:52 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 27997
IP address blocks: 200.43.55.0/24 maxlen: 24
190.226.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3008694 (0x2de8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=21488bba84a94a74d053b82fec7d6323beb4842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:b8:fc:3e:96:ea:af:43:61:94:74:05:79:
58:f6:05:98:af:e3:a2:37:1f:7f:35:8b:6b:f4:8c:
4f:f0:7c:a8:1c:61:18:4b:53:3f:e4:21:32:7b:bb:
78:1f:fd:cd:ca:32:e2:96:0d:7f:80:da:e2:d4:a9:
85:03:79:d5:fa:9c:07:c6:41:58:82:f3:27:0d:11:
78:45:84:25:35:aa:25:ca:6b:f6:82:97:70:68:65:
3b:b4:ab:cb:7a:e4:c6:cb:f3:6f:f1:b3:d1:e8:f9:
db:34:a9:54:1a:f6:a8:35:bd:69:b5:d3:74:00:82:
37:b5:fd:c3:bc:09:ed:d3:7e:fd:5e:d4:78:bd:1c:
7e:18:01:fa:aa:ce:e7:32:ad:91:ca:0e:08:7a:cc:
ee:c9:8f:6c:ee:81:c0:20:ab:60:7f:cf:05:57:f5:
d3:15:47:1b:6b:08:e3:1c:41:87:25:48:e2:a0:ad:
5f:d2:ba:5c:36:94:df:cf:5c:f1:48:27:2d:70:f2:
df:ed:0a:ee:ee:d9:99:da:2d:f2:0b:0f:56:91:fa:
2b:e9:2e:25:c2:94:dd:31:e3:7f:43:00:1e:36:44:
7f:f6:b4:aa:a7:74:fa:b9:49:ea:6a:96:dc:e6:1a:
0f:4b:9d:cb:db:6b:35:db:ed:b1:4c:65:69:ce:7b:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:68:E6:11:85:B8:6E:5F:0D:CE:FD:8D:4B:9C:B5:01:EC:96:CB:88
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/21488bba84a94a74d053b82fec7d6323beb4842f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.226.241.0/24
200.43.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:dc:06:46:63:39:04:72:1c:99:1e:4d:04:73:4a:86:a0:04:
56:6e:ef:b7:76:11:3b:e5:df:a5:a0:26:90:e7:8b:35:d6:87:
56:b1:42:b2:58:9e:59:6b:65:5e:17:15:9d:1f:d5:d8:ac:4c:
f2:91:d7:74:ce:a8:c4:ba:66:c3:0b:29:c1:d8:e1:4b:37:43:
3c:f6:90:56:7c:08:cf:9e:5a:c8:a2:8b:c9:17:00:17:c1:f6:
92:2a:0b:06:73:88:8e:1c:1c:03:e7:18:84:cc:97:db:eb:f7:
a2:84:26:d5:1b:8d:62:28:d5:f2:b6:2d:66:8e:b0:1a:be:ba:
ec:92:08:da:3b:52:40:cf:43:ed:d0:e5:72:a2:e4:1e:77:d8:
c8:79:fe:44:d1:ad:40:9f:c7:74:64:e0:f8:ee:17:4c:31:e2:
57:e0:ab:c5:be:1c:3f:56:08:e8:b2:e6:fc:17:8f:05:15:6d:
58:fc:0b:59:e6:fe:3e:c3:0e:a6:bd:95:bd:f6:4b:11:6e:83:
8d:6c:2b:68:4a:49:70:70:2e:3a:cc:11:3d:49:af:12:49:2e:
b3:9b:19:10:6b:c8:ba:ea:17:ca:b8:6d:b7:4e:c1:9c:9c:71:
f5:a7:a7:a6:cf:40:41:04:36:1d:f6:ce:e4:5a:15:1a:07:69:
d9:55:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org