Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a20c32060df0fa594753446b0b71d04e5de597de.roa
File: a20c32060df0fa594753446b0b71d04e5de597de.roa (raw, json)
Hash identifier: 27jg1VSp3K/ERnf5Wrl4hWL66RNWKPrC0BiYi+RBdbQ=
Subject key identifier: B3:83:A7:71:7C:EA:3F:73:2C:AF:4F:41:49:EA:4A:E6:A3:47:F6:88
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DBE5A
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a20c32060df0fa594753446b0b71d04e5de597de.roa
Signing time: Thu 07 Dec 2023 12:42:26 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 27813
IP address blocks: 190.30.242.0/24 maxlen: 24
190.227.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2997850 (0x2dbe5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=a20c32060df0fa594753446b0b71d04e5de597de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:ad:d2:ba:25:28:17:39:79:e5:8c:fe:fc:
77:e4:59:c0:40:f9:e1:33:73:7b:81:23:ed:bd:03:
97:93:df:37:0b:fe:66:73:46:b6:0c:6e:5e:5c:01:
a8:9c:cb:50:fc:4f:86:4d:2b:78:cd:dd:c4:f7:f8:
31:5e:9c:ea:e0:96:40:c5:1c:d6:09:e0:6a:af:ca:
95:44:a5:d2:b5:55:ed:5d:fc:84:b4:26:b1:43:61:
ec:54:d5:9e:43:1f:db:5b:d0:d4:69:e1:b3:07:0b:
02:81:6b:32:52:e0:7d:c7:b3:b8:37:91:70:70:1a:
7d:b6:4d:b9:34:8a:20:1a:44:5f:1a:c8:3b:40:fd:
a7:96:c3:d8:d6:e6:21:a2:f7:bb:d3:2d:35:46:3a:
e8:d0:a0:78:41:98:e4:36:d3:1b:73:3b:67:4b:c8:
87:0a:c8:b1:fc:4c:f7:1a:87:fe:c8:b9:cb:3b:f8:
9c:9b:d7:7c:01:46:5a:f4:c4:81:9b:82:d3:3c:c7:
38:60:dc:db:3f:80:e9:59:3f:63:47:9e:09:29:d4:
28:cf:7c:24:db:59:15:eb:a3:7d:3b:2d:94:eb:d9:
34:06:86:95:d3:cd:db:f6:82:43:68:b6:13:cf:0e:
77:be:99:67:98:4f:39:bd:56:aa:cc:95:3d:3f:75:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:83:A7:71:7C:EA:3F:73:2C:AF:4F:41:49:EA:4A:E6:A3:47:F6:88
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a20c32060df0fa594753446b0b71d04e5de597de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.30.242.0/24
190.227.182.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:e9:e1:da:88:f6:30:ae:fe:f3:97:42:47:a0:ba:21:4b:10:
d5:4b:bb:c9:0e:b1:e6:cd:3d:92:8a:bf:69:dc:29:70:d1:1d:
b8:c8:1d:82:be:08:66:f7:5b:ef:23:98:aa:f4:d6:51:f7:c9:
3f:fe:22:0f:aa:38:99:ea:b0:ea:87:43:83:84:00:65:b4:61:
1a:a8:a1:4c:05:8f:bc:08:70:f3:99:1f:5e:43:80:f4:83:35:
21:7f:9a:d4:71:97:89:87:6e:ca:3d:71:18:be:65:af:10:30:
69:1d:8c:4e:56:75:65:3e:43:54:eb:80:37:ad:77:96:00:ab:
28:d5:43:53:1f:9d:c5:28:a8:4f:ca:f4:33:86:ea:1f:6c:97:
11:89:67:c8:a7:93:d6:0f:f6:6b:a3:b9:8a:b3:2d:29:8d:e8:
96:ed:4e:c9:36:bc:26:d3:32:e7:a1:e6:d5:59:1c:7c:ee:b6:
f2:0e:31:80:0e:f8:56:1b:90:89:28:ba:5e:af:8d:16:fc:6c:
72:4e:a7:16:e2:44:5a:a2:ec:e6:23:2b:1c:d8:63:ac:ae:3b:
5f:6d:be:24:40:9f:e9:cf:5d:3f:0f:a7:22:6e:e0:ab:e5:f4:
f7:5b:bc:26:74:84:22:a3:0e:6b:e1:93:e1:96:2e:f8:30:02:
26:33:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org