Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ba9ac0442b41bf723e745d92f8205d4f56c51c91.roa
File: ba9ac0442b41bf723e745d92f8205d4f56c51c91.roa (raw, json)
Hash identifier: dUCJhayrRNKKjTOo3zjDKG1hpvHiYerzB3gI4kVBV7w=
Subject key identifier: 64:94:49:5B:B7:1A:B5:30:CD:DA:CF:2F:87:BF:6E:01:8C:96:F1:FB
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 27837D
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ba9ac0442b41bf723e745d92f8205d4f56c51c91.roa
Signing time: Mon 17 Apr 2023 13:01:34 +0000
ROA not before: Sun 16 Apr 2023 13:00:28 +0000
ROA not after: Thu 17 Apr 2025 13:00:28 +0000
asID: 263777
IP address blocks: 190.227.188.0/22 maxlen: 24
190.228.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2589565 (0x27837d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Apr 16 13:00:28 2023 GMT
Not After : Apr 17 13:00:28 2025 GMT
Subject: CN=ba9ac0442b41bf723e745d92f8205d4f56c51c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:dc:1e:86:0d:b0:a2:4a:71:0c:a4:e3:c8:
12:44:3f:84:9a:67:8f:89:97:12:fe:24:77:23:cc:
53:f0:88:6c:51:a0:f8:ef:13:0a:b7:41:80:3d:eb:
d5:85:fe:9e:1f:66:8c:be:1b:91:1d:95:07:a4:42:
83:49:fb:23:f0:c4:1d:97:ca:bc:f1:e1:5f:c2:2f:
79:a8:65:e7:7e:6c:8a:c1:a0:7e:05:ee:7d:b6:f6:
fd:3a:bc:c8:1a:30:12:b0:5f:f8:ff:99:9c:81:a2:
90:02:eb:1d:58:f0:e2:22:6d:a5:c0:ee:34:f6:5c:
12:96:1d:eb:ef:57:0e:94:ad:4a:84:07:83:a0:aa:
a9:f5:9c:3d:44:61:70:bb:8e:2c:7c:3f:2a:9a:a4:
bd:a1:57:6c:b6:08:6a:23:20:c1:93:47:16:64:14:
85:ec:0c:57:e5:d8:53:7c:c7:39:7c:f6:1a:f8:34:
a0:3b:7f:a0:c5:e2:15:4e:07:52:9f:d0:27:da:b6:
b6:b0:05:19:ac:d4:59:b6:ca:4c:8c:0a:50:29:7d:
34:f5:b0:63:02:4c:fb:a8:6f:3b:59:de:10:b4:83:
bb:a4:09:2b:e5:e4:6a:45:ca:3a:38:03:9d:7b:82:
a3:44:8a:fe:dd:96:8a:4d:13:14:a2:31:db:7a:8c:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:49:5B:B7:1A:B5:30:CD:DA:CF:2F:87:BF:6E:01:8C:96:F1:FB
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ba9ac0442b41bf723e745d92f8205d4f56c51c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.227.188.0/22
190.228.44.0/23
Signature Algorithm: sha256WithRSAEncryption
59:0a:37:24:9e:12:29:17:f3:4d:98:15:ba:5b:ac:52:93:2f:
62:a7:8b:78:ad:cc:ed:14:de:86:d9:4e:a2:9a:9c:8c:34:27:
02:e4:3e:d7:3f:d6:b7:ab:a9:3a:8e:d6:39:89:58:ad:c8:3b:
d9:ed:e5:ea:78:71:b1:a3:07:9d:a7:11:b6:1b:f0:24:79:37:
1f:61:49:32:6a:4c:a8:cd:e9:52:a2:c6:e9:10:7b:a5:b0:0e:
60:1c:f0:fd:41:01:fe:1a:c8:d0:e0:78:42:f2:6b:76:f7:93:
2b:2f:74:9b:57:cb:45:03:1b:4f:32:f0:4f:21:ce:be:b0:20:
c9:79:58:d5:c6:d8:c2:30:d0:38:7b:3d:13:e0:9f:96:11:30:
11:42:cb:83:be:69:03:6a:fe:6b:85:f1:1e:08:f3:bf:af:df:
d1:b3:a6:8e:85:08:6e:ef:4f:3f:a3:26:66:19:1b:e0:b7:6f:
0a:b9:ac:f7:c8:73:9f:fa:8d:ba:c7:ee:3d:da:4a:9a:a6:1f:
f7:97:68:d1:c0:5a:1c:7f:fa:7d:d7:15:17:44:36:7c:f0:ab:
9f:ae:41:89:8c:c0:a7:2e:5d:dd:97:4f:ec:b1:b4:1a:33:3b:
c6:0b:74:81:30:4b:52:df:be:da:07:15:0e:af:65:de:eb:88:
4d:6e:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org