Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/bf943ac3ce8559ff7ce9c0689cbb02c54d21f115.roa
File: bf943ac3ce8559ff7ce9c0689cbb02c54d21f115.roa (raw, json)
Hash identifier: z0LnATfvXoqN4oYVzusYPmv4Hn3dvn/w14jtQpnFH2A=
Subject key identifier: 1E:34:5C:DD:41:22:44:83:DB:D9:5F:16:B9:88:9A:32:4F:CE:E8:FD
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DFC2E
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/bf943ac3ce8559ff7ce9c0689cbb02c54d21f115.roa
Signing time: Thu 07 Dec 2023 12:43:13 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 52271
IP address blocks: 190.137.142.0/24 maxlen: 24
190.136.15.0/24 maxlen: 24
190.136.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3013678 (0x2dfc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=bf943ac3ce8559ff7ce9c0689cbb02c54d21f115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d5:9c:19:12:f0:fc:03:16:1d:13:f6:05:35:
e3:f2:aa:4a:2e:ee:b5:d9:eb:84:58:da:b4:aa:49:
86:57:74:7c:54:22:b8:d6:18:ed:36:56:b6:85:23:
e1:90:86:b4:f2:ff:01:77:ff:8f:cf:e0:97:2b:01:
68:78:87:e9:ab:ef:40:18:5f:d6:46:00:70:aa:31:
00:c3:0a:96:6e:cc:e2:97:4c:6b:e4:06:a8:f9:33:
b7:0d:d6:7f:b2:db:ed:9c:0b:2d:d5:64:55:2e:d6:
d0:16:6a:87:60:23:72:87:26:a5:6c:38:a2:ce:04:
44:2a:d6:76:a3:9f:ac:47:37:b0:30:a4:9f:e9:1f:
c2:5e:d4:4e:5a:7a:35:fb:8e:c6:0a:c3:7f:92:f8:
bc:e1:00:da:5e:fa:c6:1b:79:99:e2:d9:a7:d3:93:
c9:55:c7:2b:5e:22:3d:5c:d5:64:1d:5c:07:de:b7:
f6:ec:85:2b:1f:61:2c:0e:2c:b7:36:d6:76:ae:ba:
43:b9:66:51:25:a6:7b:66:9d:3c:e2:7c:fd:1a:7d:
f1:e9:a5:34:48:1b:b2:27:90:57:c5:af:ec:11:87:
54:dc:e9:26:7c:b9:a3:1c:c2:6d:c7:04:18:c6:c5:
8f:8a:cc:a7:eb:d1:a9:b9:38:ac:e1:33:73:8d:98:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:5C:DD:41:22:44:83:DB:D9:5F:16:B9:88:9A:32:4F:CE:E8:FD
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/bf943ac3ce8559ff7ce9c0689cbb02c54d21f115.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.136.15.0-190.136.16.255
190.137.142.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2d:3c:58:a5:a4:f1:ec:c0:ea:f5:20:60:5e:1b:e1:64:2e:
1b:20:4f:c5:37:1c:0f:b8:af:c4:f5:dc:f5:9f:17:9a:20:38:
f8:34:58:a7:f4:d7:0d:a5:15:13:d8:2e:4d:6a:ce:1b:a6:61:
cb:46:6f:88:59:1e:e0:77:04:b5:f1:b7:2f:0a:c7:79:25:b8:
1b:d7:de:06:80:8b:18:95:e3:23:fb:d1:4a:44:e9:a6:9d:c6:
98:70:c1:fb:26:43:e5:5e:5b:ba:67:51:b8:00:97:c6:a5:fb:
79:51:9d:d7:0d:2f:e6:50:56:04:9e:21:0f:cd:6d:ce:b5:0e:
f3:5c:0a:88:38:fd:f2:73:53:57:25:65:e2:57:ea:66:e6:54:
9b:a0:43:7e:3b:78:00:fa:57:97:68:d0:b3:26:1e:c3:61:0f:
3e:c8:6e:40:58:c1:b7:d2:2f:0a:a2:71:d1:81:83:4a:52:f4:
9e:6e:7f:16:19:18:ce:51:2f:60:17:3f:3f:00:11:fc:38:82:
93:48:8f:ae:19:cb:24:4d:26:56:9c:3d:78:55:8f:05:0a:86:
5a:54:9e:a5:4a:8d:80:2c:18:8b:d5:fa:63:8d:6a:8b:8b:4a:
da:e7:8c:64:9a:46:9d:7e:2e:37:71:d9:fa:2c:90:03:e0:f5:
82:04:6b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org