Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c865c4688d1a729621f1b96026f25beb0b25ab3f.roa
File: c865c4688d1a729621f1b96026f25beb0b25ab3f.roa (raw, json)
Hash identifier: mkxljSK1/v/v8WRO9NAdN3OttQduo7bmeVo8k899+hk=
Subject key identifier: 9F:63:28:12:7C:09:46:27:A9:F6:28:15:4F:7D:A6:1D:D8:AC:41:EB
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DE67C
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c865c4688d1a729621f1b96026f25beb0b25ab3f.roa
Signing time: Thu 07 Dec 2023 12:42:49 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 265816
IP address blocks: 190.227.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3008124 (0x2de67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=c865c4688d1a729621f1b96026f25beb0b25ab3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:f8:63:57:ad:4f:92:73:64:95:3f:f4:59:
5a:81:89:f1:88:69:e4:09:9c:cf:f7:49:03:97:e7:
9b:5f:d0:fb:46:f5:ee:17:9e:1d:85:26:f8:7b:4c:
69:64:9a:d6:5f:0b:d1:6b:20:df:ff:1e:16:ac:48:
0a:ca:c4:9f:36:5e:62:4d:67:1a:66:86:fb:a2:69:
68:fa:bc:6b:c1:88:4c:8a:44:5f:69:0c:61:34:6a:
50:76:d3:d5:fe:d4:21:75:5b:c2:96:cf:8e:fa:f4:
37:59:67:e6:f4:d9:0a:b5:36:00:ba:29:30:5d:aa:
3b:94:51:06:f8:e2:a0:a3:f4:67:c9:80:64:b6:92:
50:7b:6f:32:b9:55:40:9c:46:5c:74:52:25:9a:c9:
4c:64:5d:cb:01:4a:ba:a8:30:7e:e6:81:76:19:e2:
cf:e4:30:87:84:de:ac:63:38:6c:d1:f5:4c:b0:af:
f4:a4:56:6d:00:c7:43:63:3e:49:b3:79:d7:74:e5:
d3:80:9f:bf:a4:2a:1e:b7:1d:3d:d1:15:fc:07:4b:
03:90:78:1d:0f:0e:39:b5:49:d1:43:da:41:cc:e6:
0f:aa:b2:6d:fb:80:ac:e4:61:a6:96:a6:77:c9:77:
f6:ef:b4:3d:76:e6:c0:01:a5:f0:ab:ea:32:58:3d:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:63:28:12:7C:09:46:27:A9:F6:28:15:4F:7D:A6:1D:D8:AC:41:EB
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c865c4688d1a729621f1b96026f25beb0b25ab3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.227.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:37:b0:b5:0b:0e:95:8c:c6:cb:7e:5f:83:e7:7f:9a:14:92:
28:62:4a:23:ed:35:5d:34:ee:76:da:09:85:d4:04:7f:26:37:
2f:c1:93:49:69:13:68:61:8e:22:1c:89:2c:94:53:ea:02:ed:
0d:22:a3:76:d2:df:9b:65:22:df:df:53:6d:89:0c:14:7a:cc:
fa:7a:5b:cd:23:d5:68:78:90:f6:f1:22:cd:91:04:7e:b1:5c:
ee:7a:29:14:99:0a:58:b2:48:14:d7:fa:db:f2:ed:fe:96:bf:
8b:22:98:26:d7:be:a5:45:9d:4f:c1:b9:5f:8e:6b:a5:65:2d:
07:ac:7f:b8:ca:b7:1d:d4:5a:ad:ce:b0:fa:5a:4d:2d:a3:92:
f2:4a:8f:0b:a6:22:9a:5a:d1:13:04:4a:23:2f:e7:50:10:9f:
b9:3e:c8:b7:14:8c:97:24:7b:97:68:85:82:f2:2e:3b:2b:6a:
17:7d:e9:a6:b8:8a:7d:db:bc:c7:45:1d:80:1b:eb:c4:a0:dd:
d1:c3:e4:b1:51:86:57:29:00:7b:e6:4a:71:b8:d1:f3:f6:18:
d4:f7:c8:08:bf:97:a6:73:6d:16:38:cd:26:e2:ed:e9:a5:6f:
f1:5b:c0:39:49:d6:55:ba:dc:70:ed:5e:d4:eb:c6:d3:1c:97:
ad:e3:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org