Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d27dcee1795d6f4b62f6eb20d2b3ed2203d3bc32.roa
File: d27dcee1795d6f4b62f6eb20d2b3ed2203d3bc32.roa (raw, json)
Hash identifier: E8qzwbRFc+Iki3NLX1OPTMoqeZPyLnF6d9CSweBaLns=
Subject key identifier: BE:A3:41:49:21:86:15:1C:07:88:D1:19:FE:D1:2A:7E:E0:76:4D:52
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 2768E2
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d27dcee1795d6f4b62f6eb20d2b3ed2203d3bc32.roa
Signing time: Mon 17 Apr 2023 13:01:22 +0000
ROA not before: Sun 16 Apr 2023 13:00:28 +0000
ROA not after: Thu 17 Apr 2025 13:00:28 +0000
asID: 264742
IP address blocks: 190.227.181.0/24 maxlen: 24
186.125.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2582754 (0x2768e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Apr 16 13:00:28 2023 GMT
Not After : Apr 17 13:00:28 2025 GMT
Subject: CN=d27dcee1795d6f4b62f6eb20d2b3ed2203d3bc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fe:0a:27:29:e8:2d:32:23:f7:92:71:2d:39:
dc:21:f4:f1:6c:24:79:10:2d:c9:49:83:30:e4:c3:
d7:b0:c0:29:9a:17:7e:17:79:81:dd:b8:ec:6b:59:
3f:a8:6e:39:ac:1a:f7:69:d0:ce:ee:22:58:e8:ae:
13:07:f0:78:82:87:b7:ff:de:c9:b7:69:23:15:70:
90:4c:76:20:2f:e3:cc:5b:11:fb:29:57:db:ed:e5:
24:eb:69:c4:29:c7:5a:3f:f3:19:ce:63:60:6f:80:
a1:55:46:87:6a:c9:cd:1a:cf:f4:ec:93:9a:f7:fe:
f3:e3:00:c9:4d:a6:a1:89:e6:5c:d8:a0:29:74:6c:
f9:be:61:fe:31:69:75:bc:8b:45:1b:2e:44:26:02:
fd:02:08:db:43:ec:b0:9a:13:45:1d:43:ef:17:3a:
9a:7e:45:1c:5a:a5:06:ca:cb:d4:b6:53:a9:14:4e:
0c:b4:1b:5a:ae:10:61:b5:8d:45:18:f5:0d:f5:f2:
45:f9:bf:f8:8e:b0:55:67:40:1e:2c:a9:de:d6:82:
c8:5a:25:f1:61:78:8d:e5:de:3a:30:0e:cb:0a:0e:
71:1f:5c:68:fc:bc:25:8a:96:a4:3d:a2:9e:64:27:
2c:e4:a2:68:ba:71:23:e6:63:f5:d4:7c:25:6e:a1:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A3:41:49:21:86:15:1C:07:88:D1:19:FE:D1:2A:7E:E0:76:4D:52
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d27dcee1795d6f4b62f6eb20d2b3ed2203d3bc32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.125.246.0/24
190.227.181.0/24
Signature Algorithm: sha256WithRSAEncryption
34:68:cf:c8:56:23:2e:9d:42:c2:b2:70:79:db:88:89:15:6d:
82:de:5b:5a:fc:f1:3c:57:b0:24:01:50:78:29:66:fb:c1:14:
30:e8:31:f9:e9:6d:af:38:a9:be:91:76:fe:33:b6:40:73:00:
c2:6b:8b:2a:71:d1:06:5f:d5:ef:11:00:c6:59:9a:7c:af:47:
bb:13:72:e1:2a:0f:59:7f:1b:95:17:12:ed:33:bc:c0:7e:91:
75:97:b5:c0:0f:e4:5e:14:80:03:00:8d:6a:09:01:68:ab:46:
ab:1a:e0:f7:32:fe:12:08:81:61:83:69:1c:fc:6d:e0:28:b1:
73:0c:54:84:40:07:9d:e2:91:7d:44:d4:95:4a:85:8f:7a:9d:
7d:fe:60:ed:93:6f:82:4c:d1:87:bc:2f:d2:d0:f3:44:c6:23:
bb:58:c8:54:75:63:c3:97:35:9a:cb:d1:86:fe:8b:91:17:48:
1a:b5:46:9b:6a:1a:1c:c8:22:8a:77:50:9c:8f:52:5a:6f:06:
64:38:b5:96:dc:80:02:91:23:98:bd:83:8e:6a:4d:67:b2:da:
54:b9:ba:a1:a4:39:b5:ac:57:f1:9e:37:8d:2b:5e:ac:a5:e8:
88:25:a7:4e:f9:1e:86:58:0a:66:61:07:95:4f:71:e1:de:a0:
d5:a4:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org