Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d66078069515a2d66ff6a0ce1186492436ab7206.roa
File: d66078069515a2d66ff6a0ce1186492436ab7206.roa (raw, json)
Hash identifier: dN5ywqjBaBDNdAjv8+XRh3JlqQysmNV72DO6A2UQbIk=
Subject key identifier: D2:D2:FC:5F:84:84:C3:76:99:19:C7:A8:C5:0C:84:6B:11:22:9E:7F
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 11CD2C
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d66078069515a2d66ff6a0ce1186492436ab7206.roa
Signing time: Fri 16 Apr 2021 01:44:43 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 263808
IP address blocks: 190.228.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1166636 (0x11cd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=d66078069515a2d66ff6a0ce1186492436ab7206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5a:f1:e0:a1:38:d7:5e:92:4e:53:3a:94:8d:
c5:c3:cd:cd:63:05:83:df:7b:03:d9:93:4c:56:e1:
45:1a:fd:e6:5a:4b:30:30:a0:ba:bd:3b:49:c1:6e:
29:43:60:37:7c:27:84:ab:4e:93:45:da:4f:78:41:
b6:2c:ef:de:a4:da:2b:22:cd:b3:a7:2f:8c:3e:f6:
67:e7:26:14:a8:72:62:69:21:6b:4f:2e:db:5f:e7:
04:48:27:d3:4a:92:58:39:1b:fb:98:90:08:9c:e3:
2f:78:2c:6d:10:b3:38:f3:43:08:38:e0:9b:a2:d6:
04:d3:9c:03:7f:94:c4:5f:2a:75:64:3a:c7:d3:36:
66:1c:bf:40:e1:56:88:ec:36:9f:ae:54:2b:0c:29:
d2:02:73:b4:af:71:f7:70:ce:85:a7:c5:94:91:82:
50:9e:c7:d8:ad:ed:7c:10:43:97:d7:d8:16:2b:f3:
79:42:37:e9:4f:e1:1a:e6:12:ad:52:fa:c9:c3:41:
06:7c:11:b0:62:1a:3d:8f:3e:41:8b:d9:12:ed:b8:
76:9f:65:ed:e0:0c:e7:db:0c:2c:9c:d1:78:79:50:
3a:5c:10:5a:12:56:b0:c9:d3:dd:7f:c8:9e:52:9f:
d9:98:03:25:dd:3c:35:6e:86:4d:a9:53:7c:f6:1d:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:FC:5F:84:84:C3:76:99:19:C7:A8:C5:0C:84:6B:11:22:9E:7F
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d66078069515a2d66ff6a0ce1186492436ab7206.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.228.23.0/24
Signature Algorithm: sha256WithRSAEncryption
07:cc:b2:55:05:40:8e:7b:71:22:8e:4c:2b:27:0f:ff:84:81:
a1:e8:06:2d:35:a9:ae:f2:4f:42:5c:4a:47:fd:2f:f1:d8:4e:
bc:f3:ca:73:88:35:31:21:82:1f:d6:7b:13:85:26:fc:67:72:
60:ce:ff:6c:4e:c3:8b:db:d5:ab:00:cf:59:9e:c7:ac:f5:60:
d6:d9:d4:fd:a9:40:a4:7e:1f:a9:cf:7a:88:8a:4e:7d:29:fa:
ad:23:2c:0b:4a:26:07:db:4f:6d:1e:3b:51:0a:56:04:bb:19:
a8:77:47:aa:07:20:5a:a7:60:1f:99:e3:c9:0c:e2:47:60:65:
f1:73:58:59:0a:ce:c8:d8:09:58:be:e6:ed:ab:21:36:fe:c1:
69:99:66:93:21:b3:24:03:8e:1a:37:d8:92:a9:44:02:8c:d3:
70:62:16:93:6a:f3:d6:1a:72:31:ed:57:37:ba:39:8a:c4:30:
8c:f8:9c:e2:25:d1:df:94:96:76:9b:31:fc:be:bc:f4:df:19:
0a:cb:91:09:6e:9a:1a:15:14:70:aa:44:2b:92:7f:9d:97:c6:
f8:e6:50:1e:d1:7c:8d:25:2e:94:0a:cf:fd:b6:e0:1e:6a:b4:
04:31:ea:0c:1a:19:6f:53:12:75:b3:aa:83:a3:6a:f3:0c:47:
81:3c:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org