Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/da06738a15f23aeb0ba0374342b6bf98c5a7e0c5.roa
File: da06738a15f23aeb0ba0374342b6bf98c5a7e0c5.roa (raw, json)
Hash identifier: 0ZqsvPE+iB1/Y2hcF+Pcia8hKyXidR+hUKn2FVM9Kl0=
Subject key identifier: F5:2E:E8:7A:77:E6:14:3B:1E:3D:8B:C8:10:DE:3A:DB:7A:22:F5:46
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DB3B2
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/da06738a15f23aeb0ba0374342b6bf98c5a7e0c5.roa
Signing time: Thu 07 Dec 2023 12:42:22 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 265809
IP address blocks: 190.228.32.0/24 maxlen: 24
190.228.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2995122 (0x2db3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=da06738a15f23aeb0ba0374342b6bf98c5a7e0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b7:82:e9:8c:9d:88:94:6e:92:4d:b3:1b:79:
f2:33:1c:5f:20:10:ec:c9:ed:b4:2d:d4:45:68:9f:
3f:d1:d2:f7:fe:31:7c:af:7f:08:52:1e:63:0a:35:
01:a4:75:12:2a:56:52:02:7f:40:0d:51:b4:e8:4a:
2f:2d:59:4f:f4:b3:b5:e3:29:f8:74:41:78:7b:b0:
d0:a0:ca:c5:e0:4f:b4:9d:87:f1:41:b3:fc:65:db:
e5:ac:bc:8b:67:f7:82:7a:ce:ea:47:5c:d2:33:b1:
1a:9d:e8:85:59:fc:fa:e1:86:62:d4:e6:f2:1a:e7:
87:0d:31:ef:83:ef:1c:b9:82:46:53:a8:de:2f:54:
e5:13:84:7b:5f:66:7d:a2:ab:a6:3a:d8:e9:19:9b:
b0:0b:b4:15:35:80:ea:0a:98:41:70:48:7c:62:d5:
c1:e2:1b:b8:6b:0f:43:06:c9:f7:cd:04:66:9d:b4:
a3:a4:8c:70:3e:2c:8f:f2:d0:40:d5:e2:63:b6:37:
0f:9f:ac:ff:af:f2:c4:55:3d:0f:2d:c4:2d:e8:3b:
79:68:bc:78:75:d5:88:72:3f:42:37:f2:6d:ba:95:
ff:b4:8e:10:be:5e:30:7d:fc:af:38:65:f5:73:56:
4f:29:a4:05:e9:6d:99:0a:e5:ac:15:95:39:c0:ea:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2E:E8:7A:77:E6:14:3B:1E:3D:8B:C8:10:DE:3A:DB:7A:22:F5:46
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/da06738a15f23aeb0ba0374342b6bf98c5a7e0c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.228.32.0/24
190.228.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6a:62:b5:c0:64:77:d1:94:ce:bf:b9:98:94:64:2a:2e:be:
c9:ec:fc:de:04:45:6c:c1:3e:6c:cc:68:2b:2d:06:c6:27:52:
47:6d:e8:4c:4b:93:53:fa:57:94:bb:95:e2:1b:1d:65:16:6a:
ca:03:9b:75:fc:96:97:1f:f3:a3:a8:18:6f:4b:bb:8d:c3:7b:
1c:81:71:3c:84:b5:70:f8:81:16:62:1a:44:0c:92:2b:08:be:
c1:1c:12:08:80:13:a9:a1:af:8b:c8:eb:5e:12:8a:9f:d3:45:
c2:2d:be:6f:fc:18:6a:2e:49:ad:2d:dd:df:d2:8d:e9:b9:60:
d6:f8:21:7a:8b:e7:35:84:fb:33:37:52:45:d8:41:34:8b:da:
ce:bb:23:12:93:de:06:d4:30:c0:09:58:b6:8b:eb:07:d3:72:
38:71:ae:cf:ea:cc:02:6e:57:f4:0e:b7:6f:0d:37:f0:4d:d9:
7f:1c:6f:36:6f:ce:fb:82:09:31:47:e6:78:72:d5:8e:4c:93:
71:18:f7:3e:5f:1b:9f:e5:56:dd:c7:d6:e4:0b:97:e9:6b:25:
b1:b0:4f:a2:a8:5c:d7:96:9a:6a:f1:6d:fe:36:82:24:1b:0d:
02:e7:70:70:75:b0:d1:1f:8d:28:4b:61:2a:95:9f:93:41:28:
21:88:cb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org