Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f683d826b1b1aac572aa15809fce702d68d8d145.roa
File: f683d826b1b1aac572aa15809fce702d68d8d145.roa (raw, json)
Hash identifier: E0jLpTcffUC39nlUWjQIGf5EZ98MIBbnlb7C7IulCtk=
Subject key identifier: 71:3F:39:57:3D:DF:AD:66:BD:16:C7:81:CD:A5:DC:43:7C:FA:30:21
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DEFE1
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f683d826b1b1aac572aa15809fce702d68d8d145.roa
Signing time: Thu 07 Dec 2023 12:43:00 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 52323
IP address blocks: 190.225.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010529 (0x2defe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=f683d826b1b1aac572aa15809fce702d68d8d145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:34:c2:97:8f:63:39:dd:d2:41:8d:d0:4a:
11:1e:04:c4:e6:e6:92:4a:f7:15:90:4a:13:71:47:
e7:78:77:bf:c2:a9:0c:03:ad:06:33:18:71:2e:25:
e3:25:91:9c:d2:b1:41:82:52:eb:e2:01:d1:77:40:
1b:74:1d:88:59:f2:e6:4d:26:45:d7:08:4b:8d:31:
f2:12:3f:22:f6:87:57:65:91:08:7f:2a:ad:16:6e:
f8:df:4b:41:a6:80:51:de:b9:60:91:4e:a4:c3:19:
ee:b8:75:be:4e:d8:47:7a:c7:e6:84:46:f7:d0:41:
5c:2e:c5:8e:ab:fa:69:df:86:83:97:fd:ee:e5:7e:
44:53:b5:cc:4b:f2:e0:24:47:54:c9:d5:ad:47:af:
8d:fe:5f:ac:95:3e:63:ca:70:ef:9f:68:d8:24:fa:
8d:58:32:1c:40:b9:43:bb:0b:fb:ac:c7:0f:09:d5:
cc:1d:56:70:10:01:ff:54:41:ef:bf:11:2c:b4:a1:
fb:01:6e:29:ad:1e:91:42:0c:3e:24:e6:79:12:ae:
74:72:db:1e:09:b4:0c:56:90:2f:26:4c:73:6d:c9:
75:2e:ee:7d:cf:02:30:47:47:1b:7c:f9:7c:0c:a7:
a9:ad:fe:7a:7e:2c:c5:b9:58:b5:1e:b2:5d:24:38:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3F:39:57:3D:DF:AD:66:BD:16:C7:81:CD:A5:DC:43:7C:FA:30:21
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f683d826b1b1aac572aa15809fce702d68d8d145.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.225.164.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e9:05:77:18:31:e1:60:22:f1:6c:ee:e1:a1:b9:67:61:9f:
c3:7e:2e:f7:1c:80:79:38:03:a8:7d:d5:fa:a0:0c:a4:7e:54:
0f:b5:a6:09:ff:3c:c0:4a:09:34:39:40:51:d2:0e:d3:0a:2d:
cc:02:e9:8e:ca:ce:59:c1:dd:b3:bd:14:cf:ac:6a:8d:6a:c9:
86:a7:b7:62:a9:58:77:4e:e5:67:9b:d5:76:2c:dc:2e:5e:9c:
48:29:6b:f3:5a:43:24:74:23:5f:3c:da:88:aa:03:a2:b7:8d:
4a:ba:fa:6e:9e:3b:c1:be:bf:9d:2c:dd:42:1e:60:bc:0d:12:
8a:06:6c:36:cc:53:a7:2e:49:3e:42:a7:e3:3d:7b:8a:85:72:
f6:9d:61:9e:bb:5e:21:0e:04:1b:57:6b:41:fd:71:c5:d4:8f:
ee:40:49:ef:d1:a7:bf:90:7b:fd:4d:e9:e7:d5:99:be:8b:25:
56:e6:86:8a:bd:3d:49:dd:75:7a:d5:3e:ef:b1:d9:d2:7b:f3:
6c:eb:bb:71:bb:aa:0c:f7:20:5a:9f:b1:ba:99:e2:e7:c1:4f:
dd:6f:47:10:30:de:8b:c7:f3:17:98:0f:64:40:d4:78:0c:5a:
74:e5:bc:d5:86:91:d5:de:d2:9a:8f:24:5b:33:0a:e5:c3:28:
53:17:fc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org