Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/b5dce2adc7fd9ca5fb35c5c7ba407d930a963f04.roa
File: b5dce2adc7fd9ca5fb35c5c7ba407d930a963f04.roa (raw, json)
Hash identifier: 1Nspoj3YHrUVruYXdWi00Lq7DaV7TeX0GFOQCE8+zVQ=
Subject key identifier: 35:04:E9:AB:D2:D0:CC:65:77:07:BC:4C:31:01:0F:0F:50:B6:D1:28
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 108A63
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/b5dce2adc7fd9ca5fb35c5c7ba407d930a963f04.roa
Signing time: Tue 24 Oct 2023 16:01:00 +0000
ROA not before: Tue 24 Oct 2023 16:00:56 +0000
ROA not after: Tue 24 Oct 2028 16:00:56 +0000
asID: 11311
IP address blocks: 190.50.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084003 (0x108a63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Oct 24 16:00:56 2023 GMT
Not After : Oct 24 16:00:56 2028 GMT
Subject: CN=b5dce2adc7fd9ca5fb35c5c7ba407d930a963f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c2:97:65:1d:a6:62:b2:8d:88:ac:d2:18:4b:
16:79:a2:90:15:60:1f:4f:61:75:9e:af:c9:0b:a1:
7b:31:33:3d:e6:de:7b:79:38:92:ac:93:ad:36:30:
ce:64:f9:c2:b0:cf:74:7c:e5:18:65:12:58:d7:8e:
d2:7f:3c:ca:9a:25:fb:18:85:13:36:3d:82:22:61:
a9:71:5d:c2:04:01:d8:d9:e0:af:e5:2c:31:38:f0:
d6:87:0d:50:05:18:03:a1:03:b1:24:e5:28:cc:2c:
73:08:f9:50:10:48:f0:13:7d:88:3c:3b:09:97:89:
71:c8:8f:f6:26:43:85:61:94:f7:bd:3c:30:dd:2e:
01:89:f2:56:3b:63:4d:31:d8:4e:14:45:aa:66:61:
07:78:96:93:e1:52:1f:9b:40:b1:25:1c:8c:5e:85:
54:24:7e:c5:15:50:a7:69:9f:df:c7:3c:c6:cc:50:
06:75:e6:9e:6f:e8:69:13:4a:52:2d:ca:a0:da:88:
a0:22:f9:2d:ef:05:40:da:30:b1:c5:45:7c:e3:fe:
d6:6d:3c:75:e6:7e:13:1c:fd:af:ba:0a:df:25:62:
92:b0:88:b2:79:6b:3e:3c:1f:f5:05:a6:94:d7:7c:
06:9e:7b:65:8d:2e:a9:c6:ff:8b:ef:75:82:24:03:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:E9:AB:D2:D0:CC:65:77:07:BC:4C:31:01:0F:0F:50:B6:D1:28
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/b5dce2adc7fd9ca5fb35c5c7ba407d930a963f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.50.176.0/20
Signature Algorithm: sha256WithRSAEncryption
79:95:df:30:bc:95:61:14:b0:da:a1:ec:78:43:02:7f:3f:2c:
39:04:e3:d9:a2:e6:4a:ff:6d:b0:ed:9b:3f:40:b4:31:fd:2a:
e5:a8:4e:e6:4c:06:37:63:76:2f:00:a8:73:13:5b:41:8c:42:
d7:e8:9e:a8:71:ef:e8:be:b3:ca:16:e5:5c:15:1e:24:e1:48:
fc:8c:ab:fc:cf:99:23:ff:97:1d:f7:5b:73:cb:0f:83:3c:ce:
29:71:aa:c3:ea:c9:ef:8a:75:b9:1e:9e:df:d3:13:21:86:27:
59:60:08:c0:ab:ce:76:8b:bb:31:0a:22:15:b1:be:18:d6:db:
6f:32:b2:59:6b:3c:ed:c7:56:e7:c2:05:72:48:86:30:cb:c1:
3c:9c:4a:25:dc:fd:66:42:b3:43:1c:27:a5:45:5f:f6:eb:0e:
9c:2b:39:88:40:93:f8:ed:3c:e8:08:82:f7:48:57:ed:2c:0c:
32:31:bf:b0:cf:73:2e:6f:58:dc:9b:b6:0f:29:ad:16:98:b8:
84:ac:6a:49:cb:8b:5f:cc:a3:98:13:09:7b:c8:de:f7:59:2f:
b8:98:c9:ce:c9:8a:9d:0f:c1:ea:40:80:6b:39:ac:a8:4c:07:
be:96:3a:03:0f:60:ce:98:22:66:80:a2:e7:c0:8e:12:c3:c6:
0e:49:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org