Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/0112a8171a99bf4c2199acb6f8ffb55a657a8326.roa
File: 0112a8171a99bf4c2199acb6f8ffb55a657a8326.roa (raw, json)
Hash identifier: GEJdjgHdqhPLxWsyyhzPPxLXLgr0km1CkvOpQwu+HZs=
Subject key identifier: 7E:51:73:35:6E:9A:D0:D3:05:3A:CF:10:A0:8B:54:DC:8B:12:88:34
Certificate issuer: /CN=3df0f837110e45a0ac8477d5992bac317ed138f1
Certificate serial: 216588
Authority key identifier: 59:14:75:7C:51:DF:E1:FD:F9:5B:86:6B:FB:67:B3:16:F7:67:87:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3df0f837110e45a0ac8477d5992bac317ed138f1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/0112a8171a99bf4c2199acb6f8ffb55a657a8326.roa
Signing time: Thu 31 Aug 2023 14:55:43 +0000
ROA not before: Wed 30 Aug 2023 14:55:42 +0000
ROA not after: Sun 31 Aug 2025 14:55:42 +0000
asID: 11340
IP address blocks: 190.110.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188680 (0x216588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df0f837110e45a0ac8477d5992bac317ed138f1
Validity
Not Before: Aug 30 14:55:42 2023 GMT
Not After : Aug 31 14:55:42 2025 GMT
Subject: CN=0112a8171a99bf4c2199acb6f8ffb55a657a8326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:23:68:dc:88:fd:74:07:02:5f:fb:bc:32:
e9:44:79:71:3a:2d:9b:61:1b:16:cb:1b:04:72:1b:
bc:f9:9a:e9:11:68:2b:10:b9:ce:ee:d1:c5:b1:1e:
f4:77:01:17:4f:77:94:7a:59:6c:48:67:1b:3a:7f:
06:81:b6:ca:c1:38:b4:5a:17:e8:76:8f:e3:ff:b2:
c9:4f:ba:34:e5:10:7b:dc:0f:8b:d3:84:a9:1a:79:
7e:90:73:23:5f:b4:cb:5d:89:45:b0:65:46:96:f7:
c7:47:ea:b1:ad:c5:a9:f4:7c:af:75:45:32:cb:7f:
8c:c6:de:fc:5d:5f:07:23:f5:56:ed:81:c9:de:83:
81:5e:20:17:36:41:4f:cb:43:12:52:da:e8:5d:56:
a5:88:bc:3f:72:1b:d9:05:b7:30:4c:e6:3e:e4:f0:
f2:4e:c6:59:37:90:0f:7b:12:bd:37:ca:1c:df:e4:
85:66:d2:4e:35:99:bc:72:b5:40:45:26:fe:af:f9:
d4:2e:26:24:cb:58:33:3e:1c:f1:af:40:79:65:6e:
af:67:15:f4:32:41:af:25:7f:75:67:4b:38:4a:48:
31:33:a5:02:ea:ba:0d:22:49:d7:2d:b0:78:cc:be:
46:8e:53:d4:d3:35:10:31:e1:60:23:46:47:3a:86:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:51:73:35:6E:9A:D0:D3:05:3A:CF:10:A0:8B:54:DC:8B:12:88:34
X509v3 Authority Key Identifier:
keyid:59:14:75:7C:51:DF:E1:FD:F9:5B:86:6B:FB:67:B3:16:F7:67:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3df0f837110e45a0ac8477d5992bac317ed138f1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/0112a8171a99bf4c2199acb6f8ffb55a657a8326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/3df0f837110e45a0ac8477d5992bac317ed138f1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:65:f0:c2:39:60:85:89:a3:bb:bb:34:60:04:65:e1:24:93:
37:bc:c2:9b:70:eb:58:28:9a:d3:d8:69:a0:96:25:6b:97:bb:
22:8b:f1:1b:7a:9d:1a:bf:c3:b9:6a:2e:b8:1c:88:41:09:3c:
80:71:a8:c7:f7:50:e8:14:8e:19:a3:c6:74:ba:20:af:87:5c:
a8:58:55:11:c6:34:9b:ba:f8:4d:fa:5d:08:74:bc:0f:94:e9:
ca:1e:24:2a:ad:15:d7:fb:3a:dd:5f:a8:c8:21:da:8f:44:81:
15:2e:d7:f8:19:47:f8:66:b0:49:ef:cd:65:00:2f:0b:c1:6f:
86:e9:ba:83:ad:66:a9:d1:50:26:d1:c0:f1:e5:b1:30:03:31:
cf:0b:f7:57:28:91:cd:04:54:9a:4e:87:af:cd:41:99:48:25:
c3:55:07:87:07:d1:d1:07:04:df:f4:6f:0d:43:98:24:7a:4e:
5a:d7:bd:12:2b:81:a5:e6:27:da:db:bc:7a:7e:04:d4:5f:7e:
51:78:3c:4f:75:16:5d:12:27:cb:88:23:71:70:04:9d:f7:ca:
96:c6:59:05:12:fb:01:63:60:52:2d:f7:2d:6d:fe:ff:49:85:
ed:9b:55:c9:c4:53:d5:70:f8:de:17:82:5b:9f:00:9a:e8:5f:
96:00:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 22:37:25 2024 by rpki-client on console-ams.rpki-client.org