Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/646a6f38770b0f64d52546c7522289af62a7c1bf.roa
File: 646a6f38770b0f64d52546c7522289af62a7c1bf.roa (raw, json)
Hash identifier: l0tJyjDZBZJnDYvQLIVkGtPcOnSSjqZ8+Y/M47Fb7iI=
Subject key identifier: 7A:02:66:23:B9:39:6A:D9:25:EA:E7:59:08:D5:1B:FC:C8:A1:AB:A8
Certificate issuer: /CN=9cb5ed986f92bf8656b1c7c33cd9fc8fc646f900
Certificate serial: 260B43
Authority key identifier: 85:34:22:22:E2:BA:96:B0:DA:DE:85:6A:1C:00:AC:49:B0:60:E9:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cb5ed986f92bf8656b1c7c33cd9fc8fc646f900.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/646a6f38770b0f64d52546c7522289af62a7c1bf.roa
Signing time: Thu 07 Mar 2024 19:06:59 +0000
ROA not before: Thu 07 Mar 2024 19:06:59 +0000
ROA not after: Wed 07 Mar 2029 19:06:59 +0000
asID: 7049
IP address blocks: 190.110.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2493251 (0x260b43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb5ed986f92bf8656b1c7c33cd9fc8fc646f900
Validity
Not Before: Mar 7 19:06:59 2024 GMT
Not After : Mar 7 19:06:59 2029 GMT
Subject: CN=646a6f38770b0f64d52546c7522289af62a7c1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:d4:e8:15:4b:6e:ad:cd:06:74:87:52:f4:
b5:6b:24:41:14:8e:e9:be:4d:3b:e5:e6:13:f2:12:
e5:01:3f:d5:8b:f8:4c:da:f8:6b:8d:d2:a5:d0:b1:
8d:73:ec:53:2d:48:2c:c4:67:92:13:c8:0c:94:ed:
eb:60:e6:4c:1d:ac:8b:7c:de:3a:31:ba:e3:c2:31:
33:22:9e:49:2c:a4:74:23:dd:fe:bc:aa:0f:dc:f7:
51:5c:08:4a:54:2b:9a:bb:7e:44:93:04:cf:56:ef:
f5:a0:fd:67:43:0b:aa:06:b2:3f:02:49:04:38:86:
c3:4c:47:23:f3:fe:8d:11:18:73:47:e2:0d:65:87:
2c:7d:89:14:66:df:48:83:a1:2e:e4:8a:95:e6:03:
51:fe:1e:11:e6:73:48:16:64:93:5e:a8:af:fd:ec:
91:02:a1:f5:f0:6c:06:56:9b:32:3c:d7:7c:cd:08:
eb:6d:e3:e9:00:4b:b3:d0:23:07:e7:8f:26:f1:04:
ec:ab:00:f0:1a:fc:81:0d:54:cb:cf:66:0c:a3:04:
0d:14:d3:78:64:b3:08:cc:17:e4:4e:73:a7:48:7b:
ff:21:91:95:c8:45:84:1e:40:ed:e8:18:eb:ac:ba:
d3:9e:b7:66:85:92:65:cf:4a:3b:09:39:8c:b6:a0:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:02:66:23:B9:39:6A:D9:25:EA:E7:59:08:D5:1B:FC:C8:A1:AB:A8
X509v3 Authority Key Identifier:
keyid:85:34:22:22:E2:BA:96:B0:DA:DE:85:6A:1C:00:AC:49:B0:60:E9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cb5ed986f92bf8656b1c7c33cd9fc8fc646f900.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/646a6f38770b0f64d52546c7522289af62a7c1bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/9cb5ed986f92bf8656b1c7c33cd9fc8fc646f900.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.96.0/20
Signature Algorithm: sha256WithRSAEncryption
40:ae:79:b5:6f:15:b8:da:61:56:4d:f7:05:38:86:af:d1:39:
98:bc:50:9a:eb:4f:fd:ca:4e:49:04:cd:4f:10:1f:cc:a0:9e:
98:5e:9c:07:bb:3b:0e:13:70:fd:29:da:c1:cc:f1:d0:53:02:
a9:5b:3c:77:95:e1:f2:ed:c8:4a:70:93:0c:33:b2:4b:3c:d8:
26:5f:66:ab:a7:7c:7f:fe:81:ee:a6:c1:a1:d5:eb:a2:07:42:
ca:fc:6f:b5:81:27:cf:4d:bc:a0:c0:d9:f3:40:f4:99:ed:bb:
a3:e2:37:32:2a:27:48:60:5d:30:d0:dd:66:14:a6:12:26:ff:
ac:c0:44:ec:65:89:b3:ae:b1:9e:6e:b8:9c:a5:85:f3:c7:fa:
2f:f7:78:c1:56:62:32:fa:68:a6:8e:ec:56:e0:b2:47:21:fc:
99:f3:47:b5:dc:26:50:b3:d1:15:0a:64:ad:e6:75:67:9f:55:
91:fc:bd:3f:c7:bb:b7:bc:bb:8b:a5:10:e7:16:0e:f2:fa:4b:
7d:e2:58:1d:28:cc:1d:11:15:47:b2:8c:c7:39:3c:e5:cc:b8:
9b:0c:a8:c4:fb:2c:89:d8:95:4c:ba:3c:18:7d:57:20:2f:08:
4a:e6:99:5e:a2:51:3d:92:5e:1f:ed:8a:4b:84:30:ee:75:ae:
d3:78:4c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org