Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/3768fb95624726c9077895132baf60a7f5fe1702.roa
File: 3768fb95624726c9077895132baf60a7f5fe1702.roa (raw, json)
Hash identifier: m0NiQdvoakSnlc1sdk0cwFkMdcG2Mi7XZsDsUCaMPj0=
Subject key identifier: 1E:9D:29:88:F0:23:A8:16:52:B3:A7:32:4D:81:08:1B:64:A2:DC:50
Certificate issuer: /CN=b89e6f83f092429d4e523cebb3044e5f86895d46
Certificate serial: 190E6A
Authority key identifier: BF:72:71:A4:6C:27:21:8E:09:23:1B:65:5D:32:10:50:CA:BE:4E:A0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b89e6f83f092429d4e523cebb3044e5f86895d46.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/3768fb95624726c9077895132baf60a7f5fe1702.roa
Signing time: Wed 12 Oct 2022 11:16:14 +0000
ROA not before: Wed 12 Oct 2022 11:15:14 +0000
ROA not after: Sat 12 Oct 2024 11:15:14 +0000
asID: 265825
IP address blocks: 190.2.160.0/19 maxlen: 19
190.185.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1642090 (0x190e6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b89e6f83f092429d4e523cebb3044e5f86895d46
Validity
Not Before: Oct 12 11:15:14 2022 GMT
Not After : Oct 12 11:15:14 2024 GMT
Subject: CN=3768fb95624726c9077895132baf60a7f5fe1702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:64:e9:4a:70:e8:a7:db:7c:d1:23:3d:0e:cb:
b3:96:f5:fa:a5:35:4b:87:2b:e6:b5:d5:a4:82:4b:
43:b8:7e:c8:35:68:b6:82:a9:70:a3:a9:dd:1e:f6:
3b:92:18:5b:13:c4:c2:97:bf:6e:dd:a1:47:d7:79:
1d:3d:d0:b3:4f:9c:c3:b1:ec:da:24:71:1f:8b:2d:
0a:d1:15:7b:2d:e7:5b:ac:ef:4b:72:ec:e7:94:fd:
c6:cc:7e:31:c3:5b:f5:55:a6:fc:06:ee:c3:8e:71:
11:c7:70:84:cd:5d:db:56:ac:71:26:5b:32:2b:50:
34:0b:cd:7e:0d:1e:db:d6:c6:da:46:f2:2e:b0:4c:
6d:1a:07:c1:5e:43:8e:fb:cb:f8:16:e8:c6:43:e1:
36:36:37:a8:7c:5a:56:ed:bc:4b:f2:a1:b4:ca:a1:
90:78:1d:6d:61:49:d7:63:d8:ea:d4:77:8e:fc:5b:
9d:33:0e:85:d6:1d:de:d7:cf:14:1b:b9:5b:10:94:
ca:7c:9e:69:79:15:5a:65:7d:57:9c:49:7f:2f:2e:
bf:ce:b1:1a:06:97:ab:fd:44:8a:bc:4b:04:fd:66:
b2:15:26:40:32:5b:97:10:58:e5:35:38:df:01:64:
25:37:52:2f:54:11:bb:8c:01:aa:f5:6c:cb:b7:5e:
23:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9D:29:88:F0:23:A8:16:52:B3:A7:32:4D:81:08:1B:64:A2:DC:50
X509v3 Authority Key Identifier:
keyid:BF:72:71:A4:6C:27:21:8E:09:23:1B:65:5D:32:10:50:CA:BE:4E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b89e6f83f092429d4e523cebb3044e5f86895d46.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/3768fb95624726c9077895132baf60a7f5fe1702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/b89e6f83f092429d4e523cebb3044e5f86895d46.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.2.160.0/19
190.185.0.0/18
Signature Algorithm: sha256WithRSAEncryption
04:cf:62:f1:70:2b:ca:84:ae:c3:09:34:5f:fc:15:c0:ed:c8:
dd:8c:5e:f4:d7:80:25:9c:b5:cd:1f:ab:1c:18:71:8b:dc:4f:
95:99:d3:d1:b6:81:5a:17:8c:a0:8c:91:e5:68:51:14:c4:9e:
44:9a:3a:dd:a0:5d:ba:90:5d:bf:f5:c2:e2:6d:bd:b5:da:fd:
80:5c:5e:76:80:7b:ec:de:64:4c:e6:02:7d:9a:f9:b4:05:38:
2d:e7:7a:bd:88:c8:3e:b1:d8:00:18:9f:c9:ef:d6:49:7c:18:
f3:60:c4:45:07:f4:6c:b4:54:ca:c8:0a:0f:24:36:b4:7c:bf:
b3:ca:ce:57:c4:49:0e:fe:8a:8e:9f:b9:ab:3c:06:fb:33:e4:
05:c0:d3:aa:59:30:6a:0f:89:b6:5c:20:ba:9a:19:c7:b5:c3:
6a:c9:b4:3a:61:41:9c:08:fd:66:5c:94:ef:f3:77:fa:36:5e:
4f:9d:d5:29:d1:a6:9f:45:11:9d:18:c5:02:3f:38:89:57:08:
4a:4a:80:6a:f2:4e:0a:bc:68:e3:5e:f3:40:d1:05:89:f5:7c:
e3:de:95:4f:fd:a7:4b:48:e2:3b:cb:0a:38:43:ee:43:2a:26:
4b:e5:3d:3a:ed:0e:d9:b9:3a:a5:ef:a0:e0:09:ae:ac:d4:92:
b1:4a:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org