Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/35d4421b0884edfef650c14767f9ae3a127f1679.roa
File: 35d4421b0884edfef650c14767f9ae3a127f1679.roa (raw, json)
Hash identifier: CbyPBu06pDF60pP7modG9OTyvBh/yMCsLxQDvwxP8kE=
Subject key identifier: 36:AB:EA:BE:4C:AD:BA:52:3E:00:79:83:62:94:EA:34:09:92:FE:F9
Certificate issuer: /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial: 2A5498
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/35d4421b0884edfef650c14767f9ae3a127f1679.roa
Signing time: Thu 18 Jan 2024 14:39:42 +0000
ROA not before: Thu 18 Jan 2024 14:39:31 +0000
ROA not after: Thu 18 Jan 2029 14:39:31 +0000
asID: 28000
IP address blocks: 190.112.52.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774168 (0x2a5498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Validity
Not Before: Jan 18 14:39:31 2024 GMT
Not After : Jan 18 14:39:31 2029 GMT
Subject: CN=35d4421b0884edfef650c14767f9ae3a127f1679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:3d:1d:d7:78:29:21:63:3f:0c:57:4d:c5:
c3:fc:77:a6:8f:04:8e:28:1b:0a:2a:a5:6f:2d:67:
42:15:db:60:ad:4a:df:20:a6:fb:c9:48:14:41:1a:
90:48:9a:23:20:57:28:e5:48:fe:55:30:95:f1:cb:
b4:04:b2:d1:d9:33:a8:41:9e:1f:12:99:06:5b:84:
4c:f1:21:82:d3:03:77:25:84:e9:2a:33:32:ee:9c:
50:ae:70:ef:8e:3d:d4:83:96:54:69:27:ec:fc:f1:
d7:56:7d:81:da:da:bd:fc:e5:ea:a3:54:f9:71:63:
db:f3:bb:4b:35:3d:41:e2:d8:08:7f:fe:6d:e6:03:
b5:c5:8e:c2:2a:29:79:b6:26:04:a4:43:2c:dc:17:
b3:99:5b:34:bb:8b:2f:d4:a1:e0:b9:34:9a:c8:1c:
30:94:ae:e0:3c:39:48:f5:17:c9:cf:21:f2:7b:e7:
96:97:fe:81:ab:6c:97:4d:a2:29:70:2d:33:fc:ac:
a7:8c:ed:e8:8e:fd:17:56:18:a5:8c:c8:ab:a5:7a:
aa:09:d9:b6:7d:d1:88:5b:69:56:a7:e8:69:77:28:
47:98:a8:6e:d2:9a:d0:f0:f6:63:9a:9e:ce:9a:08:
82:60:6e:56:61:6b:d5:21:db:47:b8:ea:66:2e:f8:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:EA:BE:4C:AD:BA:52:3E:00:79:83:62:94:EA:34:09:92:FE:F9
X509v3 Authority Key Identifier:
keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/35d4421b0884edfef650c14767f9ae3a127f1679.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.52.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:b5:28:d9:92:be:33:01:2f:54:e2:86:5b:14:b1:6f:2b:e5:
7a:dd:06:cc:7f:f6:19:67:b8:86:40:20:6f:08:7a:e8:6d:85:
8e:9f:89:03:b0:89:36:4f:ad:96:39:4a:fd:fb:20:7a:8a:2f:
d9:15:b6:8f:32:e4:af:d9:d0:43:60:1c:b2:ab:8b:58:57:3a:
94:fc:d7:03:0f:61:96:fd:05:39:78:2b:93:d8:52:16:93:3b:
d8:9a:e4:96:b0:5b:30:8e:08:0b:7d:ae:a6:dd:28:c6:e3:9c:
dc:3e:e2:27:39:33:fd:fd:74:ef:20:e8:ea:c5:f2:68:4d:92:
08:31:6b:91:ee:2a:7c:d8:e5:4c:b6:cb:5c:b8:b5:7d:01:63:
c0:0e:aa:3b:93:93:78:ca:2a:a1:87:d6:4c:f8:a8:67:57:83:
14:c1:02:c3:9e:09:96:ad:7d:06:00:6d:5d:8b:28:f0:e7:8e:
c5:2f:c8:bd:fe:e7:4a:97:16:d1:a7:8a:e2:bc:e6:64:61:ec:
f2:07:ca:64:45:3d:4f:e7:0c:5b:d4:5b:db:e3:a6:8c:ea:1c:
5f:39:40:4a:87:f8:9d:48:ce:4a:6b:b6:a4:7b:67:f8:21:5d:
51:19:f3:40:bd:e6:31:6c:5c:eb:23:69:a5:e2:0c:39:eb:c0:
70:46:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org