Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/314ea41126ee9ce9f32851ade3c88aa17ca39ab7.roa
File: 314ea41126ee9ce9f32851ade3c88aa17ca39ab7.roa (raw, json)
Hash identifier: f5qlLFc0HYPLMu44dQx7CvbFPoDJJRtU6jt0Fs4bcgk=
Subject key identifier: 2E:BA:38:00:37:FA:47:49:88:3B:52:02:31:A3:72:9D:3C:49:5F:8C
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 22B765
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/314ea41126ee9ce9f32851ade3c88aa17ca39ab7.roa
Signing time: Thu 22 Jun 2023 18:16:35 +0000
ROA not before: Wed 21 Jun 2023 18:16:00 +0000
ROA not after: Sun 22 Jun 2025 18:16:00 +0000
asID: 264638
IP address blocks: 200.68.114.0/24 maxlen: 24
190.210.206.0/24 maxlen: 24
190.2.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275173 (0x22b765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Jun 21 18:16:00 2023 GMT
Not After : Jun 22 18:16:00 2025 GMT
Subject: CN=314ea41126ee9ce9f32851ade3c88aa17ca39ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:c6:a1:80:2f:07:6e:a6:83:3d:50:07:87:
c5:1c:bd:24:cf:a2:f8:57:cd:73:07:eb:9e:9a:90:
9a:b8:03:c0:0a:86:d6:0d:b2:5b:15:22:db:3c:ac:
21:6f:1a:7c:a3:d5:59:ae:fa:c9:ae:75:23:24:35:
8d:66:98:99:7b:dd:07:64:40:a0:e1:f8:d3:52:2a:
bf:ec:81:43:96:d4:5f:09:27:81:f5:b3:b2:bf:b9:
bd:f8:59:d3:f6:28:f7:2f:85:50:d6:27:d6:98:9b:
d0:7f:9f:3d:8d:4e:31:b0:7e:4b:68:20:b2:13:a8:
9d:93:f4:f2:f6:1d:6b:6b:21:86:13:fc:81:37:ed:
47:07:d4:18:da:6e:cf:87:64:0d:85:c1:c2:4c:b6:
e5:db:a8:30:dc:c2:80:e2:ff:6c:44:7f:a5:cc:86:
61:ad:45:95:2b:4b:5d:03:fc:72:2e:5d:3b:4e:37:
c3:14:5a:72:a4:c1:5b:1b:4e:1f:80:5d:83:9a:45:
5f:e8:3e:37:21:7d:ce:41:31:ad:18:88:cd:68:52:
c7:9a:b8:68:cc:33:27:b7:1a:97:9f:81:6b:ed:63:
f7:4f:4c:10:f4:c3:f9:d0:a7:f2:2d:f9:2a:f2:8a:
88:c6:d7:c3:91:d1:b2:e8:15:80:ce:f7:90:c8:33:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BA:38:00:37:FA:47:49:88:3B:52:02:31:A3:72:9D:3C:49:5F:8C
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/314ea41126ee9ce9f32851ade3c88aa17ca39ab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.2.17.0/24
190.210.206.0/24
200.68.114.0/24
Signature Algorithm: sha256WithRSAEncryption
15:71:39:c8:f2:43:11:f6:4c:b1:c3:c7:6b:62:c1:0d:b9:19:
d1:2a:94:9d:ab:92:03:68:b9:81:f9:62:80:d6:43:90:9c:9b:
76:2b:97:4d:c0:10:13:4a:00:d2:2f:0a:2d:1d:89:ca:2b:b8:
c8:df:d5:10:a7:3d:e9:ab:49:00:c3:16:3a:31:01:36:13:ed:
04:af:07:b6:05:4f:05:87:e8:aa:27:dd:77:6e:45:a8:9e:34:
be:d1:f6:74:9f:c7:82:b7:be:e3:88:ff:43:4f:73:82:ff:87:
65:30:ed:88:4f:16:e0:06:2b:12:09:05:ce:a4:23:45:93:dc:
ae:a0:35:ed:b1:7d:17:e2:26:43:27:08:88:b7:22:90:00:e5:
81:5c:af:c3:56:51:86:39:69:62:88:44:3b:f1:ac:cb:b5:62:
cf:8b:9c:ad:bc:f6:68:42:52:a1:19:1b:2e:32:0c:3f:02:d5:
04:66:2c:f4:f9:a6:ec:ca:bb:b7:9f:90:1f:d5:9c:65:6f:90:
4b:6a:63:82:fc:7f:32:73:64:de:80:cd:7d:26:75:29:4e:04:
3b:b9:ff:e0:80:da:ab:f8:8d:f5:47:cb:29:44:31:ca:bc:46:
32:c2:bb:7e:d8:2b:0b:92:58:d9:7e:31:6e:6d:32:95:a4:e6:
65:22:3e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org