Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/ca1633a5bef8d2b3c319d6716e54aad13fda24fe.roa
File: ca1633a5bef8d2b3c319d6716e54aad13fda24fe.roa (raw, json)
Hash identifier: y/ZBpXmw9iXXm0LrncAioaVCdUeNgJpt3fp1YBmt4JE=
Subject key identifier: 64:4E:D8:0D:FF:FD:A1:04:93:9C:62:C6:0F:13:D8:86:2A:74:4E:0B
Certificate issuer: /CN=0355d87e3448f414f994660978ab87d5ff78b854
Certificate serial: 0BDFC7
Authority key identifier: 6A:1F:D0:83:9B:18:57:FD:1D:74:85:2A:20:CA:A9:34:39:E7:BA:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0355d87e3448f414f994660978ab87d5ff78b854.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/ca1633a5bef8d2b3c319d6716e54aad13fda24fe.roa
Signing time: Wed 24 Mar 2021 14:31:37 +0000
ROA not before: Wed 24 Mar 2021 14:31:37 +0000
ROA not after: Tue 24 Mar 2026 14:31:37 +0000
asID: 52486
IP address blocks: 190.123.240.0/20 maxlen: 24
200.91.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778183 (0xbdfc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0355d87e3448f414f994660978ab87d5ff78b854
Validity
Not Before: Mar 24 14:31:37 2021 GMT
Not After : Mar 24 14:31:37 2026 GMT
Subject: CN=ca1633a5bef8d2b3c319d6716e54aad13fda24fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:4c:2a:21:75:72:67:7c:fd:87:5c:6f:f8:
8d:94:27:17:24:89:4f:f6:2a:92:c2:1d:c1:73:59:
81:ca:c2:95:1e:e8:e7:63:51:ac:18:59:ec:6c:f7:
bf:79:cc:7f:54:78:5d:9f:27:53:b8:81:5e:d2:d8:
9f:5d:0d:3e:25:5f:bf:c7:2f:79:ef:46:4d:bc:29:
82:86:80:f8:67:e2:20:4b:b3:eb:c1:81:3e:a2:41:
d0:47:2f:fe:7c:c7:98:d7:6f:9d:17:06:ec:49:38:
5f:e3:2b:9f:5e:1b:c9:9c:1e:2c:57:3c:7e:ab:73:
a1:ea:86:c0:4b:1e:21:0e:44:39:27:f4:9c:33:a3:
31:ce:8c:9b:4a:db:19:d9:16:16:1f:27:1d:94:39:
e1:3f:2a:53:85:17:f5:03:dd:83:09:1d:ba:d2:c6:
18:fe:4e:c4:87:9b:a0:ce:de:e1:f6:94:21:ed:37:
eb:32:91:3b:de:36:00:30:25:4b:66:d5:6f:3f:03:
f5:3a:21:50:ef:cc:19:e4:e0:38:c2:53:a5:a0:79:
a8:51:0d:ef:1c:57:ed:3c:2a:e3:91:df:b7:fd:bf:
d3:70:36:08:6e:1d:0d:e6:4c:4c:0b:84:3f:e6:11:
e3:55:56:4b:a4:3e:2c:63:31:f7:3d:1b:3b:37:76:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:D8:0D:FF:FD:A1:04:93:9C:62:C6:0F:13:D8:86:2A:74:4E:0B
X509v3 Authority Key Identifier:
keyid:6A:1F:D0:83:9B:18:57:FD:1D:74:85:2A:20:CA:A9:34:39:E7:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0355d87e3448f414f994660978ab87d5ff78b854.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/ca1633a5bef8d2b3c319d6716e54aad13fda24fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/0355d87e3448f414f994660978ab87d5ff78b854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.123.240.0/20
200.91.56.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:5a:af:8e:42:49:89:70:7a:8f:3f:51:ea:22:b0:34:a7:0f:
b7:42:36:e0:f6:ec:55:12:18:87:0b:4f:af:cb:45:c1:83:7a:
94:1b:db:93:93:c9:6f:ed:f7:31:de:04:8e:0a:dd:fb:b0:3e:
ea:5c:82:f9:92:f9:f4:09:dd:a4:fe:f1:5f:11:f6:9b:a6:dc:
33:12:fc:59:b5:19:fe:f9:6e:41:1f:f8:3c:f3:eb:f1:90:e6:
1d:18:90:07:b4:92:a8:6d:29:f8:ea:a8:94:97:90:9a:1b:66:
47:19:ba:1b:13:44:a5:69:dc:bb:43:6a:c3:20:04:62:ad:d9:
48:6f:29:c7:73:93:1c:57:d9:72:25:bc:6d:d3:c0:00:e5:b7:
9e:15:d4:2b:0c:52:3e:99:c6:ab:73:66:a2:87:e1:ba:03:2c:
15:84:89:d8:8f:1f:44:07:39:ad:c7:44:3f:9e:57:af:6c:5f:
f4:9b:2e:6c:a9:3f:53:1a:81:97:b0:af:ed:46:f0:e5:84:00:
30:d8:93:27:f1:12:42:0a:30:5e:97:fe:87:71:b7:2f:a1:c5:
31:89:3a:67:77:d0:41:11:52:1a:c2:43:de:37:f9:b5:6a:79:
ba:9c:fb:b2:60:d1:4f:a9:46:7c:63:c5:c2:69:0d:a0:b2:54:
d3:d3:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org