Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/90cbafc199ebc887c280d36a0461f20aabce3735.roa
File: 90cbafc199ebc887c280d36a0461f20aabce3735.roa (raw, json)
Hash identifier: VJ4Bga7O9NljbLRIf5OURVfNz9SEjw30knZlWdZRfIY=
Subject key identifier: A7:E1:AA:A8:F0:51:F1:1C:48:C3:83:B1:01:A1:8D:90:60:57:C6:0A
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 24B2F9
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/90cbafc199ebc887c280d36a0461f20aabce3735.roa
Signing time: Mon 30 Oct 2023 12:06:52 +0000
ROA not before: Mon 30 Oct 2023 12:06:35 +0000
ROA not after: Thu 30 Oct 2025 12:06:35 +0000
asID: 52508
IP address blocks: 201.182.143.0/24 maxlen: 24
138.204.247.0/24 maxlen: 24
2001:13c7:6019::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2405113 (0x24b2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Oct 30 12:06:35 2023 GMT
Not After : Oct 30 12:06:35 2025 GMT
Subject: CN=90cbafc199ebc887c280d36a0461f20aabce3735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:35:a3:40:5c:70:8d:62:c5:a1:b9:bb:28:cb:
bc:82:87:8c:01:41:d0:cd:1f:f0:23:e8:27:36:42:
88:8b:d7:07:86:b5:c7:e4:f6:d9:c5:52:a0:7f:aa:
f5:40:b8:5c:c0:b7:48:09:d3:0d:e2:05:61:90:01:
1a:79:b8:50:39:e0:bc:b3:40:36:62:98:9c:d3:44:
66:f2:16:ac:87:0e:c3:24:4a:b5:81:f9:55:24:ab:
1b:99:73:83:65:32:5d:b7:19:ac:21:87:50:af:cd:
dd:7a:33:b6:f5:15:fa:55:ee:cd:b6:f9:1b:65:19:
5e:ad:80:bd:0a:e6:32:a0:ce:0b:7a:03:4f:88:13:
76:54:cc:44:17:4d:54:8a:eb:71:27:6c:dc:79:09:
4d:53:4f:51:50:92:2e:f1:d2:1b:dd:be:30:7b:51:
21:de:03:fa:51:71:91:c5:11:73:f5:a8:d8:56:00:
d6:93:44:63:64:83:fe:7d:9e:ae:5a:ec:ac:fb:42:
ce:0b:fd:21:06:ca:01:78:8f:a9:97:e1:51:58:db:
93:31:24:57:95:2a:88:38:f5:49:98:82:57:72:24:
53:f5:74:86:5c:a0:c1:5e:a9:20:85:c4:ab:d3:51:
51:e8:38:81:c7:23:47:47:44:44:3d:81:28:ac:4f:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E1:AA:A8:F0:51:F1:1C:48:C3:83:B1:01:A1:8D:90:60:57:C6:0A
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/90cbafc199ebc887c280d36a0461f20aabce3735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.247.0/24
201.182.143.0/24
IPv6:
2001:13c7:6019::/48
Signature Algorithm: sha256WithRSAEncryption
8b:eb:1e:ea:4f:88:78:77:24:55:0d:0b:be:a9:5d:87:35:1c:
6a:9d:25:a9:f5:38:d4:84:af:64:5a:e4:37:0a:0d:5e:b7:ae:
06:1e:b8:a8:1e:bb:94:ea:76:22:b6:81:2c:8c:57:7b:68:ec:
0c:7b:0b:1b:cd:7d:1a:32:2f:ef:01:da:d0:6f:94:e8:f0:29:
54:f8:df:5d:90:16:04:03:38:1c:87:68:b3:31:98:dc:aa:18:
c5:0d:05:40:e2:e3:45:b8:a2:db:87:03:50:be:9b:fb:b6:56:
f9:90:cf:69:f8:fe:54:9f:98:f3:62:9d:2e:b8:ea:46:9e:45:
9d:77:98:0f:8f:d6:19:85:f6:95:50:81:a3:cd:f4:af:7b:ac:
6a:a6:b9:ad:28:fa:6f:d9:d0:d8:22:7c:a8:63:36:5a:cf:03:
3b:dd:fe:7b:f1:b4:42:28:ae:81:e7:37:d9:00:97:c2:08:0c:
61:b8:60:22:d5:10:14:f0:1d:93:b7:02:51:88:73:12:1e:f7:
a0:36:9c:6e:a1:3e:15:13:1c:d9:da:c3:e2:33:25:cd:7e:d5:
91:b8:92:95:e3:fd:88:b5:a6:79:62:ae:e4:9b:5a:16:be:10:
2b:b2:65:e6:a5:7f:db:10:a4:27:cd:ec:4a:e4:98:47:f6:6f:
7a:2e:1b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org