Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3c45a85daae59cc88d9b41dd581860f7ad59fcb0.roa
File: 3c45a85daae59cc88d9b41dd581860f7ad59fcb0.roa (raw, json)
Hash identifier: b0fhaKh9Kg8wUmnmWgdPcCSFnIXPUDH/BRFA5u62eZY=
Subject key identifier: 3B:5E:BB:88:44:28:00:04:C3:FC:8A:1D:BE:3E:A3:F2:84:D3:50:31
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 039537
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3c45a85daae59cc88d9b41dd581860f7ad59fcb0.roa
Signing time: Tue 11 Jul 2023 13:00:54 +0000
ROA not before: Mon 10 Jul 2023 13:00:54 +0000
ROA not after: Fri 11 Jul 2025 13:00:54 +0000
asID: 16629
IP address blocks: 190.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234807 (0x39537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:00:54 2023 GMT
Not After : Jul 11 13:00:54 2025 GMT
Subject: CN=3c45a85daae59cc88d9b41dd581860f7ad59fcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:7b:cf:35:6c:a0:68:f3:2f:87:b0:c9:a5:
48:a2:3c:a4:63:a9:21:9e:6f:ca:64:46:77:62:e4:
f1:e6:ea:1b:9b:ca:25:94:59:46:72:e6:4f:d2:bf:
83:ae:ba:33:52:cd:6c:e2:92:07:bd:ea:e0:6c:bf:
7c:7b:39:36:9f:e8:f8:7b:73:98:e2:7e:88:f6:f9:
16:ca:07:3a:11:74:b4:19:9c:f8:f7:0d:07:fb:3b:
e6:fe:73:37:9b:53:bb:4e:df:8e:8b:08:7c:6d:10:
13:46:c6:8a:d9:1c:48:d2:b3:8a:64:da:76:51:9b:
1c:95:8a:27:41:53:9d:c8:c7:2f:08:0e:dd:bf:00:
cf:a9:9b:20:e8:3c:ba:dc:d9:ff:80:33:a5:f1:25:
ca:65:18:27:5a:7b:bb:9c:5b:44:ba:e6:02:e0:b2:
f3:56:24:2b:21:7a:fc:b7:16:7d:c6:e5:ec:6b:47:
11:81:3b:2e:e8:03:de:9a:c6:44:18:c8:52:9f:8d:
a1:89:d9:e8:a4:ff:44:b2:4c:85:57:f0:44:94:f5:
a3:fe:b1:bb:98:01:e4:d6:99:ba:83:58:4a:82:14:
27:5a:64:ea:b5:2d:73:3a:81:f8:e0:18:c8:65:c5:
24:0d:2c:93:cb:b7:2a:41:b2:ac:ce:9d:c9:b7:60:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:BB:88:44:28:00:04:C3:FC:8A:1D:BE:3E:A3:F2:84:D3:50:31
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3c45a85daae59cc88d9b41dd581860f7ad59fcb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:74:d4:ed:7e:12:77:6e:56:df:4b:49:71:f7:05:b7:c7:d1:
56:88:6e:ab:18:cb:b0:35:f0:38:79:8e:31:ae:b0:ba:aa:4c:
2d:09:7d:88:a6:94:13:85:0e:bc:f1:78:6f:5e:9f:41:70:bd:
56:90:62:98:4f:f2:59:2b:93:0c:3c:89:8a:db:86:0e:58:0c:
df:28:53:a7:c4:26:bd:6c:43:f2:db:de:69:3c:5c:c6:55:d2:
49:e2:26:69:bb:e4:5c:de:c9:c1:3b:9f:3c:c6:fc:2e:fb:de:
b4:d4:d8:4a:6f:ba:1f:ae:cc:da:0e:01:ca:60:c7:98:97:75:
8c:f4:c7:d5:7f:d5:c2:36:6b:4a:80:6e:90:e9:fa:99:07:55:
2a:10:4b:20:b7:07:0f:4e:a1:3e:e2:03:81:34:b3:5e:3f:9d:
83:3c:18:81:18:0a:5a:40:35:fa:08:20:b8:2d:fa:40:1e:5f:
a8:5f:e2:f4:71:23:7d:47:a2:16:01:b7:e8:38:d9:d4:95:65:
1f:65:c3:21:a5:2c:8c:38:28:cb:ae:8e:59:6f:20:89:00:76:
70:96:a7:f6:64:9e:5a:e2:35:47:a6:99:81:c9:3b:dc:17:3d:
e0:0a:b0:dc:ec:08:ea:96:93:c7:eb:4f:7c:39:66:db:c0:c8:
c5:e2:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org