Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/721daa5a767c9fbeb5c98c83c90bdbf11472d9e4.roa
File: 721daa5a767c9fbeb5c98c83c90bdbf11472d9e4.roa (raw, json)
Hash identifier: ZcJ1azMIociJZzA4ECxp5j4hO26BXb3f9vIjSBRSLAE=
Subject key identifier: A2:2F:9C:61:95:E5:09:75:88:0F:E3:BA:43:CA:7F:D7:19:33:04:1F
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 27F844
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/721daa5a767c9fbeb5c98c83c90bdbf11472d9e4.roa
Signing time: Mon 12 Feb 2024 15:10:11 +0000
ROA not before: Mon 12 Feb 2024 15:09:57 +0000
ROA not after: Mon 12 Feb 2029 15:09:57 +0000
asID: 28094
IP address blocks: 190.242.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2619460 (0x27f844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Feb 12 15:09:57 2024 GMT
Not After : Feb 12 15:09:57 2029 GMT
Subject: CN=721daa5a767c9fbeb5c98c83c90bdbf11472d9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:8c:74:04:40:6e:25:ae:fa:3c:7a:59:dc:
da:3b:7b:bd:06:77:69:b5:8f:63:5b:6d:94:64:36:
9c:13:01:9f:8d:b8:e7:a0:a4:29:10:f5:d5:bd:8a:
5b:18:eb:01:c0:ed:01:18:66:ea:04:64:04:3e:bf:
1a:92:4a:22:5b:88:4a:46:0f:89:86:0e:c0:93:ce:
d6:08:f8:e4:d5:9d:bd:09:30:b5:d0:a7:bc:27:e2:
11:b4:f7:49:37:5f:ab:0b:db:ae:62:19:75:8d:1b:
5b:c4:a0:90:d6:81:25:95:d7:b0:15:c9:06:b5:76:
f5:fb:5f:09:a4:a7:27:23:0f:a0:0a:c5:78:51:74:
80:05:dd:25:21:7a:1d:ea:02:aa:19:bc:5c:fc:f1:
96:db:70:14:c6:d8:2c:6f:53:2d:53:31:28:cf:07:
68:9b:77:1e:e2:3c:2f:6b:91:fd:7a:47:51:32:72:
e0:e4:f0:56:3c:a9:fc:b4:a1:84:26:27:7c:b5:51:
0b:f7:51:ed:27:0a:4d:11:ff:c9:90:23:50:03:af:
77:70:32:6e:ea:a0:17:62:86:74:7f:94:cd:a0:e2:
0c:31:e7:01:de:a8:04:23:d6:dd:fc:09:15:98:41:
4c:5b:60:4f:17:1a:2f:cd:97:42:38:fd:6d:46:1e:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2F:9C:61:95:E5:09:75:88:0F:E3:BA:43:CA:7F:D7:19:33:04:1F
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/721daa5a767c9fbeb5c98c83c90bdbf11472d9e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.32.0/22
Signature Algorithm: sha256WithRSAEncryption
70:a3:0e:52:cb:67:77:ce:c2:12:aa:29:d6:63:4b:e6:1d:4b:
99:3c:dc:ab:e8:36:30:f0:bd:c6:4f:9b:9c:2b:9f:12:77:7e:
07:6e:e3:f8:c4:b2:db:9e:9b:43:aa:77:96:15:f2:bf:3d:18:
d9:38:a2:5d:55:78:53:7a:d4:3a:f0:65:10:ea:06:5e:5f:2e:
68:3d:05:32:c4:5f:7e:1f:71:0c:47:59:af:1c:91:5f:5f:50:
f1:7c:ae:1a:7d:6b:c6:05:34:fe:3d:86:6d:dd:dc:2b:e0:a5:
d7:23:bd:97:97:8f:f4:23:38:f5:0e:de:4a:93:c2:98:4d:0e:
3e:d2:a9:3e:a5:bf:29:41:97:8b:69:59:cd:e0:4d:32:82:53:
fa:a5:49:75:50:73:c1:de:a1:9d:12:ac:1e:f1:47:3e:f0:9f:
d1:21:a8:73:04:0c:bc:44:74:62:c2:da:05:3a:cb:12:59:3a:
d3:7d:89:15:7c:7a:62:3b:9b:83:b0:ce:8b:11:68:92:1f:d2:
ca:03:d6:f2:fd:dc:fe:30:89:d1:b1:77:20:8f:3b:58:7d:42:
37:48:7a:d3:84:df:cf:e3:b3:88:85:34:27:74:62:a3:ce:4b:
3e:3a:db:10:f1:62:d4:b4:97:d4:eb:9c:81:80:96:3a:b9:8e:
78:50:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org