Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8334850ccb866b56ced6cc2637c326738631f8a4.roa
File: 8334850ccb866b56ced6cc2637c326738631f8a4.roa (raw, json)
Hash identifier: bBCu75uPS/MJuHjAt6kA4jeJzQOLmfMenPAd9aBJtW8=
Subject key identifier: 9C:8A:84:7B:A9:6C:81:11:1F:84:8A:A9:60:9A:BB:8C:E8:55:F7:2E
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 27CC31
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8334850ccb866b56ced6cc2637c326738631f8a4.roa
Signing time: Mon 12 Feb 2024 15:09:58 +0000
ROA not before: Mon 12 Feb 2024 15:09:57 +0000
ROA not after: Mon 12 Feb 2029 15:09:57 +0000
asID: 14080
IP address blocks: 190.242.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2608177 (0x27cc31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Feb 12 15:09:57 2024 GMT
Not After : Feb 12 15:09:57 2029 GMT
Subject: CN=8334850ccb866b56ced6cc2637c326738631f8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:26:e2:7a:d2:93:f9:5b:90:40:56:7a:cb:14:
26:c1:a0:de:91:55:4e:ce:25:9e:96:fd:c3:75:84:
e7:4d:23:b3:f4:58:ab:75:39:8d:47:96:89:8d:2f:
5c:e0:0b:e5:36:d1:24:9f:83:03:e2:99:fd:cc:56:
df:37:5f:7a:be:48:e2:52:44:72:1b:34:32:8b:e1:
16:ba:dc:64:cb:dc:18:6a:99:29:2d:8f:3d:d3:f6:
2d:95:09:d6:96:44:fc:35:6f:82:e9:75:6a:84:18:
bb:7f:9d:c3:0c:fa:de:ee:d6:64:b1:c4:9a:a9:e5:
d9:6c:86:46:49:ea:f9:08:d9:77:c5:de:42:31:4f:
d0:dc:1e:f2:7b:60:23:bd:ab:7d:6d:e7:83:19:5e:
90:c3:82:1e:66:76:e2:ed:29:db:36:aa:db:3b:e5:
ae:69:08:04:ba:8e:21:5a:7b:a1:f5:d8:ae:60:b7:
cc:eb:3b:ba:99:93:82:3f:01:e5:8d:1a:f8:61:c8:
09:0c:37:7f:24:1f:eb:8f:09:d2:74:4a:db:fd:e9:
64:36:15:82:2c:e3:73:6e:8a:3a:cd:a1:fd:e6:5d:
0b:3c:57:0b:ae:49:67:88:e1:36:88:e0:0a:5b:22:
03:5d:94:08:0e:ad:d4:5c:f7:85:59:b0:81:3e:a9:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8A:84:7B:A9:6C:81:11:1F:84:8A:A9:60:9A:BB:8C:E8:55:F7:2E
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8334850ccb866b56ced6cc2637c326738631f8a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.72.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:c5:c3:5c:00:02:9c:1a:15:94:9e:92:d2:01:82:54:42:ea:
eb:ad:f5:0a:65:42:35:c2:1d:5e:0d:19:d2:b0:33:a7:de:10:
30:8f:f0:e8:42:01:8e:b3:eb:65:2f:02:f5:8e:79:ae:2c:2a:
6b:50:3f:54:14:0a:91:97:40:81:e9:a9:c7:70:13:e1:96:71:
95:36:d5:4f:28:de:8e:08:c5:77:b1:80:42:dd:51:f9:59:82:
80:6a:53:55:ae:b6:17:8f:cc:bb:9e:48:b0:54:35:ce:72:d4:
53:de:80:b3:38:ba:59:62:b0:cc:92:df:d7:00:f3:86:61:ec:
2f:5a:0a:18:9f:71:47:63:fe:02:b8:b6:da:a4:60:ab:74:92:
b8:4f:7e:06:25:2c:6f:24:a8:72:df:46:6d:92:0b:03:f1:c1:
96:41:d7:86:b9:a9:d5:36:1d:83:dd:d5:df:7b:6c:0e:18:15:
d2:3f:ab:c9:d7:9b:ea:6d:3a:b6:36:9a:d7:5f:d4:75:3b:12:
e3:6b:51:0a:1d:60:a1:c4:7c:d6:ec:24:eb:75:5b:95:60:e4:
b9:fe:f1:5a:0c:d5:6c:8c:35:15:b5:3f:49:f1:21:2e:e8:33:
2d:64:65:70:df:dc:1a:33:bf:87:64:67:27:6c:23:10:eb:70:
8e:fe:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org