Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8fd6324972d2781fea24658725bbc866c07f637a.roa
File: 8fd6324972d2781fea24658725bbc866c07f637a.roa (raw, json)
Hash identifier: yKkUsmIbqihpnAdz09k7bh4aAsjGOy9R37TvbKPKV6o=
Subject key identifier: F9:A8:36:CC:46:52:0F:57:15:9C:C3:17:59:33:FA:09:17:47:4F:E4
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 27FEC2
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8fd6324972d2781fea24658725bbc866c07f637a.roa
Signing time: Mon 12 Feb 2024 15:10:15 +0000
ROA not before: Mon 12 Feb 2024 15:09:57 +0000
ROA not after: Mon 12 Feb 2029 15:09:57 +0000
asID: 262191
IP address blocks: 190.242.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2621122 (0x27fec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Feb 12 15:09:57 2024 GMT
Not After : Feb 12 15:09:57 2029 GMT
Subject: CN=8fd6324972d2781fea24658725bbc866c07f637a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:c3:39:66:f7:65:7d:37:13:f0:ad:73:20:
3f:e2:76:7f:f7:e9:4b:1f:79:5f:79:87:89:c4:05:
18:d4:ef:d7:3c:2d:de:e3:02:6c:01:26:5f:f4:6e:
97:3b:f5:39:d7:22:f9:9f:c5:31:fa:b5:06:b9:c5:
3f:e7:49:c4:77:96:25:e5:3b:e0:7c:75:17:42:4b:
b3:8e:88:cb:fe:1f:89:5b:41:cd:9d:f3:4f:29:ac:
fd:b2:f3:3c:f8:ea:74:08:07:4b:15:7d:0e:29:fe:
89:51:cb:7b:0d:7e:a5:b6:10:22:c8:df:e4:56:18:
79:e8:38:ac:7b:1a:44:f7:19:17:48:c9:4d:6b:7c:
e9:95:67:86:10:4b:a7:f0:86:bc:ae:56:34:a2:1c:
b7:7f:1e:b3:ff:98:a2:cd:00:a0:fc:41:3a:41:48:
c5:b1:a2:d6:db:7e:67:52:5e:72:79:b8:8d:a6:6d:
00:4d:c2:f6:00:9f:d9:57:d1:b6:bd:b5:08:a3:a4:
38:a9:c4:ce:0a:3d:50:33:d4:92:4b:33:16:19:3f:
d8:6b:80:6a:ad:ac:d9:65:f0:c5:ee:1d:d0:bf:67:
c4:4a:bc:92:14:a0:bf:33:3f:62:d7:2f:ce:e7:fb:
5b:b4:e4:9f:b6:d1:07:3c:70:d9:21:d0:0b:9c:aa:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:36:CC:46:52:0F:57:15:9C:C3:17:59:33:FA:09:17:47:4F:E4
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8fd6324972d2781fea24658725bbc866c07f637a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.0.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6c:81:ae:92:16:03:f1:ee:f3:17:8c:cc:46:7a:0a:95:a1:
e1:8a:7d:b4:28:31:3d:47:4b:ee:d9:90:d8:3f:5f:05:b0:e1:
95:36:91:d2:6d:aa:f6:3f:93:40:59:b2:3d:c9:7c:95:d5:df:
11:fc:f5:c5:41:4b:3e:91:e4:c8:d3:f5:b5:83:a8:9e:1c:c4:
ba:fb:14:8c:ed:13:92:d1:71:5f:26:0d:3f:5a:23:f8:8d:d3:
e4:ce:c1:f4:48:97:01:04:a9:de:b0:c6:19:83:dc:3b:59:09:
ba:04:b0:30:8b:b1:85:d4:bb:37:95:b1:20:f5:66:3c:1c:ba:
23:a8:7b:9f:51:ed:ec:b6:dd:23:6a:70:89:f5:17:3c:72:ee:
43:62:31:71:54:23:16:e4:18:94:cf:5b:01:62:a0:70:7d:55:
84:f9:5d:1a:e5:0d:b0:63:25:a4:78:45:5f:82:9d:75:bf:04:
f0:44:75:61:0e:8d:ad:41:fb:4b:93:e6:10:a3:62:79:3c:04:
1b:23:8e:10:fb:77:91:35:c1:e2:5c:63:ee:8f:76:9e:b8:01:
46:e7:d3:b7:b8:9c:e8:64:b5:4e:19:ed:46:1d:82:67:67:c9:
75:8f:41:06:bc:da:f6:62:40:79:c3:7f:8f:6b:62:ce:1a:bf:
8d:bf:7d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org