Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/d443ae444fd95f9d96ed50529789da1cbef4adeb.roa
File: d443ae444fd95f9d96ed50529789da1cbef4adeb.roa (raw, json)
Hash identifier: wMPjJEDOAGIAgs6YxaLAfhx8EDkiD0+8ND4sXdfLD4A=
Subject key identifier: D6:9E:F8:ED:8C:09:C7:D0:00:5E:CA:D4:16:17:CF:42:C0:B8:85:5A
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 2817E0
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/d443ae444fd95f9d96ed50529789da1cbef4adeb.roa
Signing time: Mon 12 Feb 2024 15:10:24 +0000
ROA not before: Mon 12 Feb 2024 15:09:57 +0000
ROA not after: Mon 12 Feb 2029 15:09:57 +0000
asID: 52286
IP address blocks: 190.242.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2627552 (0x2817e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Feb 12 15:09:57 2024 GMT
Not After : Feb 12 15:09:57 2029 GMT
Subject: CN=d443ae444fd95f9d96ed50529789da1cbef4adeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:93:21:62:e1:d4:aa:61:21:f8:d3:bf:ad:
5a:4d:67:dd:85:d8:10:98:f9:5c:7d:b5:84:a4:27:
95:6c:b9:2b:cf:cc:21:45:6e:ed:be:87:ae:28:3a:
dd:33:55:2f:a6:fc:02:5b:15:a5:17:db:e4:03:d8:
89:3a:69:31:1a:94:12:6e:2d:a1:59:97:ab:93:18:
7d:15:d7:ea:b3:52:3e:0b:7b:cc:8a:49:6a:16:31:
1a:70:ad:2f:23:52:33:39:69:d8:e7:a9:c8:54:8f:
8d:f1:a0:ec:ce:e3:22:e2:89:0a:47:ff:61:7c:31:
fc:ce:8f:6f:dd:7b:10:a7:2f:ad:7f:dc:1c:54:71:
bd:9a:df:46:d5:75:57:6c:7e:00:30:64:00:29:de:
cc:60:c4:95:13:22:32:5a:af:e8:8e:66:70:83:e7:
24:7c:21:9f:be:bc:10:ad:32:3c:97:63:6b:62:ac:
20:d6:f8:4b:4a:b1:52:10:69:3d:5b:b1:7d:71:d3:
13:c9:25:36:0e:6f:48:60:ff:48:29:13:73:a7:a9:
44:e3:b5:58:46:50:74:ee:5d:99:fa:69:7b:1d:74:
ea:2e:34:8c:cd:3d:cc:02:6c:cd:fb:96:16:47:7a:
95:0b:e0:a5:99:8d:13:35:c8:84:88:29:74:57:1c:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9E:F8:ED:8C:09:C7:D0:00:5E:CA:D4:16:17:CF:42:C0:B8:85:5A
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/d443ae444fd95f9d96ed50529789da1cbef4adeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.184.0/22
Signature Algorithm: sha256WithRSAEncryption
75:f9:9f:a6:11:f2:e4:b7:50:66:24:06:bf:5e:1b:76:12:ad:
f9:ef:93:b0:ba:bf:7f:bc:19:73:8d:2a:da:ce:ef:3f:2e:5a:
f3:92:c8:a1:0c:69:f4:0f:fe:a6:de:9c:bd:12:c6:7b:02:c8:
16:4e:de:6d:cd:2e:8d:24:f9:3b:f3:c8:5b:a1:81:9f:f2:63:
dd:b9:6f:81:49:2d:06:82:91:43:1c:96:f5:4f:4f:2c:93:77:
a7:ca:75:0a:7b:d6:17:57:90:47:06:ca:30:d8:eb:ed:04:93:
c2:e7:06:96:39:a6:7e:c9:d8:47:4e:d1:be:17:87:72:58:02:
d4:25:05:46:a1:e4:fc:5b:15:5f:17:9f:6d:51:29:c5:6a:09:
2a:b3:28:0a:7d:07:e5:6f:d3:8f:a0:40:f4:c9:5f:74:a6:82:
95:e0:56:19:94:1d:9e:1a:e8:e4:41:c4:2a:21:fd:b7:fd:83:
eb:cb:71:ed:17:43:c5:4a:e1:c5:d5:61:82:9b:84:86:8c:5e:
e7:fe:f2:1e:b0:f7:38:09:4a:d3:03:2a:eb:ed:1a:69:38:1c:
7a:75:1d:18:db:be:cf:36:88:9e:64:e7:e8:11:06:48:b5:fc:
c2:00:2e:45:b6:1f:38:69:6e:45:e6:64:51:b4:9f:3f:21:10:
89:bb:68:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org