Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/90814f33cc56da3d587d79d0b3a94939da862b9b.roa
File: 90814f33cc56da3d587d79d0b3a94939da862b9b.roa (raw, json)
Hash identifier: 81TPVePIQuVvn4qdgUJAZ3IT2tQGWNOvJfhy54guZTk=
Subject key identifier: 48:5C:92:EA:BD:B9:C8:31:4A:28:10:F3:BE:B7:23:69:24:D0:5C:F9
Certificate issuer: /CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Certificate serial: 124D68
Authority key identifier: 0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/90814f33cc56da3d587d79d0b3a94939da862b9b.roa
Signing time: Thu 30 Sep 2021 20:17:20 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 262589
IP address blocks: 190.211.163.0/24 maxlen: 24
190.211.160.0/24 maxlen: 24
190.211.162.0/24 maxlen: 24
190.211.167.0/24 maxlen: 24
190.211.164.0/24 maxlen: 24
190.211.161.0/24 maxlen: 24
190.211.168.0/24 maxlen: 24
190.211.172.0/24 maxlen: 24
190.211.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1199464 (0x124d68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=90814f33cc56da3d587d79d0b3a94939da862b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:b8:75:9d:d1:c0:fa:6b:8d:8c:b5:dc:6e:
be:27:d4:5d:fb:38:f8:5e:b4:a2:9b:4d:49:17:f8:
84:dc:10:76:77:98:e1:ed:6e:4a:d5:6b:dd:eb:59:
5d:c5:52:88:90:32:73:83:4f:61:93:83:78:4d:9a:
6f:25:a7:66:f5:22:c0:77:ba:59:9b:d2:42:d7:13:
1f:71:e0:75:11:6f:a1:60:0f:52:16:f2:7f:a1:79:
bf:0b:8e:65:ad:c7:af:38:6e:c4:4c:d4:42:0c:f2:
88:ed:96:ac:bf:07:c1:ee:3e:c0:94:b6:56:95:59:
2e:c9:bf:b2:85:a4:48:2e:cb:77:81:76:2a:6b:3e:
da:90:43:76:3d:43:38:ba:fe:00:d5:97:7a:df:2d:
63:14:0f:98:28:06:9e:6a:28:c9:aa:5c:ae:77:c7:
72:d4:74:05:4a:be:13:11:c8:a0:00:10:57:48:7b:
9a:71:ca:78:8b:d5:d3:87:50:66:85:4b:15:b0:e1:
04:2f:49:98:15:d0:dd:7c:28:7a:10:1c:98:79:9d:
ad:ee:3d:21:8c:08:bf:6e:d4:32:1c:b4:31:52:75:
c5:a1:62:c1:1c:ab:ed:ce:47:27:bb:62:f8:e4:9f:
0c:21:e7:38:96:4b:b6:d6:fb:d4:25:22:9e:43:5c:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5C:92:EA:BD:B9:C8:31:4A:28:10:F3:BE:B7:23:69:24:D0:5C:F9
X509v3 Authority Key Identifier:
keyid:0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/90814f33cc56da3d587d79d0b3a94939da862b9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/44abde35adbcf04fb85f8b032b43e458648b74b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.211.160.0-190.211.165.255
190.211.167.0-190.211.168.255
190.211.172.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5b:c1:a8:72:77:05:6a:25:b8:28:b4:c8:2b:24:51:2c:56:
74:e3:da:cb:80:91:fe:19:6b:29:b2:70:fd:65:ab:38:f5:0d:
b3:eb:ad:81:56:8d:91:fe:f7:54:41:cc:28:64:49:29:eb:a0:
5d:87:00:89:cb:2b:34:6d:02:19:eb:e9:dc:46:eb:4b:52:bd:
12:0b:f5:1e:ad:8b:23:4d:15:11:2a:37:ea:34:af:36:8c:07:
f9:6c:d2:26:c0:7d:df:43:bb:28:8e:47:2d:5c:d2:8c:9a:39:
b8:4f:98:34:66:6f:7c:4c:79:10:8e:46:8b:25:f6:bb:35:ff:
ff:07:bc:dd:48:77:de:c5:d7:bf:3d:d4:40:74:85:66:62:68:
ed:73:5a:5f:ec:c9:e6:7a:44:b0:f9:11:66:1a:f3:04:d0:29:
09:19:9c:1a:31:e0:a1:2e:35:f4:a8:af:53:4d:6b:e7:6d:1d:
c5:d4:2f:d8:0a:41:92:bd:5b:e0:bc:c2:f6:2c:2d:d1:74:4f:
5d:5d:1f:74:6e:e7:51:e0:6d:7f:78:f1:b6:04:50:0d:1f:d9:
7e:fe:42:58:f5:11:63:c6:e2:d5:30:f9:6c:d6:92:69:5d:d5:
d6:09:d8:1d:c7:3d:42:cc:59:a0:76:d4:b4:eb:74:06:d5:ce:
85:1e:cb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org