Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/13f1d6365eefa65b7b953eb24d1fc4dcd68c2235.roa
File: 13f1d6365eefa65b7b953eb24d1fc4dcd68c2235.roa (raw, json)
Hash identifier: quF0D1+9tolWeyYZNKEzN2yL7INE/uEPDJz4y3wRBnU=
Subject key identifier: 54:25:E9:29:BE:AF:EB:1D:74:4D:43:7A:F5:C5:70:A3:EF:84:58:8A
Certificate issuer: /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial: 1E9BD3
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/13f1d6365eefa65b7b953eb24d1fc4dcd68c2235.roa
Signing time: Tue 07 Mar 2023 21:20:08 +0000
ROA not before: Sat 11 Jun 2022 03:00:00 +0000
ROA not after: Thu 13 Jun 2024 03:00:00 +0000
asID: 12127
IP address blocks: 190.57.0.0/22 maxlen: 24
190.57.4.0/23 maxlen: 24
190.57.6.0/24 maxlen: 24
190.57.8.0/21 maxlen: 24
190.57.21.0/24 maxlen: 24
190.57.23.0/24 maxlen: 24
190.57.24.0/24 maxlen: 24
190.57.80.0/20 maxlen: 24
190.57.96.0/21 maxlen: 24
190.57.104.0/22 maxlen: 24
190.57.113.0/24 maxlen: 24
190.57.114.0/24 maxlen: 24
190.57.120.0/22 maxlen: 24
2803:1000::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005971 (0x1e9bd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Validity
Not Before: Jun 11 03:00:00 2022 GMT
Not After : Jun 13 03:00:00 2024 GMT
Subject: CN=13f1d6365eefa65b7b953eb24d1fc4dcd68c2235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:55:f2:1e:f0:0f:02:83:e8:d2:e2:dc:46:
76:d8:42:8a:44:78:a3:aa:8e:74:73:09:71:c0:d1:
c8:4a:42:c7:52:e6:ac:3d:81:43:5d:c0:e8:34:74:
c4:0a:a5:aa:ae:17:de:9b:46:58:2f:8f:91:3b:85:
87:57:03:7d:20:e7:9a:e1:c9:95:59:d8:12:83:26:
9c:f0:16:ec:38:9b:e4:17:b6:7b:31:d4:6e:2d:e2:
3b:9b:f8:81:06:7a:4a:41:5d:e3:8d:f8:56:98:6f:
e0:f2:00:9e:fe:52:fc:b3:1d:b5:32:18:4b:14:18:
6d:60:c4:f7:b3:b4:e2:2f:34:79:d0:6c:15:ab:4d:
25:50:8f:f5:dc:38:d4:cc:8d:6a:7f:ea:8d:33:90:
d7:58:c0:2a:93:de:b5:61:b9:59:56:69:f2:af:8c:
25:d6:20:af:83:f2:31:18:18:12:7e:51:68:26:f9:
d4:a6:04:df:b9:bc:35:dc:63:e7:7e:39:13:6d:77:
24:0d:12:1a:2c:f9:75:c8:6f:0d:ed:f3:df:21:1f:
cd:fe:cc:49:99:8e:cc:18:72:54:3b:5d:b6:31:ce:
32:40:8d:2d:e2:da:b6:81:fe:21:a3:b5:b3:20:c3:
c4:b8:68:92:a7:28:86:30:9b:2a:69:b6:6a:5c:cd:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:25:E9:29:BE:AF:EB:1D:74:4D:43:7A:F5:C5:70:A3:EF:84:58:8A
X509v3 Authority Key Identifier:
keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/13f1d6365eefa65b7b953eb24d1fc4dcd68c2235.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.57.0.0-190.57.6.255
190.57.8.0/21
190.57.21.0/24
190.57.23.0-190.57.24.255
190.57.80.0-190.57.107.255
190.57.113.0-190.57.114.255
190.57.120.0/22
IPv6:
2803:1000::/32
Signature Algorithm: sha256WithRSAEncryption
6e:e9:ad:7b:33:9b:cc:7c:e6:3b:bf:ac:3d:93:02:1d:4e:35:
e1:f9:7b:88:d1:91:79:9b:94:90:59:d3:c5:b1:90:3f:1c:b6:
49:84:b9:94:98:39:01:85:66:4a:57:a5:ce:ea:30:d1:27:2c:
b5:16:0c:6c:80:e2:38:94:07:99:01:37:33:12:fa:30:e4:9b:
23:5f:33:85:a9:46:81:b6:b2:41:ea:49:4b:19:59:49:34:7b:
72:22:99:52:31:e2:0d:f8:0c:a8:72:d2:a5:aa:a5:6a:4a:02:
be:fe:7a:22:84:7d:1b:23:25:47:af:55:0a:01:3b:c4:4c:e3:
e9:6b:c3:a3:35:3c:f0:ef:9f:91:02:62:e7:82:18:e5:be:d1:
4b:e1:74:5d:af:20:de:dd:55:a0:7a:4a:15:83:4a:26:b1:f4:
2d:b6:23:7b:ff:1d:a8:2d:a1:43:89:b6:a9:b3:4d:20:0b:89:
ac:4b:c5:7c:a6:d5:67:6d:1c:38:4c:c8:3c:54:8d:02:7a:df:
da:c9:44:5d:07:a9:32:e8:bf:74:c9:87:7b:d2:57:87:64:7f:
7a:77:04:73:f2:e6:99:1e:f5:ca:ef:95:44:5b:3c:18:78:df:
26:65:dd:bb:39:75:9f:7d:f8:a2:8d:a5:61:53:74:44:58:1e:
c6:8e:ac:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org