Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/1ed4d3353cc7e3a387f484d72c3e717bd88c70e6.roa
File: 1ed4d3353cc7e3a387f484d72c3e717bd88c70e6.roa (raw, json)
Hash identifier: pGgCDqHA3cq1lVdrTizd6sy0+T/WWPu5O4DsWiq/FUg=
Subject key identifier: 88:E8:5A:EC:D1:44:0F:58:AF:AD:5A:49:69:49:CE:EB:7F:87:05:D7
Certificate issuer: /CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
Certificate serial: 17E5E1
Authority key identifier: 6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/1ed4d3353cc7e3a387f484d72c3e717bd88c70e6.roa
Signing time: Sun 12 Jun 2022 05:36:09 +0000
ROA not before: Fri 03 Sep 2021 03:00:00 +0000
ROA not after: Thu 02 Sep 2027 03:00:00 +0000
asID: 60022
IP address blocks: 190.105.192.0/24 maxlen: 24
190.121.208.0/23 maxlen: 23
190.121.213.0/24 maxlen: 24
190.121.214.0/23 maxlen: 23
190.121.216.0/23 maxlen: 23
190.121.218.0/23 maxlen: 23
190.121.220.0/23 maxlen: 23
190.121.222.0/24 maxlen: 24
190.121.223.0/24 maxlen: 24
2803:f500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1566177 (0x17e5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
Validity
Not Before: Sep 3 03:00:00 2021 GMT
Not After : Sep 2 03:00:00 2027 GMT
Subject: CN=1ed4d3353cc7e3a387f484d72c3e717bd88c70e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:16:f4:e3:af:66:48:a1:b7:6a:2f:6a:88:
3c:7e:a6:0c:4f:a2:40:f7:0a:48:9f:87:10:b4:5e:
05:5c:f4:30:f4:f1:b7:0b:9a:f8:3a:55:74:4d:2b:
8e:99:e2:26:ce:a3:d0:33:fa:8c:d9:49:70:41:36:
f0:ac:1e:b2:c7:23:c4:f2:99:48:80:18:2b:31:6e:
4e:b6:82:b5:69:22:14:7e:39:fa:98:26:d9:20:d5:
6b:e4:38:7d:3c:5b:e3:5d:98:a8:da:38:40:e5:b3:
26:fc:8c:7c:49:93:d8:7d:16:ef:5c:99:15:c0:44:
7b:a1:0d:37:2a:94:be:91:2e:3b:af:11:98:95:60:
eb:dd:c3:81:d4:db:73:e5:83:1b:97:3f:54:11:72:
8e:5d:22:16:8a:6c:17:0f:27:ee:2b:4c:b1:bb:94:
7f:d6:ac:df:92:02:b2:01:12:b3:8e:ef:ec:be:fe:
70:ff:1f:25:e1:f3:1b:86:3f:a3:54:9f:29:91:fc:
d9:8f:83:e0:19:7a:c5:02:71:77:16:c8:bd:36:7b:
47:65:83:70:ad:31:5e:f4:6a:af:42:e0:79:ff:4d:
d3:5b:81:37:7d:1e:74:5a:88:53:e4:82:ca:76:0e:
16:f5:ff:b2:15:03:ea:49:89:43:a7:51:36:a2:81:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E8:5A:EC:D1:44:0F:58:AF:AD:5A:49:69:49:CE:EB:7F:87:05:D7
X509v3 Authority Key Identifier:
keyid:6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/1ed4d3353cc7e3a387f484d72c3e717bd88c70e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/4ec9e37ddb578cbbdc4e2281b37679864d80672b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.105.192.0/24
190.121.208.0/23
190.121.213.0-190.121.223.255
IPv6:
2803:f500::/32
Signature Algorithm: sha256WithRSAEncryption
75:29:b9:ee:d3:2d:af:46:01:16:ea:65:9f:e2:63:de:9b:52:
fa:10:66:38:26:17:25:2f:ff:84:e8:aa:d3:f8:a3:66:c8:ea:
1c:57:7a:b5:77:bd:25:ef:1d:66:4f:83:f5:3f:3a:2c:95:0d:
a8:53:f6:93:a3:46:5d:9a:f2:69:44:0f:79:57:87:7a:84:e6:
6c:3f:20:4a:d0:8d:1f:30:25:c8:e1:ea:20:8d:a4:aa:ec:35:
f6:37:0d:36:9d:00:14:e9:39:ae:47:fb:07:77:90:16:74:75:
8d:e3:da:66:71:3a:4a:21:48:68:19:2e:9e:13:c0:96:59:5c:
4e:c6:7a:87:a5:32:48:18:28:d7:f5:4e:d4:93:53:b1:96:ef:
97:5a:ce:16:67:db:f0:b8:36:31:df:fa:f5:2e:6f:47:46:03:
0d:bf:bf:c2:6a:b4:05:f1:8d:05:16:92:18:8b:ca:c6:62:7a:
e7:bd:d5:b7:86:ab:3e:55:23:84:a7:00:e0:fc:ae:da:04:7b:
c2:bc:58:9c:21:f6:ef:fb:ce:74:bf:89:ef:e9:e0:e2:98:a8:
9f:76:4a:f3:4a:f1:8d:56:c0:2b:39:ca:9d:4f:67:40:6f:81:
54:83:50:18:94:f2:ea:62:f2:36:5a:1a:2a:34:8c:94:a8:5f:
80:82:67:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 16:02:54 2024 by rpki-client on console-fra.rpki-client.org