Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/728f3b07-23be-4b94-98c2-461213756524/35fcbac494a4043dde7e50373b27406d4f5af2ea.roa
File: 35fcbac494a4043dde7e50373b27406d4f5af2ea.roa (raw, json)
Hash identifier: U1T5gWlbPOxAgb/6tqoWpKp5ZKJAqrPvlePnlLusmSI=
Subject key identifier: 27:16:AB:E0:8B:6E:5A:8A:44:B1:B8:AE:91:E2:85:8C:FF:C3:97:C8
Certificate issuer: /CN=75e49783f7005bb71953b52a712defdb46de8f36
Certificate serial: 116055
Authority key identifier: 85:86:EF:FA:E8:7E:88:30:DE:DC:86:CB:C0:78:E1:80:D0:4A:4C:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75e49783f7005bb71953b52a712defdb46de8f36.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/728f3b07-23be-4b94-98c2-461213756524/35fcbac494a4043dde7e50373b27406d4f5af2ea.roa
Signing time: Tue 26 Sep 2023 16:00:13 +0000
ROA not before: Mon 25 Sep 2023 16:00:13 +0000
ROA not after: Fri 26 Sep 2025 16:00:13 +0000
asID: 52322
IP address blocks: 190.14.156.0/22 maxlen: 24
191.97.32.0/20 maxlen: 24
2803:f200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1138773 (0x116055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e49783f7005bb71953b52a712defdb46de8f36
Validity
Not Before: Sep 25 16:00:13 2023 GMT
Not After : Sep 26 16:00:13 2025 GMT
Subject: CN=35fcbac494a4043dde7e50373b27406d4f5af2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:9d:01:55:3f:64:24:e8:0a:3d:b4:58:65:
a7:7c:be:53:c0:d8:f6:3d:12:ec:9f:56:c0:d7:f6:
f7:8c:36:91:9c:78:75:54:9d:f6:3d:31:a0:f2:bc:
28:2f:23:f9:ad:44:9e:03:99:a5:c0:71:06:f8:b4:
61:41:9f:b6:9c:15:67:15:94:e3:d4:77:56:3e:1c:
45:54:0f:94:1d:05:42:8b:a5:9d:87:a9:3b:28:d2:
e9:ba:bd:81:1e:2a:18:e5:e8:c3:7d:1f:85:eb:f7:
64:72:f9:0e:e3:c0:9c:d5:f4:8e:d7:b8:64:02:78:
b1:b8:fc:5e:42:2b:47:9b:77:ee:9c:3a:07:ac:b8:
a5:c7:0c:cd:d4:3c:2a:b8:78:2b:2a:b6:94:47:f1:
c7:23:08:30:66:21:5d:d5:46:b6:55:19:9a:74:c5:
e7:53:df:97:f9:ed:21:d6:c0:b5:93:10:f7:08:9a:
39:f4:34:d9:92:b0:40:f7:c4:99:16:37:73:d4:f5:
d6:d1:42:39:f7:13:af:45:87:bd:ef:b3:f7:6d:41:
7a:9d:b5:b8:d5:71:44:48:da:09:f0:09:76:61:e6:
8c:9e:f1:1f:8c:a4:71:b5:ae:e8:67:86:6b:8a:64:
a3:25:cd:5d:b4:2f:30:71:ad:f4:22:83:a1:ad:85:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:16:AB:E0:8B:6E:5A:8A:44:B1:B8:AE:91:E2:85:8C:FF:C3:97:C8
X509v3 Authority Key Identifier:
keyid:85:86:EF:FA:E8:7E:88:30:DE:DC:86:CB:C0:78:E1:80:D0:4A:4C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75e49783f7005bb71953b52a712defdb46de8f36.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/728f3b07-23be-4b94-98c2-461213756524/35fcbac494a4043dde7e50373b27406d4f5af2ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/728f3b07-23be-4b94-98c2-461213756524/75e49783f7005bb71953b52a712defdb46de8f36.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.156.0/22
191.97.32.0/20
IPv6:
2803:f200::/32
Signature Algorithm: sha256WithRSAEncryption
3b:4c:35:3c:8d:ca:d9:4e:87:74:28:09:bb:0c:b0:bf:68:d0:
de:c9:51:1d:c0:14:f2:30:19:0d:17:a7:7f:bb:13:a8:a2:aa:
37:39:99:a6:c6:dc:85:b5:c1:e1:6b:ac:5a:39:3a:e4:75:78:
7d:9c:53:82:ce:9a:07:65:7e:c2:35:44:36:cf:c9:75:d7:65:
6a:67:12:f8:3a:1d:91:02:63:04:d6:b0:77:e6:57:6f:9b:23:
89:4c:52:68:b3:d1:80:85:dd:bc:67:93:29:da:38:bd:46:75:
ba:9a:3a:0e:cc:ad:c0:58:73:4e:f7:3d:9c:2b:c2:65:b9:e0:
8f:ad:7b:c6:2c:63:0c:b4:02:10:90:1e:4b:c0:91:a3:03:7b:
9d:40:ad:5e:6e:af:a1:d0:93:f1:e0:f0:70:fb:39:b9:4d:53:
d9:60:5f:14:76:c1:16:9d:e9:94:84:68:fd:a5:1f:e8:48:f8:
2a:4f:15:22:98:49:6d:8a:ad:8f:44:b6:fc:42:99:a6:13:2c:
ff:e6:cd:74:b2:82:81:aa:2e:bd:4e:49:ee:9a:69:db:63:e5:
56:9d:07:a6:1f:33:9c:cc:61:95:94:8c:24:f1:87:b4:6a:ef:
68:49:b4:dc:25:9a:a1:6f:23:b2:b6:ac:2c:8e:61:bd:59:6e:
73:67:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org