Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/3841e16403095cb7f900d294dbc95d0ffa89ec5f.roa
File: 3841e16403095cb7f900d294dbc95d0ffa89ec5f.roa (raw, json)
Hash identifier: 9FgEJo2KzgrJsGHoKM2HYYLXYnudZhyJHzzriD569M8=
Subject key identifier: 73:3D:74:F9:F9:4E:26:E4:4A:78:D6:C7:D1:3E:55:A9:F7:0F:A2:4E
Certificate issuer: /CN=453ebe59acb9a5bd47a22d24fb3018768bbf22c9
Certificate serial: 0CE8D3
Authority key identifier: 30:D0:48:B6:AF:81:CE:29:A5:D8:2E:90:DD:69:ED:9B:82:99:33:86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/3841e16403095cb7f900d294dbc95d0ffa89ec5f.roa
Signing time: Wed 24 Mar 2021 14:37:33 +0000
ROA not before: Wed 24 Mar 2021 14:37:33 +0000
ROA not after: Tue 24 Mar 2026 14:37:33 +0000
asID: 263713
IP address blocks: 190.0.224.0/21 maxlen: 24
2803:7a80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846035 (0xce8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453ebe59acb9a5bd47a22d24fb3018768bbf22c9
Validity
Not Before: Mar 24 14:37:33 2021 GMT
Not After : Mar 24 14:37:33 2026 GMT
Subject: CN=3841e16403095cb7f900d294dbc95d0ffa89ec5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:dc:75:df:56:5f:40:4c:5f:f0:8b:22:ce:
f9:9a:94:02:71:b9:aa:53:31:5f:29:d7:ea:0d:37:
6c:cc:04:0b:ab:0e:e1:20:6f:3b:51:cc:5c:7b:99:
2d:38:3c:79:14:aa:70:89:80:39:a6:6d:d9:72:1c:
e6:e9:5d:63:c7:96:ce:9a:be:1f:45:08:79:d2:ee:
80:3f:11:bc:9f:7f:7c:eb:e4:b2:65:a2:6c:07:82:
73:e6:9f:86:81:29:3c:47:47:f4:95:d9:6c:b2:56:
6a:a0:ec:ec:b0:70:d7:bc:b5:43:d9:47:dc:f9:13:
3f:b8:73:5c:d7:c2:95:c2:b0:8f:06:79:0e:39:53:
9e:a4:dc:78:eb:af:15:98:dc:67:8d:e0:6a:55:b1:
c7:61:48:4d:ee:77:46:2c:7f:82:b2:64:4a:53:8c:
59:dd:7d:05:41:77:51:b5:1a:7f:e7:4d:3a:2f:4b:
c4:96:ea:96:55:d7:27:7d:58:30:8e:eb:c3:d0:3a:
ac:9d:66:8b:d5:95:76:44:0b:0a:33:91:05:ac:cb:
0d:23:92:41:dd:d0:04:b1:7c:15:b8:70:99:ed:82:
68:93:f0:f9:a5:bf:49:6d:31:38:12:22:ee:3b:91:
eb:00:a2:b1:0f:47:f4:68:e7:b7:54:5e:34:ea:b2:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3D:74:F9:F9:4E:26:E4:4A:78:D6:C7:D1:3E:55:A9:F7:0F:A2:4E
X509v3 Authority Key Identifier:
keyid:30:D0:48:B6:AF:81:CE:29:A5:D8:2E:90:DD:69:ED:9B:82:99:33:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/3841e16403095cb7f900d294dbc95d0ffa89ec5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.0.224.0/21
IPv6:
2803:7a80::/32
Signature Algorithm: sha256WithRSAEncryption
23:f5:1b:a3:d6:46:4a:13:22:c4:be:df:0d:02:fd:ea:2a:40:
6e:66:89:b0:c0:1e:85:b8:52:de:ae:b1:1b:78:d5:55:ac:df:
f0:a7:81:27:70:96:d5:09:5f:5e:b1:cb:ac:d7:04:70:a3:10:
c2:9e:c7:6c:0c:dc:49:7b:6f:43:fb:98:7f:5e:04:8c:a6:d1:
08:26:25:92:ba:e8:7b:18:05:b3:01:57:95:61:ed:75:30:1d:
7d:7d:1d:6a:c1:20:f1:56:f6:89:19:f2:ba:ac:17:3a:f0:2d:
2d:02:d4:7b:8e:9c:cb:ad:e9:0c:b0:a4:68:b5:93:ba:0b:3a:
09:a1:69:e7:1b:a2:75:57:00:29:6e:df:13:b5:2f:6c:a9:24:
13:86:7a:0e:95:f9:4e:b6:2e:44:32:19:17:ea:8e:02:ab:3c:
a7:9c:f8:0e:df:11:c5:a2:e0:ff:cf:44:7b:44:fb:d7:1e:ec:
f9:04:2c:9c:31:22:88:5d:2f:6e:76:41:b7:e4:db:88:cd:a2:
38:a3:74:4e:a9:0e:6d:b1:78:00:75:20:73:f2:63:5b:94:3c:
82:d8:1e:4f:81:95:23:de:ff:61:6e:88:b6:66:80:b0:55:ac:
d5:7d:11:fa:90:c2:4f:46:76:7c:02:34:16:2d:5b:d7:38:e2:
86:c8:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org