Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/fbbd52c64543634117fc0d6a142409a97a5f6424.roa
File: fbbd52c64543634117fc0d6a142409a97a5f6424.roa (raw, json)
Hash identifier: 9bXHVNVfPrYUJGv275jdqo7SiKm4xTW7JacHJGgJK1k=
Subject key identifier: 3E:FD:4C:76:D1:5A:72:3C:88:81:8D:AE:E7:6A:68:EA:F2:E2:43:FB
Certificate issuer: /CN=bef02a6151d23f223914a8f6eed9802b4dfd2a0b
Certificate serial: 0D63FE
Authority key identifier: 9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/fbbd52c64543634117fc0d6a142409a97a5f6424.roa
Signing time: Wed 24 Mar 2021 22:51:41 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 52253
IP address blocks: 190.108.198.0/24 maxlen: 24
190.108.199.0/24 maxlen: 24
190.108.201.0/24 maxlen: 24
190.108.202.0/23 maxlen: 24
190.108.202.0/24 maxlen: 24
190.108.203.0/24 maxlen: 24
190.108.204.0/24 maxlen: 24
190.108.205.0/24 maxlen: 24
190.108.206.0/24 maxlen: 24
190.108.207.0/24 maxlen: 24
190.108.208.0/24 maxlen: 24
190.108.209.0/24 maxlen: 24
190.108.210.0/24 maxlen: 24
190.108.211.0/24 maxlen: 24
190.108.212.0/24 maxlen: 24
190.108.213.0/24 maxlen: 24
190.108.214.0/24 maxlen: 24
190.108.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877566 (0xd63fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef02a6151d23f223914a8f6eed9802b4dfd2a0b
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=fbbd52c64543634117fc0d6a142409a97a5f6424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:e0:04:6e:80:7e:77:3a:92:13:a6:46:e8:
b5:c1:90:25:26:65:5b:f7:d3:20:12:cd:3b:c5:54:
e2:e2:ff:72:e9:e0:16:be:be:8c:a3:26:cd:d6:d8:
36:83:16:9b:b4:28:4b:bf:fd:f8:9f:2e:84:b0:c7:
ba:69:23:9d:78:02:f0:bd:0d:91:50:6a:1f:f2:1b:
33:19:cb:f1:77:16:a8:9b:35:8a:82:0a:82:63:31:
9a:31:8e:34:24:24:bc:32:17:33:9c:44:57:2e:d7:
99:bc:06:bd:87:3f:f9:1c:3e:12:5e:e6:cd:bc:ed:
f8:d8:1e:1b:f9:d0:22:14:06:7b:7d:d6:a8:bd:f4:
77:83:0c:86:1e:e8:aa:80:5c:ee:46:d9:ac:00:9f:
3e:7d:0f:8c:62:7b:a6:09:ac:cd:4e:6f:74:4f:a0:
5b:ab:7e:8f:bb:e8:3b:e1:f9:0e:86:8f:74:21:47:
2a:05:48:a0:f0:1c:ba:86:13:8c:9c:92:db:eb:0a:
6b:76:e3:38:55:da:dd:34:64:ef:f3:bd:6d:f0:f4:
47:4a:4a:10:06:98:ef:5a:db:10:f8:44:4f:c6:a5:
7e:7a:3b:fa:b8:5c:70:48:71:fd:c5:58:00:da:68:
22:ad:ea:9d:c9:9b:96:4a:cc:be:ed:11:45:ee:ac:
cd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:4C:76:D1:5A:72:3C:88:81:8D:AE:E7:6A:68:EA:F2:E2:43:FB
X509v3 Authority Key Identifier:
keyid:9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/fbbd52c64543634117fc0d6a142409a97a5f6424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.198.0/23
190.108.201.0-190.108.215.255
Signature Algorithm: sha256WithRSAEncryption
65:28:e8:fa:59:2d:fe:90:63:eb:32:bc:0b:9b:f5:26:15:d9:
c4:20:71:de:d5:4c:f4:2f:e8:a7:20:b5:20:52:a4:01:46:70:
05:6a:28:76:20:b2:7b:6b:4b:4a:13:70:d7:d6:e3:17:ad:e6:
56:0c:16:ef:88:1e:1b:e7:d0:d5:4c:3f:37:de:40:c1:b7:74:
43:6d:00:ee:9d:92:dc:33:83:83:59:6f:70:2b:28:19:76:08:
d3:96:55:07:8e:ce:be:3e:93:0f:36:50:82:6f:40:03:c5:8c:
6c:3b:35:e6:0d:e4:58:ab:b1:9f:48:af:53:bf:4c:d7:18:d5:
c3:64:e7:36:ad:22:17:4a:c0:0c:7f:01:35:7d:c8:16:2f:db:
ca:26:b0:0c:04:7c:3f:32:96:cc:b9:fb:61:bf:09:72:82:12:
15:2f:8a:b3:03:24:b6:db:a4:2d:fb:07:25:bb:93:a0:4f:0c:
a4:c1:b9:26:4f:2f:75:92:b4:19:7e:97:8e:2a:aa:0e:a5:a8:
3b:95:93:e2:f2:5a:fc:54:14:af:56:2a:98:9b:5b:19:81:33:
c1:51:a3:12:0b:e7:cf:20:eb:74:2a:3c:40:b6:40:a8:b1:bd:
52:26:4e:05:94:b9:5d:cf:27:b6:15:fb:cf:b5:65:db:e4:7c:
c3:8f:58:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org