Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/f4337585e7ec8f672cc2d33468fc8087ea2bc665.roa
File: f4337585e7ec8f672cc2d33468fc8087ea2bc665.roa (raw, json)
Hash identifier: CN4zg8e5UlFLDeWR1/cUoZ9ZtUnlWVv0VCvtb7zf1Dc=
Subject key identifier: 36:B6:1B:E5:D1:EA:8D:A2:71:48:56:92:4D:AD:6F:A6:51:26:A0:C0
Certificate issuer: /CN=24dd0c2e45ab4767cf1938370eb67d9303fc8de7
Certificate serial: 1D520F
Authority key identifier: 05:5C:71:4F:E8:BB:2C:EA:C2:68:08:CF:5A:5C:91:A6:D9:E8:ED:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/f4337585e7ec8f672cc2d33468fc8087ea2bc665.roa
Signing time: Wed 01 Feb 2023 13:51:18 +0000
ROA not before: Tue 23 Mar 2021 14:38:17 +0000
ROA not after: Tue 24 Mar 2026 14:38:17 +0000
asID: 28053
IP address blocks: 190.52.224.0/20 maxlen: 24
190.52.240.0/20 maxlen: 24
200.89.88.0/21 maxlen: 24
2803:6190::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921551 (0x1d520f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24dd0c2e45ab4767cf1938370eb67d9303fc8de7
Validity
Not Before: Mar 23 14:38:17 2021 GMT
Not After : Mar 24 14:38:17 2026 GMT
Subject: CN=f4337585e7ec8f672cc2d33468fc8087ea2bc665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:31:c6:fd:08:00:13:05:46:2c:b3:fd:95:
d9:7f:46:0d:80:fd:b4:94:c5:80:64:84:74:0c:94:
7d:c4:9a:a1:29:ef:bc:46:5a:29:a9:ea:f2:1b:e2:
f7:8b:b6:91:0d:50:23:ad:46:44:84:07:b5:e5:ee:
cd:80:b8:61:24:cd:89:ba:3e:99:77:38:c2:c3:70:
11:f4:5e:c8:b6:5b:e5:cf:f2:c9:0a:8c:b5:e0:04:
b3:77:66:98:e3:89:4f:74:47:40:d8:15:98:42:c5:
86:cf:cd:fa:cd:66:ae:e6:e0:cd:78:31:3e:45:88:
68:b0:2d:b2:58:62:1c:b3:8d:c0:7c:ad:3f:28:1b:
e1:59:d4:3f:a1:ca:f1:93:54:52:9d:0a:58:1a:1f:
38:cc:12:f8:bd:24:6c:1d:b9:89:37:69:9c:23:c1:
f7:45:91:74:e4:ee:e1:d9:61:8b:94:5b:b3:8c:db:
7a:55:cf:6a:f4:0c:ab:94:12:ee:62:e3:d9:e4:c2:
b4:43:9d:0b:e8:c7:fe:a5:d2:b8:55:1d:0a:28:13:
f0:07:51:b4:75:16:6b:9b:7d:5c:9b:a6:d5:92:39:
3d:24:56:87:b0:2e:95:56:63:46:c7:44:6e:1f:33:
d4:ae:d1:d3:b0:b8:23:49:b8:e3:27:22:a2:e0:70:
b2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B6:1B:E5:D1:EA:8D:A2:71:48:56:92:4D:AD:6F:A6:51:26:A0:C0
X509v3 Authority Key Identifier:
keyid:05:5C:71:4F:E8:BB:2C:EA:C2:68:08:CF:5A:5C:91:A6:D9:E8:ED:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/f4337585e7ec8f672cc2d33468fc8087ea2bc665.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.224.0/19
200.89.88.0/21
IPv6:
2803:6190::/32
Signature Algorithm: sha256WithRSAEncryption
66:47:ad:13:78:0c:08:35:7e:f8:1d:9a:48:30:b3:cb:88:e9:
70:3b:85:a1:e8:8c:35:a3:d8:0e:ee:2a:1a:03:f1:0c:17:0d:
0a:27:93:ee:1f:f9:75:99:0e:95:c6:b4:7e:3b:eb:c8:83:3d:
a9:78:fb:ef:15:bf:01:06:c4:53:c4:9f:33:2f:11:52:a5:c0:
59:d8:a7:83:2f:fc:36:b1:b9:2c:b6:f1:d5:2d:01:22:7f:10:
a9:53:3f:45:c3:29:14:c7:02:85:7d:90:58:ff:53:86:81:98:
51:d1:8a:19:d1:2c:ef:c9:db:7f:c6:16:f8:51:1e:cb:15:0d:
15:5f:5a:75:d4:fb:2f:18:72:7b:59:c5:b2:44:26:18:c8:fa:
55:25:b7:ce:8e:46:f7:a7:f3:e7:85:ce:91:2c:16:63:64:84:
ca:64:93:a9:24:d7:d1:92:6c:80:cb:26:f8:e0:a9:a2:20:ee:
1d:2b:c1:97:7f:71:38:8e:44:fb:72:bd:3d:d4:c6:38:ea:d1:
df:66:a7:f0:64:52:39:a1:e8:39:ac:4f:a5:ea:de:c1:ee:85:
17:43:91:bd:8b:6a:b5:ac:fc:75:03:e4:88:1d:54:8a:d7:3e:
6a:2b:24:d9:91:09:4a:43:84:3e:b1:a0:3d:35:08:92:28:43:
ee:0c:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org