Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79fafa28-d62d-477f-979c-57c06d7c1204/4dd2a12a23529afbc275e59baf01f8fbd9795d5e.roa
File: 4dd2a12a23529afbc275e59baf01f8fbd9795d5e.roa (raw, json)
Hash identifier: J7JLbSOseJd+aOnotb952YsYri20cLkts/MJoHBanGQ=
Subject key identifier: 95:CC:37:8B:18:5C:C5:78:5A:05:B5:A4:23:2D:4E:32:05:63:4B:A5
Certificate issuer: /CN=db621b88a3f513a5b25e83dde333801d0583bd90
Certificate serial: 0C888C
Authority key identifier: 8F:72:21:AD:C5:B0:4A:1F:76:B2:16:F3:DA:11:BE:C9:1D:62:AA:D1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/db621b88a3f513a5b25e83dde333801d0583bd90.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/79fafa28-d62d-477f-979c-57c06d7c1204/4dd2a12a23529afbc275e59baf01f8fbd9795d5e.roa
Signing time: Wed 24 Mar 2021 14:31:16 +0000
ROA not before: Wed 24 Mar 2021 14:31:16 +0000
ROA not after: Tue 24 Mar 2026 14:31:16 +0000
asID: 52339
IP address blocks: 131.72.28.0/22 maxlen: 24
190.13.112.0/22 maxlen: 24
190.151.144.0/20 maxlen: 24
190.107.212.0/22 maxlen: 24
190.107.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821388 (0xc888c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db621b88a3f513a5b25e83dde333801d0583bd90
Validity
Not Before: Mar 24 14:31:16 2021 GMT
Not After : Mar 24 14:31:16 2026 GMT
Subject: CN=4dd2a12a23529afbc275e59baf01f8fbd9795d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:38:af:35:91:0b:82:40:ea:ae:f9:3a:59:
b3:b2:09:62:29:13:67:c9:56:e2:75:4b:3e:5b:23:
ae:b3:18:dc:95:dc:2d:f9:7c:a6:be:44:ab:d7:95:
35:f0:69:a1:7f:68:ce:7e:0e:b6:dd:aa:95:ad:f2:
7d:33:30:d0:3b:03:8f:5e:91:07:5e:e0:85:3e:e1:
b3:19:cb:13:63:be:3f:d9:bf:67:0a:9e:66:cb:02:
d4:00:ca:5e:70:3a:b6:0d:7c:b5:68:76:62:b0:9a:
b0:df:22:6f:0d:d7:53:e0:d7:44:f9:58:4f:87:57:
80:87:45:3e:95:02:f9:39:e6:0e:a0:cd:40:09:4f:
2f:34:f0:8b:23:ae:a7:a4:96:0a:a6:c4:46:52:a9:
fd:95:52:22:fb:79:ba:17:13:76:63:92:82:c2:4d:
b0:9a:da:f6:d2:28:7b:8e:64:14:2b:e0:b4:70:a7:
12:29:21:fd:d5:d4:23:1f:fd:37:38:af:da:59:6d:
50:ca:9f:07:5e:a0:bd:80:46:13:45:2c:fe:b5:cc:
79:c4:8b:1c:83:33:8a:87:8d:a0:1a:1a:90:41:f9:
c7:2e:62:96:d4:25:65:b9:30:bf:50:eb:44:e7:60:
80:de:aa:3c:fc:3d:51:f1:ed:b5:65:ab:48:f1:a7:
00:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:37:8B:18:5C:C5:78:5A:05:B5:A4:23:2D:4E:32:05:63:4B:A5
X509v3 Authority Key Identifier:
keyid:8F:72:21:AD:C5:B0:4A:1F:76:B2:16:F3:DA:11:BE:C9:1D:62:AA:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/db621b88a3f513a5b25e83dde333801d0583bd90.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79fafa28-d62d-477f-979c-57c06d7c1204/4dd2a12a23529afbc275e59baf01f8fbd9795d5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/79fafa28-d62d-477f-979c-57c06d7c1204/db621b88a3f513a5b25e83dde333801d0583bd90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.28.0/22
190.13.112.0/22
190.107.212.0-190.107.223.255
190.151.144.0/20
Signature Algorithm: sha256WithRSAEncryption
18:2b:51:cf:25:70:05:e9:5a:e9:53:dd:7e:e6:66:b4:47:f0:
98:b3:69:97:c0:e9:0f:be:64:12:44:1e:ec:16:e0:0d:27:7b:
fa:f3:bc:f5:be:3c:78:96:9f:41:3e:6e:6d:fa:9b:91:29:a6:
b7:a4:9e:22:66:59:40:d0:ef:6d:fd:ec:a6:ce:52:e3:9e:08:
e2:d5:ef:20:53:a4:40:46:4b:f1:83:6d:a5:ec:68:fa:07:47:
54:b8:fa:59:f5:c8:cd:a4:55:95:9f:5c:36:0d:5e:72:e9:0b:
95:aa:32:1d:76:6f:2e:7b:66:25:ea:3f:f9:5b:5f:e1:71:07:
16:25:31:c3:7a:a0:d8:ca:0a:09:8e:7d:fc:08:13:42:37:1a:
81:e1:98:41:63:bd:04:e0:6d:2d:b2:42:81:09:7d:96:aa:bf:
7d:e8:12:51:de:69:32:b0:46:75:6b:a2:9f:3c:71:33:ec:c0:
76:87:17:a1:5d:64:d5:58:e0:2f:70:70:ff:d4:b9:ea:60:b9:
fb:ce:62:18:5e:6d:bc:66:23:57:1b:5b:ab:75:9a:74:8f:51:
af:fa:d6:12:5a:d1:7f:72:4c:a9:91:9e:42:d1:d7:c9:e1:c3:
1d:b9:11:1e:8f:21:8c:77:98:db:88:2d:09:42:2e:6b:f6:f3:
b1:91:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org