Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/990eddfc6f545c00424768ade27755075a8ff8e6.roa
File: 990eddfc6f545c00424768ade27755075a8ff8e6.roa (raw, json)
Hash identifier: xOKMGMemusZ2m0ROCzQZDzoJY36PxzYd2w9aOvW5tMM=
Subject key identifier: 5F:A4:0A:0D:F9:90:1F:FC:C6:22:FF:A0:72:F9:9F:83:2F:7D:42:88
Certificate issuer: /CN=54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16
Certificate serial: 032E69
Authority key identifier: 33:5A:49:E7:92:32:3D:59:06:A8:41:7C:8D:12:54:B8:4A:BB:E4:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/990eddfc6f545c00424768ade27755075a8ff8e6.roa
Signing time: Wed 24 May 2023 16:45:06 +0000
ROA not before: Tue 23 May 2023 16:45:06 +0000
ROA not after: Sat 24 May 2025 16:45:06 +0000
asID: 28432
IP address blocks: 201.131.236.0/22 maxlen: 22
201.131.236.0/24 maxlen: 24
201.131.237.0/24 maxlen: 24
201.131.238.0/24 maxlen: 24
201.131.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208489 (0x32e69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16
Validity
Not Before: May 23 16:45:06 2023 GMT
Not After : May 24 16:45:06 2025 GMT
Subject: CN=990eddfc6f545c00424768ade27755075a8ff8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:51:f8:ed:dd:58:d8:9b:ba:d9:92:a2:68:
d2:e8:df:02:2a:48:c4:77:9b:ea:8f:d6:90:c9:58:
53:a9:9c:6b:0f:76:2a:ac:90:9f:e0:8b:ae:78:90:
49:c4:b6:41:e8:08:e4:3c:6c:f3:d7:80:5e:c4:3c:
2f:8f:05:ad:a9:5f:e5:f7:91:42:ff:c9:05:22:ed:
40:c0:e4:d6:54:a5:3a:50:5b:22:37:11:b8:e4:ae:
71:b3:d7:c2:0c:01:7e:21:3e:0b:ba:fa:fe:13:3c:
30:d2:12:f1:4a:eb:90:c0:a1:0e:8f:e9:6f:0e:58:
2f:20:ce:96:0f:0e:0d:c4:6a:cc:bf:3c:ac:8b:b6:
73:63:8b:62:24:2d:e0:df:ec:b0:6d:cf:e6:92:5b:
5a:42:09:99:7e:dd:70:b9:d4:84:4e:d4:64:25:46:
2b:69:05:ef:d7:f2:cb:5d:d8:9e:49:fe:f4:73:da:
32:f4:36:f0:65:dd:ca:26:07:6c:a5:8d:17:cf:50:
6d:81:a2:a3:0d:bb:57:1d:4f:78:9b:84:f9:05:14:
9e:b4:be:f0:0f:a1:59:b9:2e:09:15:54:7f:2c:9b:
19:88:fb:60:da:f4:23:f6:f7:db:75:64:f4:a2:08:
02:37:9b:ac:b5:f1:ae:22:5c:d8:c1:ce:b1:4a:c9:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A4:0A:0D:F9:90:1F:FC:C6:22:FF:A0:72:F9:9F:83:2F:7D:42:88
X509v3 Authority Key Identifier:
keyid:33:5A:49:E7:92:32:3D:59:06:A8:41:7C:8D:12:54:B8:4A:BB:E4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/990eddfc6f545c00424768ade27755075a8ff8e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.236.0/22
Signature Algorithm: sha256WithRSAEncryption
69:11:4b:bf:aa:b0:e9:82:fb:c1:c8:6f:80:f9:f1:5d:74:e1:
68:df:91:e4:e8:01:92:9c:41:cc:eb:bd:76:af:17:f1:b0:e9:
97:ee:ce:39:af:80:09:f9:e9:33:a8:2e:f6:c6:50:47:a7:ce:
86:12:98:f4:e9:5f:04:4c:7c:44:81:b2:8a:09:55:17:14:d8:
4e:58:e3:e2:63:df:31:c5:a1:7f:9e:69:37:cf:14:5d:ea:66:
99:59:63:21:58:04:53:0d:54:3f:7a:83:8b:b7:08:2b:bb:1c:
07:c3:3d:c9:00:63:8c:68:cc:1f:fc:b4:e0:5d:10:97:9d:45:
60:ec:ab:c4:43:a9:93:03:3f:bc:91:1b:79:b7:59:c3:61:17:
cc:a7:fc:8d:f9:95:49:e8:86:42:e0:1b:65:d3:1b:36:a4:7a:
e8:b0:2d:5d:2c:2a:56:4e:b2:ba:98:80:58:30:59:6b:35:d8:
02:9e:18:07:45:b2:d0:c1:4f:3b:7c:52:f0:f1:70:59:a9:68:
41:87:2b:d1:52:b0:b7:e1:2b:74:ac:ea:f0:73:66:69:fd:ee:
a7:04:db:a3:ce:fe:c0:a1:b3:10:7a:73:e6:a9:c3:b7:7a:5f:
cc:52:9e:88:4e:85:0a:5f:86:47:13:3f:2f:31:51:0e:cb:b9:
9a:ad:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org