Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/792ead66d8430eb4c3de6de4bbd7351cf253b2bd.roa
File: 792ead66d8430eb4c3de6de4bbd7351cf253b2bd.roa (raw, json)
Hash identifier: l71bceXF+h1/ewSo0LBA4x3yP8bArHSsIYerEcG/7gU=
Subject key identifier: EC:36:81:9A:BD:EA:BA:96:7D:91:A3:31:40:4C:25:FC:E3:A6:46:9C
Certificate issuer: /CN=f49a28afd9e7d55240140db2ac13bc606d7fbac5
Certificate serial: 24CCB3
Authority key identifier: 72:2B:23:1D:D6:88:5D:32:49:A5:BE:74:94:A1:62:4A:A2:52:AF:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f49a28afd9e7d55240140db2ac13bc606d7fbac5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/792ead66d8430eb4c3de6de4bbd7351cf253b2bd.roa
Signing time: Mon 02 Oct 2023 15:18:31 +0000
ROA not before: Sun 01 Oct 2023 15:18:31 +0000
ROA not after: Thu 02 Oct 2025 16:18:31 +0000
asID: 27997
IP address blocks: 186.5.192.0/19 maxlen: 24
200.29.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2411699 (0x24ccb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49a28afd9e7d55240140db2ac13bc606d7fbac5
Validity
Not Before: Oct 1 15:18:31 2023 GMT
Not After : Oct 2 16:18:31 2025 GMT
Subject: CN=792ead66d8430eb4c3de6de4bbd7351cf253b2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:b4:87:6b:94:37:85:3c:95:60:8a:f9:d2:
a6:a7:a8:12:b7:e5:b3:8e:06:f2:cb:84:94:57:0e:
c7:74:d0:88:54:b4:76:38:73:98:15:9e:69:0c:75:
a9:6f:c0:b6:9c:41:0c:e4:20:71:a7:11:f0:8d:ba:
91:f8:1e:eb:52:39:e1:c5:15:57:10:64:f1:72:6c:
35:77:2b:0b:b7:2a:0f:49:b7:f2:88:c6:0e:52:37:
11:1e:e3:e2:1b:3c:a6:34:d0:55:0e:0e:f0:2a:62:
db:1e:a6:30:b5:0b:72:74:b3:7a:52:ba:70:c1:22:
0f:f6:f1:62:9d:08:35:31:d6:98:e5:9f:28:9b:27:
92:d9:7a:ba:34:04:77:fa:63:2a:a6:18:4f:b8:52:
b0:0a:a9:ab:bb:75:7a:ce:37:21:df:91:5f:aa:9c:
4f:2d:4a:10:77:4b:06:28:9a:12:c3:6e:1a:db:cf:
c7:48:4c:11:db:95:da:28:e9:a6:a0:82:58:62:f1:
ca:4e:6f:cd:1a:5d:98:ef:9e:aa:a2:02:b5:b0:de:
ba:4a:dd:a5:b0:c9:35:b7:5f:a6:f6:8b:6c:52:f6:
81:3d:28:2f:5e:80:db:37:84:4a:30:cf:18:07:6e:
51:0d:13:b6:d1:60:7c:0b:6b:68:27:1d:b7:b4:7f:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:81:9A:BD:EA:BA:96:7D:91:A3:31:40:4C:25:FC:E3:A6:46:9C
X509v3 Authority Key Identifier:
keyid:72:2B:23:1D:D6:88:5D:32:49:A5:BE:74:94:A1:62:4A:A2:52:AF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f49a28afd9e7d55240140db2ac13bc606d7fbac5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/792ead66d8430eb4c3de6de4bbd7351cf253b2bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/f49a28afd9e7d55240140db2ac13bc606d7fbac5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.5.192.0/19
200.29.248.0/21
Signature Algorithm: sha256WithRSAEncryption
60:04:e8:dc:f5:31:d9:b5:dc:ad:0a:10:15:aa:46:57:f2:a3:
dd:bc:d6:7e:ed:69:46:12:82:64:fa:a1:d8:50:59:eb:ee:0b:
ea:ee:bd:f6:df:a4:c2:73:67:42:7b:1b:e1:19:6b:53:ef:ce:
47:f0:65:c9:d8:8b:56:91:3d:5a:9f:4b:8a:07:2a:71:76:0c:
b5:81:49:80:c7:b7:17:b6:1b:d3:12:f2:d4:24:78:51:23:c7:
ff:6d:f0:45:b9:91:bb:e2:8d:26:d5:e8:75:3b:98:9d:5d:fe:
69:b6:26:47:c3:4c:4d:24:77:84:25:7b:44:dd:69:9a:26:32:
39:09:42:dd:11:e7:ca:e4:07:95:42:6f:ae:3d:b8:40:2f:7c:
d1:4a:27:1f:f7:df:39:76:f0:86:f8:47:28:95:84:41:c8:7d:
7d:d9:19:f2:df:44:98:9d:20:73:c6:34:d6:2f:32:a2:c5:e5:
c9:d0:1f:8f:48:3d:dc:43:8b:df:59:f2:25:a9:bb:ba:db:20:
de:45:fb:e7:f6:2e:0d:af:e6:a7:39:2a:17:d5:b8:68:1d:af:
cb:6f:da:b3:ce:34:83:74:b7:74:ab:e2:bd:7a:62:3f:ec:29:
db:cf:b2:23:91:80:7c:10:88:56:36:97:89:1e:d8:1a:85:7e:
fd:dc:90:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org