Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/f3125de199598e76085498e5d55b04b3531046a0.roa
File: f3125de199598e76085498e5d55b04b3531046a0.roa (raw, json)
Hash identifier: LUZKVwkSyKwjJ+65sFLUzGIusy7saT4To/W1BmD9+S8=
Subject key identifier: 79:AE:06:1E:C5:18:75:D2:A9:06:47:42:2D:44:C6:3D:B1:D0:A0:61
Certificate issuer: /CN=9c368afe09296bcb4b3b2e5244ed71e85b0700e5
Certificate serial: 02ED61
Authority key identifier: 4D:71:31:8E:AA:E7:BF:B3:9D:B3:21:55:AD:B0:7B:16:2F:63:10:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c368afe09296bcb4b3b2e5244ed71e85b0700e5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/f3125de199598e76085498e5d55b04b3531046a0.roa
Signing time: Tue 05 Apr 2022 15:49:43 +0000
ROA not before: Tue 05 Apr 2022 03:00:00 +0000
ROA not after: Fri 05 Apr 2024 03:00:00 +0000
asID: 264628
IP address blocks: 190.120.248.0/24 maxlen: 24
190.120.249.0/24 maxlen: 24
190.120.250.0/24 maxlen: 24
190.120.251.0/24 maxlen: 24
190.120.252.0/24 maxlen: 24
190.120.253.0/24 maxlen: 24
190.120.254.0/24 maxlen: 24
190.120.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191841 (0x2ed61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c368afe09296bcb4b3b2e5244ed71e85b0700e5
Validity
Not Before: Apr 5 03:00:00 2022 GMT
Not After : Apr 5 03:00:00 2024 GMT
Subject: CN=f3125de199598e76085498e5d55b04b3531046a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9d:a4:a7:9e:cf:ed:15:e2:8f:a0:25:14:7d:
83:28:86:d2:47:e4:d7:bb:4b:9e:47:69:82:2c:a6:
9f:cb:4a:5e:a6:f1:54:8e:1d:ab:06:89:86:9b:74:
c5:79:79:8b:7c:72:51:8a:d8:33:03:69:66:95:7e:
bf:48:76:63:a3:18:29:9d:aa:9d:92:e8:05:d5:20:
67:fb:a7:1e:dc:4d:fe:7f:34:7a:1d:10:a3:79:8a:
0f:c0:0f:49:8a:7a:4e:2c:1c:e1:52:0d:9e:b3:df:
c0:61:0d:3f:0c:19:86:98:e1:12:84:ac:1c:f7:24:
75:f8:d0:44:a0:24:32:5d:bd:4c:ab:d4:2c:ba:f4:
ab:b7:a4:69:66:ba:a4:fd:b2:7a:83:a0:e9:10:1a:
68:d7:76:31:98:37:47:34:fa:57:46:e4:80:b2:10:
ff:07:db:a9:69:4d:f6:13:70:c0:97:4c:b8:ad:52:
ca:90:17:f9:ec:b9:32:ea:9c:d8:cb:f4:31:5d:cf:
74:ed:35:3f:61:ca:d3:df:ab:38:13:47:53:67:46:
71:8e:72:c8:52:3a:21:f2:7f:36:22:2f:4c:a9:d1:
21:0b:49:9b:dc:43:9a:a9:1f:33:cc:3a:c1:35:d5:
ce:4b:95:3a:a3:1e:63:5c:df:b6:31:50:91:82:89:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AE:06:1E:C5:18:75:D2:A9:06:47:42:2D:44:C6:3D:B1:D0:A0:61
X509v3 Authority Key Identifier:
keyid:4D:71:31:8E:AA:E7:BF:B3:9D:B3:21:55:AD:B0:7B:16:2F:63:10:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c368afe09296bcb4b3b2e5244ed71e85b0700e5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/f3125de199598e76085498e5d55b04b3531046a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/9c368afe09296bcb4b3b2e5244ed71e85b0700e5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.120.248.0/21
Signature Algorithm: sha256WithRSAEncryption
00:cb:c0:b9:bc:22:af:83:ea:1b:a7:65:97:73:79:9c:9d:9b:
ae:90:78:b9:73:18:57:89:d2:8f:b1:ea:4e:20:ef:95:f6:8b:
20:f5:4b:10:8d:33:74:1f:c0:00:0f:89:dd:80:ea:95:9b:44:
ff:9e:ce:25:b6:ca:b3:a2:27:fa:5c:dc:64:c0:bb:19:03:25:
d6:7b:d8:b1:42:54:02:68:d6:52:7d:42:60:d4:0a:a7:1b:94:
ed:dc:23:fc:0e:75:b8:e8:a1:15:81:6d:1e:b3:7c:92:22:d8:
58:ee:0e:5b:fa:19:8c:06:34:b6:19:e6:2e:5f:ec:59:0f:83:
93:61:a2:3d:0a:f9:66:58:53:9f:8c:cd:01:00:7b:6f:2f:dd:
e5:a6:a6:1e:30:51:98:e1:30:de:b4:52:da:20:a1:4c:a9:04:
17:98:c2:39:fd:82:d8:49:c1:01:0e:03:99:b0:ed:16:84:1e:
d2:27:0c:82:98:d0:e2:d6:1e:86:80:e7:d8:67:46:9d:a7:cf:
a9:4b:e0:eb:3b:ca:a0:1a:ac:4a:45:8f:76:a7:f8:0a:48:47:
63:21:63:ef:1b:de:d0:cf:2f:2a:34:87:82:c5:80:a7:24:25:
59:bb:0d:75:36:ee:1b:d9:28:3c:36:2c:f7:00:8f:52:c5:48:
4c:16:0a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org