Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/faa4bae04a2705c9a4d0cf23bc18b8c35ea0981e.roa
File: faa4bae04a2705c9a4d0cf23bc18b8c35ea0981e.roa (raw, json)
Hash identifier: IEQDqN0x7L+/HQd+PdgUlPY2t8LAXYV236lMxyiEZbo=
Subject key identifier: 6C:B1:40:89:5A:1D:8C:70:BC:2D:9E:EC:E4:05:85:79:EB:C9:36:40
Certificate issuer: /CN=d9df42accb42ae0dc974df4ee3b46e48d9105526
Certificate serial: 1AED9A
Authority key identifier: B7:F5:EE:95:AE:93:AA:01:4C:E3:44:72:B9:C3:58:49:4E:71:CD:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9df42accb42ae0dc974df4ee3b46e48d9105526.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/faa4bae04a2705c9a4d0cf23bc18b8c35ea0981e.roa
Signing time: Thu 03 Aug 2023 03:08:00 +0000
ROA not before: Wed 02 Aug 2023 03:08:00 +0000
ROA not after: Sun 03 Aug 2025 03:08:00 +0000
asID: 262259
IP address blocks: 190.99.112.0/22 maxlen: 24
191.102.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764762 (0x1aed9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9df42accb42ae0dc974df4ee3b46e48d9105526
Validity
Not Before: Aug 2 03:08:00 2023 GMT
Not After : Aug 3 03:08:00 2025 GMT
Subject: CN=faa4bae04a2705c9a4d0cf23bc18b8c35ea0981e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:5e:ce:05:c1:39:2e:e2:bd:be:9c:cb:44:
73:81:0e:28:ef:e9:c8:9d:88:f5:fb:79:15:ed:59:
8d:07:55:03:b8:dd:da:c3:2a:65:9f:14:b6:67:9c:
f7:b6:0b:ec:d6:76:6f:52:f9:68:b0:47:d2:92:89:
e2:48:d9:c0:ab:aa:88:85:a3:21:de:d3:41:ff:27:
98:93:88:6f:0f:3d:19:2f:7f:ff:52:9a:cf:5e:95:
e6:dd:88:18:3f:69:84:a1:54:a3:46:ef:92:0e:07:
cc:1d:66:9b:56:92:e8:5b:58:f0:31:60:6e:d5:3d:
53:f3:f8:bb:8b:7e:3f:a6:d8:23:d0:0c:7d:e6:55:
2b:4a:06:0f:ff:22:f6:9b:5f:2d:ef:a7:db:ed:34:
7b:0f:18:d1:b0:c7:63:f8:15:5f:b6:75:96:bc:02:
08:5b:5c:c3:7f:b1:cb:c6:40:97:4a:e8:25:2f:ac:
29:24:92:5e:85:5f:5a:a7:40:08:ef:30:fe:63:1c:
f9:d1:c0:90:44:75:49:71:f6:f8:c0:06:be:e4:bd:
d8:36:6f:da:50:e5:6f:8b:4d:46:78:8e:b9:9f:7c:
d3:e5:a8:81:c7:e0:24:e4:27:61:d2:0b:46:dc:6e:
7c:3a:5a:42:cf:45:13:31:9f:8d:40:c9:f5:56:6e:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B1:40:89:5A:1D:8C:70:BC:2D:9E:EC:E4:05:85:79:EB:C9:36:40
X509v3 Authority Key Identifier:
keyid:B7:F5:EE:95:AE:93:AA:01:4C:E3:44:72:B9:C3:58:49:4E:71:CD:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9df42accb42ae0dc974df4ee3b46e48d9105526.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/faa4bae04a2705c9a4d0cf23bc18b8c35ea0981e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/d9df42accb42ae0dc974df4ee3b46e48d9105526.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.112.0/22
191.102.16.0/20
Signature Algorithm: sha256WithRSAEncryption
19:81:da:5d:10:5b:a8:c6:4f:9c:a0:3c:a5:e5:5d:23:db:0a:
a0:a2:00:b0:71:cb:ab:00:06:2c:ac:a7:0c:90:69:a8:56:d2:
0f:f1:38:f6:39:ac:47:3b:c3:f4:14:8d:07:87:ba:d5:18:8b:
6f:73:45:4d:f0:75:a2:4c:ab:e2:5a:e1:e0:30:5c:85:6d:9f:
dd:41:28:3d:e8:2a:99:fe:2b:10:95:44:0d:a1:37:36:57:d5:
2b:a9:bc:c5:d4:02:aa:ff:4e:93:0d:6a:71:65:ac:b4:ee:45:
17:81:38:f5:ad:63:8f:ee:81:87:84:f3:20:56:59:75:7d:89:
6c:e3:a3:38:03:b4:71:d5:47:ca:2e:42:07:5d:66:fb:41:a0:
9a:27:61:fe:5e:5c:16:99:6b:f5:d5:fa:c8:aa:64:43:c7:7e:
a6:11:41:f3:5f:f3:cc:f1:62:64:90:12:bd:a4:91:42:88:85:
6b:e0:61:65:33:57:8b:1b:ff:ac:f4:23:32:8b:48:d1:24:0e:
df:47:fd:1f:c4:4f:0a:09:04:68:af:75:70:25:22:d9:a7:ea:
0a:d7:0a:2e:fa:0e:9b:41:2e:58:46:f4:1a:1b:9e:43:b5:a1:
6e:e0:46:54:1a:db:fd:d3:55:a8:05:80:fa:93:9c:b1:c8:57:
04:6c:66:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org