Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a5db2be-b239-45a1-8605-50b6c3f6f4bb/29b975d6f9dd32d66973133f43c29d08e514a735.roa
File: 29b975d6f9dd32d66973133f43c29d08e514a735.roa (raw, json)
Hash identifier: DPlX8bwAasoSJVELVMTBT0TpKoHi4lARTlV72Z/ORQo=
Subject key identifier: 9E:14:01:72:13:C0:8C:9A:6C:0A:04:FA:41:42:E3:38:72:64:F2:A8
Certificate issuer: /CN=e68b9a1230af3f74ced2432d699114b482f94be4
Certificate serial: 221287
Authority key identifier: D8:53:B0:55:B7:AD:AF:CE:FC:C7:F2:FE:E4:2C:CA:AD:B8:48:39:C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e68b9a1230af3f74ced2432d699114b482f94be4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8a5db2be-b239-45a1-8605-50b6c3f6f4bb/29b975d6f9dd32d66973133f43c29d08e514a735.roa
Signing time: Thu 22 Feb 2024 18:01:12 +0000
ROA not before: Thu 22 Feb 2024 18:01:11 +0000
ROA not after: Sun 22 Feb 2026 18:01:11 +0000
asID: 27964
IP address blocks: 190.122.0.0/19 maxlen: 24
200.50.240.0/21 maxlen: 24
186.4.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2232967 (0x221287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68b9a1230af3f74ced2432d699114b482f94be4
Validity
Not Before: Feb 22 18:01:11 2024 GMT
Not After : Feb 22 18:01:11 2026 GMT
Subject: CN=29b975d6f9dd32d66973133f43c29d08e514a735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:61:38:91:e4:34:26:ae:cf:e7:18:8c:51:
af:ea:32:9f:b8:f6:7e:3f:5d:66:10:5d:88:2a:24:
04:7f:19:e7:a3:3a:6a:f5:b0:89:f0:5d:18:80:fd:
0d:8d:c1:0a:74:30:22:44:b0:75:a6:f4:ce:f4:04:
97:a7:02:cb:c1:49:e3:94:c5:45:c9:d1:35:19:56:
b3:43:6a:09:15:e0:93:ba:8d:aa:1a:b9:6b:5b:4a:
f4:54:84:b3:2e:28:83:0a:f2:f5:fa:0e:68:d3:0b:
65:59:0a:b2:bd:91:64:bc:5f:9a:9d:d4:68:53:24:
cd:c7:36:e3:8e:f9:1c:3c:77:c5:5a:4d:4f:e9:1c:
e9:5c:bf:67:6f:28:c6:30:a3:b1:27:da:f3:d6:41:
0c:a3:cc:94:42:fa:10:48:f8:a7:50:35:2e:cd:43:
9d:39:3f:23:b6:75:30:f2:cd:f8:12:76:65:1d:db:
7c:6a:36:e2:7d:c1:43:11:94:b1:44:69:28:9c:cb:
f8:62:99:87:19:ac:35:0c:d0:22:46:6e:95:3f:14:
fb:50:5d:61:4f:d8:7e:44:53:b5:5c:36:ca:67:8f:
1b:db:37:72:72:b7:ff:e9:8e:a0:a2:35:2a:46:a6:
29:c7:df:fd:25:f3:6b:d7:7a:2b:67:be:be:24:e3:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:14:01:72:13:C0:8C:9A:6C:0A:04:FA:41:42:E3:38:72:64:F2:A8
X509v3 Authority Key Identifier:
keyid:D8:53:B0:55:B7:AD:AF:CE:FC:C7:F2:FE:E4:2C:CA:AD:B8:48:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e68b9a1230af3f74ced2432d699114b482f94be4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a5db2be-b239-45a1-8605-50b6c3f6f4bb/29b975d6f9dd32d66973133f43c29d08e514a735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8a5db2be-b239-45a1-8605-50b6c3f6f4bb/e68b9a1230af3f74ced2432d699114b482f94be4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.4.64.0/18
190.122.0.0/19
200.50.240.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:b7:5a:8f:e0:5a:6f:3b:66:9f:6a:c3:89:82:05:24:47:da:
b5:6e:8c:f0:bd:0d:25:9a:8c:7a:6e:fe:f6:84:f5:ee:72:3d:
ee:92:1e:b2:64:f2:e9:d2:2c:22:3e:2b:e5:09:1a:9b:f0:e0:
8d:8c:25:53:c8:45:2f:69:71:02:85:b8:58:17:0e:02:37:09:
9c:c5:d7:e8:46:a1:fa:10:9b:51:e1:43:54:cf:d9:04:37:9a:
8a:db:80:77:75:09:a1:4f:dd:99:0e:54:c5:64:69:b7:34:45:
34:3d:9c:a5:4c:18:fa:af:30:c0:ad:ee:a9:9b:46:41:ce:18:
24:15:5b:a2:bc:4f:6e:b2:bf:fb:bb:cb:64:0d:2f:85:86:3c:
46:03:dc:10:72:b4:22:e3:25:85:72:10:ee:fb:e4:9e:4b:5c:
e5:b0:8d:8f:6b:11:90:72:ce:aa:23:14:1f:5e:bf:d3:10:6a:
08:55:03:1f:df:94:c7:32:a5:3b:c3:f1:69:b5:08:21:53:c3:
2a:eb:b0:99:4a:c9:25:57:80:ef:5c:d0:05:df:a8:d0:90:da:
83:c3:c9:14:6f:9a:38:23:53:97:b1:3a:22:d8:6b:2a:b0:5c:
4f:89:b9:a1:e9:a5:40:2d:27:20:06:d2:1e:7a:ba:a9:83:ef:
18:ae:6c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org