Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/bac39cb3e7aec882b2690d524fa32b5442d6e2ef.roa
File: bac39cb3e7aec882b2690d524fa32b5442d6e2ef.roa (raw, json)
Hash identifier: Mw5+D8ztZCVl6dk3LaV2+SJElHDNFC0Dg//RmJn1FwE=
Subject key identifier: AE:40:5D:AA:4E:53:B0:D4:6C:A8:60:3E:42:95:A6:1F:A5:08:03:23
Certificate issuer: /CN=e6a7db40416bd409764df01fa1a52259576b328e
Certificate serial: 20CAEC
Authority key identifier: 0E:81:41:66:36:1F:C6:D0:91:01:77:BD:04:5C:F6:F0:F9:3F:0F:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6a7db40416bd409764df01fa1a52259576b328e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/bac39cb3e7aec882b2690d524fa32b5442d6e2ef.roa
Signing time: Mon 05 Jun 2023 18:03:46 +0000
ROA not before: Sun 04 Jun 2023 18:03:46 +0000
ROA not after: Thu 05 Jun 2025 18:03:46 +0000
asID: 27740
IP address blocks: 190.108.64.0/21 maxlen: 24
190.11.240.0/20 maxlen: 24
2800:b30::/31 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149100 (0x20caec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a7db40416bd409764df01fa1a52259576b328e
Validity
Not Before: Jun 4 18:03:46 2023 GMT
Not After : Jun 5 18:03:46 2025 GMT
Subject: CN=bac39cb3e7aec882b2690d524fa32b5442d6e2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:f0:95:6e:95:39:76:de:f0:02:12:ef:7f:
fc:02:9c:e9:0c:2c:8b:ae:9a:e3:9d:3f:72:33:59:
6f:e5:81:96:4c:8d:12:a4:fc:ac:30:5c:44:6c:22:
5b:91:e2:cc:44:09:1a:a8:f2:c2:b5:c0:8d:73:e9:
a3:d3:2d:79:a8:01:39:ba:39:9b:0c:8a:d2:e4:75:
aa:7f:31:12:7f:d4:07:4f:3d:c0:5a:55:17:a8:68:
ac:af:37:f1:15:13:cd:16:a7:56:2b:67:69:fa:92:
71:b2:00:e7:c9:4b:fc:c1:a8:13:1f:f9:0e:de:ff:
8b:eb:e4:59:66:64:7e:c9:58:77:0a:23:99:b4:98:
fc:2b:f1:a8:2b:ab:13:c3:9b:a8:ac:f7:8b:f7:26:
1b:f0:51:8f:16:28:39:c0:c3:60:e4:36:51:db:a9:
20:75:9c:b6:e5:ab:93:c2:3d:74:88:b6:03:f2:c2:
cb:fe:fa:3b:a3:72:5f:28:d7:c5:9d:f1:1c:8c:7c:
56:43:8c:c6:60:a7:dd:d6:cd:bf:c4:b3:ce:32:fb:
35:5e:5e:c9:14:bf:52:f9:7d:49:b2:3c:4c:6a:3e:
a8:b8:66:b9:ff:0c:10:fc:25:ca:1a:97:76:94:d9:
c2:5e:5c:c0:36:c4:a9:45:b4:df:93:7e:50:54:9b:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:5D:AA:4E:53:B0:D4:6C:A8:60:3E:42:95:A6:1F:A5:08:03:23
X509v3 Authority Key Identifier:
keyid:0E:81:41:66:36:1F:C6:D0:91:01:77:BD:04:5C:F6:F0:F9:3F:0F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6a7db40416bd409764df01fa1a52259576b328e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/bac39cb3e7aec882b2690d524fa32b5442d6e2ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/e6a7db40416bd409764df01fa1a52259576b328e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.11.240.0/20
190.108.64.0/21
IPv6:
2800:b30::/31
Signature Algorithm: sha256WithRSAEncryption
67:dc:c5:74:c3:93:75:d3:bf:b2:6e:35:2d:05:2e:31:0c:7b:
77:99:95:9f:2c:fa:06:06:71:96:ae:de:af:31:57:06:89:c4:
00:59:fc:d4:e9:e9:f4:af:67:c5:a6:ce:51:9c:54:a1:2f:0e:
b2:4a:42:14:e5:3e:fc:7d:a4:58:43:62:53:92:47:1f:a4:45:
e0:ab:bf:7a:6f:e6:9b:c0:b8:1e:cb:2e:50:88:fb:84:d4:3d:
86:4a:1f:49:e4:ef:05:84:66:9c:67:61:83:e1:6a:10:10:6f:
16:e2:63:7a:4c:f0:43:e1:a5:1b:9b:b7:a6:b5:92:f8:ed:6d:
de:88:7c:93:b6:33:15:1c:65:ae:d5:43:41:a8:03:c6:0a:fb:
38:0b:50:75:d3:cf:2b:9f:b0:99:10:a5:a6:0a:b0:46:7c:d2:
d2:d9:aa:ae:43:63:1b:88:5f:c4:3a:dd:4d:4f:ea:06:f7:98:
f2:0e:f8:ed:1a:7b:02:f2:ee:0c:1c:1e:a3:55:06:44:99:e1:
14:2c:f0:12:d3:86:fa:fc:0a:22:c5:91:37:a2:99:26:81:44:
36:3f:02:e1:fd:d4:aa:b2:86:04:f0:7e:a6:a4:3c:8a:49:db:
f6:7f:8e:4f:31:8f:b6:38:75:de:be:9d:80:5c:f4:24:a0:89:
dc:8b:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org