Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/2ea90a3c2f99f17bf9c77143288cba601def34f2.roa
File: 2ea90a3c2f99f17bf9c77143288cba601def34f2.roa (raw, json)
Hash identifier: cUJ536FnjcNXy6B7R7kQqyDCVcwV/3w8S7V1m2vfF68=
Subject key identifier: D7:4F:EC:90:FD:41:FD:7B:95:94:E5:7F:47:1F:AA:D3:E1:DC:99:12
Certificate issuer: /CN=603e7d46b70d7d73178e8bdda798f182daa1be7f
Certificate serial: 17FCEB
Authority key identifier: 70:DF:AD:A4:EB:A7:E2:32:F9:61:87:2E:45:4C:D0:E6:0D:81:79:EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/603e7d46b70d7d73178e8bdda798f182daa1be7f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/2ea90a3c2f99f17bf9c77143288cba601def34f2.roa
Signing time: Wed 17 Jan 2024 18:56:18 +0000
ROA not before: Wed 17 Jan 2024 18:56:18 +0000
ROA not after: Sat 17 Jan 2026 18:56:18 +0000
asID: 52493
IP address blocks: 179.60.228.0/22 maxlen: 24
168.90.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572075 (0x17fceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603e7d46b70d7d73178e8bdda798f182daa1be7f
Validity
Not Before: Jan 17 18:56:18 2024 GMT
Not After : Jan 17 18:56:18 2026 GMT
Subject: CN=2ea90a3c2f99f17bf9c77143288cba601def34f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:a6:33:aa:26:77:c2:7e:64:44:e2:b9:05:
2e:30:de:e4:6f:5d:f0:0b:6c:fb:a1:6e:a3:5a:9e:
ac:e8:1b:3b:36:3c:ea:1c:60:eb:c2:a1:9f:94:56:
33:5b:48:3e:ef:cf:5e:e7:44:5a:9e:97:4e:98:f5:
49:e0:f6:2d:05:7b:28:17:a6:bb:85:a2:4f:8a:91:
1a:08:2c:00:dc:00:b8:b7:38:d7:6e:47:14:ba:df:
88:b0:9e:cc:cf:b5:d1:f3:0d:31:42:7c:47:8f:95:
5d:32:88:c5:03:35:84:80:95:da:22:6c:34:3e:5d:
b0:3f:59:7e:74:b3:ba:ca:83:ab:5d:36:2a:fb:0e:
3a:10:b7:39:72:fc:94:00:73:ce:98:08:9e:e3:7a:
3a:fd:38:d5:8c:b8:43:ff:3f:29:8c:1a:6c:95:e0:
d2:03:07:d5:11:fd:1d:55:59:62:5e:61:23:fa:7b:
f4:53:2e:5b:b2:31:7f:73:bd:df:e8:59:f3:ea:af:
35:de:be:9a:d4:9e:12:8c:92:57:ee:83:64:a1:b6:
5c:27:99:f4:7c:04:93:f1:02:bf:f2:9d:a2:b9:fa:
d5:20:d2:a6:e9:c5:8a:b5:ce:0c:77:bb:b0:b8:46:
bf:35:30:00:2d:48:27:d2:7e:f7:d5:49:6f:82:24:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4F:EC:90:FD:41:FD:7B:95:94:E5:7F:47:1F:AA:D3:E1:DC:99:12
X509v3 Authority Key Identifier:
keyid:70:DF:AD:A4:EB:A7:E2:32:F9:61:87:2E:45:4C:D0:E6:0D:81:79:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/603e7d46b70d7d73178e8bdda798f182daa1be7f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/2ea90a3c2f99f17bf9c77143288cba601def34f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/603e7d46b70d7d73178e8bdda798f182daa1be7f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.72.0/22
179.60.228.0/22
Signature Algorithm: sha256WithRSAEncryption
94:0e:35:24:f0:85:65:4e:b8:02:31:77:95:ff:92:a5:ea:31:
ee:a0:ac:7e:5f:c3:80:61:e5:e2:29:21:9a:af:5e:ff:c1:76:
ef:f2:a8:a2:1b:ad:59:3a:7d:df:26:29:94:40:a7:f0:50:62:
bc:7e:d1:79:83:d3:2c:b8:84:14:41:6f:92:45:86:38:b8:20:
eb:7d:08:45:04:bc:b2:31:09:5c:40:7f:fb:45:95:d6:ce:d4:
66:d5:29:0e:06:e8:11:f4:0a:9b:c8:e4:9a:01:35:7b:63:36:
0f:81:45:0b:4f:72:7e:9c:4b:bc:38:fc:ad:23:44:a0:1f:37:
20:87:22:6c:bc:a9:f0:00:7a:a6:82:98:54:ae:01:2a:2c:a1:
fa:90:2f:24:0e:b9:8e:7e:64:80:ac:80:38:62:25:52:72:dc:
aa:5d:20:33:b7:d4:f0:47:d5:8b:1d:b0:cc:60:1a:0e:ab:12:
e8:68:a1:be:f9:e2:36:3c:ff:9f:1f:b1:c5:9c:ec:fa:4e:c5:
5b:8b:9b:6a:3e:dc:36:80:54:42:e4:7a:02:3b:89:d1:ee:ac:
c3:fc:de:70:ee:33:be:64:81:05:9f:bd:70:4c:03:7e:50:3b:
4a:52:d4:63:68:fc:9d:60:07:52:fb:15:43:cf:60:3a:d4:33:
1e:14:13:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org