Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/43c4f60d294538de75e7f6f708637a398ce0708a.roa
File: 43c4f60d294538de75e7f6f708637a398ce0708a.roa (raw, json)
Hash identifier: v8VcY//535JK4MnAndqlOcv50qTW2GdHjXKq4N71ELI=
Subject key identifier: 92:CB:0C:A1:9E:42:52:87:A4:4C:71:5E:02:5E:51:CA:01:15:48:CB
Certificate issuer: /CN=603e7d46b70d7d73178e8bdda798f182daa1be7f
Certificate serial: 1690C1
Authority key identifier: 70:DF:AD:A4:EB:A7:E2:32:F9:61:87:2E:45:4C:D0:E6:0D:81:79:EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/603e7d46b70d7d73178e8bdda798f182daa1be7f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/43c4f60d294538de75e7f6f708637a398ce0708a.roa
Signing time: Mon 27 Nov 2023 15:30:09 +0000
ROA not before: Mon 27 Nov 2023 15:30:09 +0000
ROA not after: Mon 27 Nov 2028 15:30:09 +0000
asID: 52493
IP address blocks: 179.60.228.0/22 maxlen: 24
168.90.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1478849 (0x1690c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603e7d46b70d7d73178e8bdda798f182daa1be7f
Validity
Not Before: Nov 27 15:30:09 2023 GMT
Not After : Nov 27 15:30:09 2028 GMT
Subject: CN=43c4f60d294538de75e7f6f708637a398ce0708a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:95:c0:06:00:f8:0e:dd:44:6b:3a:c4:63:
af:dd:01:96:27:c1:73:3a:c7:a8:8c:36:05:e4:a3:
cb:e8:30:d4:5a:00:45:0b:1f:fd:49:95:2f:53:ea:
f4:41:ac:3c:48:92:07:31:bd:24:58:a5:0a:1d:bb:
63:6d:8c:c2:0e:36:93:d7:16:bd:bd:bd:de:61:4c:
96:42:3e:02:62:50:03:a3:76:ff:f3:af:1a:09:2b:
c3:73:0a:dc:9d:35:6e:4f:4a:64:3f:f3:ab:61:16:
c3:d1:9e:3e:eb:26:7e:9c:02:7d:30:cd:4b:89:24:
7f:5d:c7:24:db:a5:02:4c:4d:7d:16:4b:b1:79:d6:
40:50:ed:05:a2:4b:9a:8e:00:12:db:90:f6:20:88:
ff:71:1f:0f:c8:ce:fa:c8:ca:89:30:4f:ff:fe:d5:
c5:ca:a9:9d:19:e9:48:a8:00:21:10:57:36:48:17:
8c:6c:ed:a2:28:24:97:be:65:17:a7:d5:ad:45:f9:
24:62:75:6e:e9:2e:ee:88:74:fd:6d:6e:83:c2:25:
cf:e1:36:25:6e:47:4c:4b:19:04:dc:0b:7d:c5:bd:
b3:64:cb:7e:0a:d8:74:30:a2:cd:77:03:a5:03:8c:
5b:8a:b2:37:eb:e6:5d:77:ca:7f:a7:d6:04:af:0b:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:0C:A1:9E:42:52:87:A4:4C:71:5E:02:5E:51:CA:01:15:48:CB
X509v3 Authority Key Identifier:
keyid:70:DF:AD:A4:EB:A7:E2:32:F9:61:87:2E:45:4C:D0:E6:0D:81:79:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/603e7d46b70d7d73178e8bdda798f182daa1be7f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/43c4f60d294538de75e7f6f708637a398ce0708a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/603e7d46b70d7d73178e8bdda798f182daa1be7f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.72.0/22
179.60.228.0/22
Signature Algorithm: sha256WithRSAEncryption
19:89:4d:00:c5:60:af:65:f0:d3:82:f7:20:83:6e:27:c3:06:
0f:e7:a3:db:94:08:c8:ec:82:a0:c7:37:ba:34:81:bc:47:38:
78:bb:60:91:85:ff:1b:e6:71:96:57:95:e9:26:fa:8a:dd:c0:
72:d9:bd:0b:19:1b:8e:d9:ed:e3:02:4d:26:7b:07:82:f1:9b:
5e:95:e4:b2:5a:12:4d:35:ab:90:35:2c:4d:33:62:24:bb:d5:
65:72:85:04:cf:ca:d0:83:ae:a3:34:93:15:25:1c:b1:55:0e:
1e:35:0e:4f:f0:44:d9:17:f1:30:a0:21:d4:57:a7:bc:ad:43:
c3:43:87:d2:18:62:34:25:b4:f3:08:ab:0d:60:4c:e8:b0:01:
d4:bc:7c:d4:4a:0b:b4:75:96:b1:15:d6:24:18:8d:be:2b:56:
1a:fb:ac:fa:d9:e8:e3:8d:5c:61:8c:1d:1a:79:a0:eb:a2:42:
a3:66:35:0b:37:47:6f:b3:d2:67:ef:26:91:c2:10:1f:c8:49:
95:62:34:ab:24:4f:16:ca:ab:4d:6e:2c:2a:22:9b:3b:da:87:
18:8d:b4:87:d7:3c:1a:d6:fa:6d:73:05:52:d1:2f:96:70:2e:
a1:1d:9a:6e:e2:c9:c2:08:48:85:0a:6a:b8:ea:aa:e0:a5:47:
01:a8:4e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org