Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/e3fe65c47412986d181fbd64300cc1fecec681b6.roa
File: e3fe65c47412986d181fbd64300cc1fecec681b6.roa (raw, json)
Hash identifier: 1Mz35zwyHTZuy5MlHWRDlCb2QBhn8SndUbiP0cHNAiQ=
Subject key identifier: 13:5C:F4:7E:2F:30:91:D3:45:E6:5B:67:86:C2:69:EB:3A:A4:47:8E
Certificate issuer: /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial: 10E7AE
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/e3fe65c47412986d181fbd64300cc1fecec681b6.roa
Signing time: Wed 29 Nov 2023 21:53:18 +0000
ROA not before: Wed 29 Nov 2023 21:53:18 +0000
ROA not after: Sat 29 Nov 2025 21:53:18 +0000
asID: 11315
IP address blocks: 190.197.128.0/18 maxlen: 24
190.197.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1107886 (0x10e7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Validity
Not Before: Nov 29 21:53:18 2023 GMT
Not After : Nov 29 21:53:18 2025 GMT
Subject: CN=e3fe65c47412986d181fbd64300cc1fecec681b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:2e:3e:7e:20:7b:38:62:4d:3c:18:18:2c:
6a:3b:3a:13:ce:55:eb:67:59:81:0f:02:5b:4a:f2:
92:f0:d4:02:49:17:78:da:87:3f:8c:89:0d:ea:06:
52:4d:dd:2d:0b:a1:7d:f1:26:af:f1:bb:7e:eb:f5:
9c:41:6f:ff:c6:cd:64:00:8b:b4:dc:36:7a:99:55:
52:a1:40:70:87:6e:5c:b7:53:35:03:18:48:aa:1c:
ff:0c:c9:47:71:bc:e5:35:a4:b7:3a:5a:b7:e8:db:
25:5a:16:b0:f8:36:4a:be:f9:75:89:3a:f6:41:08:
a6:ef:2d:ea:ae:22:ad:f7:e8:f0:7f:f4:9b:9b:e9:
2b:ca:36:1b:ed:83:72:6c:4d:3c:aa:eb:7f:ca:f1:
54:88:01:79:89:65:c1:7f:3f:d1:98:23:7e:c0:c5:
17:ba:48:c9:5b:6e:48:17:ff:6f:c8:52:1c:2b:63:
b7:6a:10:cb:e7:3c:00:50:42:9c:5a:06:4e:45:72:
c2:48:0d:fb:c1:12:50:a0:8b:d3:e4:ba:7d:45:19:
57:cc:70:de:48:9d:68:b6:ee:c0:36:1c:2a:be:89:
5e:e0:42:aa:08:98:50:b9:fc:e1:3e:b3:3c:d1:15:
b9:d4:cc:e8:83:09:92:1c:a3:f2:89:7f:42:56:53:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5C:F4:7E:2F:30:91:D3:45:E6:5B:67:86:C2:69:EB:3A:A4:47:8E
X509v3 Authority Key Identifier:
keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/e3fe65c47412986d181fbd64300cc1fecec681b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.197.128.0/17
Signature Algorithm: sha256WithRSAEncryption
30:1e:55:cb:24:ca:48:fe:da:d2:9b:11:ea:dd:75:e9:7c:ca:
3e:24:25:66:15:62:17:4e:6d:d6:30:42:c3:dc:5e:10:55:6b:
76:32:dd:58:f9:3b:23:53:ae:64:20:75:05:99:8d:3a:b9:10:
7a:18:ed:42:5e:74:2d:cd:da:57:91:89:8f:f9:f8:1a:14:25:
18:f6:9f:3e:a7:b6:bc:ff:01:7e:07:ff:b6:3a:80:c9:bd:1d:
ba:04:13:ee:f7:0b:55:ba:64:76:e4:45:28:ea:8a:7e:43:d5:
14:64:2a:18:1d:6f:09:3f:14:6e:54:3f:e5:ba:c5:d0:78:5b:
a6:08:aa:4b:eb:a2:91:d2:93:8f:96:37:65:6d:cc:97:c1:13:
c6:42:70:55:13:46:e5:84:3e:90:22:d5:f3:d3:e8:90:a0:83:
e9:16:fe:24:eb:5b:30:73:ea:03:04:ad:1d:6c:7f:fa:bd:a4:
7a:92:29:b0:43:6b:6f:b2:bc:de:4d:a1:c5:9c:55:8a:c4:30:
28:53:1c:17:20:1b:2b:4b:56:ff:68:9f:9c:56:47:3a:da:f5:
a7:0f:89:33:a2:66:0a:a9:01:d0:fd:ff:54:87:c0:2b:c7:67:
78:6a:c4:59:4a:a3:91:c2:be:87:04:d9:70:d0:20:30:07:0e:
08:5b:0e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org