Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ebff22e35be9c68568db1565ba5291a2689c006b.roa
File: ebff22e35be9c68568db1565ba5291a2689c006b.roa (raw, json)
Hash identifier: 98J9p7HcCtRghKLHFsYln0bzTgFQWx2wdofh45dC2rE=
Subject key identifier: 2B:F3:EA:16:90:0C:DC:A3:75:C5:4A:DD:4E:9F:B6:CB:55:3A:1A:4B
Certificate issuer: /CN=ad27b898d1ea7f94cd5932a665835c7ef4650f61
Certificate serial: 0C9957
Authority key identifier: 05:C2:4B:CB:76:A2:E8:65:8F:51:41:AC:3D:3F:B7:C0:A5:B2:A9:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad27b898d1ea7f94cd5932a665835c7ef4650f61.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ebff22e35be9c68568db1565ba5291a2689c006b.roa
Signing time: Wed 24 Mar 2021 14:34:15 +0000
ROA not before: Wed 24 Mar 2021 14:34:15 +0000
ROA not after: Tue 24 Mar 2026 14:34:15 +0000
asID: 40676
IP address blocks: 190.110.120.0/21 maxlen: 24
201.159.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 825687 (0xc9957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad27b898d1ea7f94cd5932a665835c7ef4650f61
Validity
Not Before: Mar 24 14:34:15 2021 GMT
Not After : Mar 24 14:34:15 2026 GMT
Subject: CN=ebff22e35be9c68568db1565ba5291a2689c006b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:81:4d:49:8d:36:90:59:7c:96:72:d1:4d:f2:
82:07:c3:b7:0e:77:67:63:93:ba:cb:41:5d:bc:a7:
a3:54:3c:a8:02:9a:fe:22:b4:9d:44:92:8a:68:45:
78:8f:58:b8:e1:fc:b6:21:96:93:e9:0b:16:f9:c3:
b7:89:7c:9e:41:c3:a7:97:c1:46:ef:fb:0a:6f:b5:
0e:30:58:41:df:0b:97:27:5c:6d:5b:68:d9:7a:57:
9e:57:ea:cb:c3:92:66:4e:4f:81:d9:af:d8:f8:56:
45:5b:17:b3:5c:91:4d:c7:3f:07:cb:b7:3c:9c:8f:
b0:df:41:9a:47:30:4c:c5:3f:81:45:2e:b1:d1:4d:
2a:17:bf:94:a0:32:24:76:28:f1:47:cb:fe:8e:79:
eb:4f:38:6c:11:f0:10:21:7b:b7:4f:23:eb:34:d9:
c6:b8:56:95:13:28:db:c9:06:b0:69:5c:c0:6e:18:
b0:70:1a:dc:5b:7f:6f:3a:55:c3:3d:74:54:ec:c5:
1e:42:5d:6f:1e:0c:b7:cc:7d:39:3d:c9:d6:9d:cd:
4d:6f:a1:d1:1a:05:d3:94:61:43:db:35:ac:b6:12:
7d:ba:97:ea:3c:3f:c3:12:42:47:57:2e:d1:1e:95:
18:ee:5c:3a:7d:25:8d:29:11:82:2d:44:d8:c3:b1:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F3:EA:16:90:0C:DC:A3:75:C5:4A:DD:4E:9F:B6:CB:55:3A:1A:4B
X509v3 Authority Key Identifier:
keyid:05:C2:4B:CB:76:A2:E8:65:8F:51:41:AC:3D:3F:B7:C0:A5:B2:A9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad27b898d1ea7f94cd5932a665835c7ef4650f61.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ebff22e35be9c68568db1565ba5291a2689c006b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ad27b898d1ea7f94cd5932a665835c7ef4650f61.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.120.0/21
201.159.168.0/21
Signature Algorithm: sha256WithRSAEncryption
97:0f:5b:00:9a:b8:e1:6f:d8:c0:27:c8:29:0e:a1:ec:70:08:
14:58:ab:73:aa:6b:dc:e0:8c:b5:ee:14:80:13:c4:16:1f:a4:
4d:87:08:bb:ce:68:1b:03:69:82:e7:b1:1f:22:91:9c:12:08:
2a:5a:1e:51:22:36:19:06:6f:a4:63:7c:67:b0:cd:6d:76:5d:
76:07:7b:e3:fa:e9:ed:f1:07:92:54:56:65:3e:d0:8c:27:47:
26:f3:ae:eb:da:76:65:53:3a:74:bf:db:34:5e:bf:2a:2a:bb:
84:a9:71:59:02:63:d4:aa:9a:67:38:19:ff:0f:eb:04:a2:1a:
67:d3:de:9e:21:7a:bc:22:0a:7f:16:69:6c:b2:a0:d4:b0:1a:
c1:00:75:f4:f3:d0:72:35:a7:b5:72:be:39:a9:59:bf:3d:b8:
ca:fe:8a:67:88:f4:1f:77:34:9e:4f:55:ed:78:b7:30:38:6a:
07:58:6b:f2:e0:09:16:69:66:1d:ca:09:24:78:1a:1f:82:28:
5a:88:bd:12:20:35:b5:77:80:82:c3:5d:23:67:1e:75:d1:53:
a9:78:86:de:2d:8b:ea:19:c7:7d:f0:ff:1d:df:34:15:30:e6:
0d:2f:67:5f:ad:8e:4d:98:a8:4c:92:d1:23:fa:c2:be:87:42:
fc:54:f0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org