Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/36aa9968e540c195d8f4f9e130e97988613458f6.roa
File: 36aa9968e540c195d8f4f9e130e97988613458f6.roa (raw, json)
Hash identifier: INs1ySwEXmNX01F1ZHXju7q3862n122djT4ptg+THnM=
Subject key identifier: E0:BF:C9:0F:72:AF:A2:41:64:E9:E1:BC:19:03:3E:EE:59:B1:29:8B
Certificate issuer: /CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Certificate serial: 16C386
Authority key identifier: ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/36aa9968e540c195d8f4f9e130e97988613458f6.roa
Signing time: Wed 22 Jun 2022 02:02:04 +0000
ROA not before: Tue 21 Jun 2022 03:00:00 +0000
ROA not after: Fri 21 Jun 2024 03:00:00 +0000
asID: 266725
IP address blocks: 190.104.32.0/20 maxlen: 24
190.112.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1491846 (0x16c386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Validity
Not Before: Jun 21 03:00:00 2022 GMT
Not After : Jun 21 03:00:00 2024 GMT
Subject: CN=36aa9968e540c195d8f4f9e130e97988613458f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:24:94:e1:09:7c:19:3c:43:3c:a4:cc:88:
1a:d7:59:30:96:34:1d:d7:86:78:7e:c5:f8:7c:1a:
ab:a6:82:fd:5e:4c:b1:0f:4d:70:99:ea:46:33:c4:
7f:55:fc:09:bb:a4:53:e8:07:2c:60:d5:c3:d0:c7:
c4:3c:18:45:e3:a0:6a:41:9f:43:f4:e3:43:50:a2:
c3:9a:e3:13:9c:75:e6:8e:69:6a:52:55:6e:cc:54:
cc:91:f6:23:ef:09:62:66:eb:93:a6:10:2f:78:0e:
6a:71:71:9d:f4:63:ec:0e:39:62:ea:59:57:4d:51:
e0:a5:64:11:a8:92:10:62:de:2f:74:2e:dc:47:a7:
57:2c:81:30:62:2d:ce:e7:97:86:ad:c7:98:95:01:
56:da:eb:44:6e:5d:9a:82:5a:bf:50:2d:91:60:33:
25:5e:9e:fd:ac:dd:41:b0:66:dd:0e:a3:4b:3e:16:
30:94:91:f6:16:93:e8:6d:09:60:39:14:db:34:ee:
f3:35:85:35:32:16:53:88:18:3e:ad:26:17:f0:ee:
63:e6:29:af:b5:72:98:fb:6c:32:d3:8b:9a:b1:79:
83:8f:be:84:78:24:d6:75:9a:d4:c0:a0:24:98:ae:
40:02:9c:a3:c9:cf:08:57:b1:ad:f7:8f:f0:d0:ab:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BF:C9:0F:72:AF:A2:41:64:E9:E1:BC:19:03:3E:EE:59:B1:29:8B
X509v3 Authority Key Identifier:
keyid:ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/36aa9968e540c195d8f4f9e130e97988613458f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.32.0/20
190.112.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:97:d0:12:a4:22:98:32:4e:9c:5d:49:74:01:06:a5:d8:6c:
54:64:9c:ab:53:d1:38:4d:8a:72:3f:37:1c:e7:6a:a7:d3:3e:
4e:2f:ce:d0:b6:8a:41:92:f7:d5:b7:06:b2:bc:73:05:43:41:
6c:77:4c:c3:1b:45:b5:16:4f:fd:13:ce:95:b0:fd:17:2b:52:
ae:70:41:da:f6:a8:b7:55:63:06:02:d3:64:9f:6c:8d:5f:ab:
ae:fb:70:33:65:aa:36:b5:65:d8:8b:76:65:cd:0a:44:be:31:
13:26:c5:65:75:c8:bf:ca:cc:5e:f3:28:d2:0d:b2:d2:c6:7a:
1a:e9:49:b0:4e:2c:25:1b:36:15:ee:a8:8b:df:c3:f0:1a:a7:
07:11:f6:ec:e6:ee:db:98:a5:12:69:eb:fd:3a:a3:f6:3f:d7:
df:59:fc:ec:73:16:d3:59:a4:2d:40:43:0a:dc:de:2b:6f:a3:
0f:05:f8:69:61:61:ad:1d:53:f2:e5:23:c3:d1:3c:23:e8:14:
d1:37:4b:6c:8b:73:16:32:a3:bc:35:5f:c5:65:51:a6:c7:c1:
2d:eb:d9:a4:ab:84:0a:71:62:1f:70:5d:ec:da:9d:9e:1e:35:
5c:41:50:64:0c:57:d4:5b:71:0c:e1:05:12:d6:10:16:56:32:
e8:81:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org