Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/97056eba9c9aa6a4db05c8d20608c071f668f33c.roa
File: 97056eba9c9aa6a4db05c8d20608c071f668f33c.roa (raw, json)
Hash identifier: En979ztT1AThImZRPhbNE6CKc6oQbhyY4603wdosIC8=
Subject key identifier: 6E:59:29:0C:F4:82:44:AD:A4:69:62:A3:B5:67:5D:61:08:E1:68:F6
Certificate issuer: /CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Certificate serial: 2433B5
Authority key identifier: ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/97056eba9c9aa6a4db05c8d20608c071f668f33c.roa
Signing time: Thu 30 Nov 2023 17:29:01 +0000
ROA not before: Thu 30 Nov 2023 17:29:00 +0000
ROA not after: Sun 30 Nov 2025 17:29:00 +0000
asID: 52363
IP address blocks: 190.112.176.0/20 maxlen: 24
190.104.32.0/20 maxlen: 24
2803:6800::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2372533 (0x2433b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Validity
Not Before: Nov 30 17:29:00 2023 GMT
Not After : Nov 30 17:29:00 2025 GMT
Subject: CN=97056eba9c9aa6a4db05c8d20608c071f668f33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c8:0a:a2:a1:b2:7e:71:05:1e:28:3d:f7:12:
f2:68:17:71:44:ec:58:b3:59:f5:67:87:80:5c:8f:
28:6d:fa:1e:0c:f6:83:f3:9f:d1:2c:18:c0:c8:71:
8f:4b:55:e7:1f:41:1c:c7:80:50:bb:60:38:f5:ba:
40:e2:6c:89:48:06:76:c0:8e:5b:d7:78:e2:94:67:
fe:cf:ef:d1:f7:8d:df:ba:90:c2:1d:7e:aa:db:aa:
23:37:04:cc:a8:f6:4f:99:08:8b:5e:d0:f2:e6:81:
0d:48:24:99:66:ae:20:f2:1f:81:06:a4:fc:54:31:
c0:e7:70:49:56:82:f1:6c:79:4b:94:d0:b7:b5:84:
08:30:0a:3f:db:d5:39:c3:1e:f5:2a:c4:7f:67:31:
93:b6:6a:b8:a4:e8:56:d5:b4:ff:fe:7e:62:a6:af:
df:8c:7f:e5:b6:17:0c:18:80:a4:ee:55:0a:04:02:
b7:40:2f:9d:d0:f2:b5:c5:c5:da:c1:4c:3b:2f:82:
77:2e:71:cb:86:bd:ab:4d:aa:77:ea:80:8f:7d:1f:
4a:b6:75:62:b5:23:d7:ca:cb:c7:68:f0:e2:12:8c:
8a:68:8a:93:89:65:94:ed:8d:51:3c:3b:c3:3b:bb:
3a:67:3c:cd:e4:e6:5a:f6:64:7e:96:51:b7:e0:4b:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:59:29:0C:F4:82:44:AD:A4:69:62:A3:B5:67:5D:61:08:E1:68:F6
X509v3 Authority Key Identifier:
keyid:ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/97056eba9c9aa6a4db05c8d20608c071f668f33c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.32.0/20
190.112.176.0/20
IPv6:
2803:6800::/32
Signature Algorithm: sha256WithRSAEncryption
7f:5a:4c:39:73:44:4c:1c:fe:6a:1d:89:af:9e:39:ba:67:a4:
06:6b:39:f9:35:ea:3a:c3:48:f6:de:9c:2c:b1:50:fa:28:73:
88:67:53:46:b3:1e:1d:04:77:2c:0d:a7:4e:43:81:96:2f:6c:
4b:63:2f:0d:61:04:d6:17:f2:d5:30:fe:7e:9b:ea:1e:ab:c6:
b6:6a:b0:c7:55:92:ad:d5:c8:cf:fc:d1:d7:fd:57:c4:c6:75:
00:6b:e3:d0:c4:75:32:f2:d4:69:13:a9:c4:e1:18:2d:45:18:
9c:24:46:77:c5:92:79:9b:a0:a3:99:c1:d6:e9:e0:80:88:5f:
af:b1:7c:7e:25:06:9c:91:05:ff:88:14:87:69:20:e6:68:3f:
44:13:92:21:e4:36:98:da:c9:fb:81:ec:4f:37:fb:c6:d0:36:
00:a7:0e:eb:ca:72:f7:e5:df:e6:1a:f1:70:38:b4:d7:9e:c5:
6d:f5:60:0a:a8:4a:25:fb:77:dc:f5:7d:4e:8d:10:8a:49:ec:
0b:44:de:cf:60:98:4d:39:14:5d:4a:55:5d:cf:c1:58:5b:9c:
65:4b:4c:18:1f:9b:60:5b:38:b8:2f:df:58:03:66:80:89:19:
e0:19:d6:46:a9:ac:4c:78:46:65:e1:a8:3d:a9:76:b4:11:81:
b1:42:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org