Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/b0c6d341ffce8cbc31e61bdd831edac02efd6530.roa
File: b0c6d341ffce8cbc31e61bdd831edac02efd6530.roa (raw, json)
Hash identifier: w7f0BEU4RxRaWcnDyvUvXSr6ZQJ2OmXzR4o74+OkAhA=
Subject key identifier: A8:B1:B3:B2:2A:F1:3A:FA:CE:FD:DE:00:FF:CF:C0:3E:09:D8:6B:22
Certificate issuer: /CN=87849b3a9cbb45397d154a68db4f01165de22acb
Certificate serial: 21C183
Authority key identifier: F0:C7:DB:68:F3:54:0D:E0:E8:E7:C1:C5:04:F4:ED:33:08:AF:AB:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87849b3a9cbb45397d154a68db4f01165de22acb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/b0c6d341ffce8cbc31e61bdd831edac02efd6530.roa
Signing time: Sat 01 Jul 2023 01:08:37 +0000
ROA not before: Fri 30 Jun 2023 01:08:37 +0000
ROA not after: Tue 01 Jul 2025 01:08:37 +0000
asID: 52278
IP address blocks: 190.105.240.0/22 maxlen: 22
190.105.244.0/22 maxlen: 22
190.105.248.0/23 maxlen: 23
190.105.250.0/23 maxlen: 23
190.105.254.0/24 maxlen: 24
190.105.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212227 (0x21c183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87849b3a9cbb45397d154a68db4f01165de22acb
Validity
Not Before: Jun 30 01:08:37 2023 GMT
Not After : Jul 1 01:08:37 2025 GMT
Subject: CN=b0c6d341ffce8cbc31e61bdd831edac02efd6530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:1f:4d:dc:0f:bf:5b:98:78:e9:35:fc:5d:
97:55:35:b0:4a:9b:a7:32:98:78:6b:1e:a0:ad:b1:
3e:40:36:7a:20:fc:bf:78:12:47:57:12:05:19:41:
91:9c:4f:90:7e:35:03:a6:39:af:a7:38:3f:d4:5e:
c2:0e:74:a4:36:dd:77:a7:75:71:1d:97:90:37:10:
73:43:ac:4f:17:28:cb:24:1f:cd:d4:53:7d:7c:c3:
e6:98:79:2e:d0:36:df:0a:f7:ee:3f:55:4d:88:fe:
d4:29:98:4e:e9:db:32:7c:42:85:1e:1a:45:0d:93:
ed:0f:bd:17:27:7c:6c:ee:a2:9c:25:a2:0f:ab:b7:
10:ad:10:ca:19:3d:a6:b5:4f:30:82:f5:93:c7:4e:
7d:7d:f8:81:a0:58:fc:cc:8e:c2:67:41:c5:8f:63:
45:5f:10:83:a4:85:d1:ad:8a:40:8f:99:2a:ac:ac:
e1:19:58:5c:38:be:7b:d0:11:14:d3:d5:38:8e:88:
e6:98:ae:db:f1:b2:f5:eb:24:7d:48:eb:cd:4c:70:
3e:fc:74:0c:75:ac:c4:c7:a1:06:74:74:d9:0c:3f:
97:0a:c1:c3:7e:4f:81:4f:9b:db:73:09:a5:06:9a:
de:38:f8:f2:f7:31:e5:b2:4e:ed:06:03:0c:ba:c3:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B1:B3:B2:2A:F1:3A:FA:CE:FD:DE:00:FF:CF:C0:3E:09:D8:6B:22
X509v3 Authority Key Identifier:
keyid:F0:C7:DB:68:F3:54:0D:E0:E8:E7:C1:C5:04:F4:ED:33:08:AF:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87849b3a9cbb45397d154a68db4f01165de22acb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/b0c6d341ffce8cbc31e61bdd831edac02efd6530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/87849b3a9cbb45397d154a68db4f01165de22acb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.105.240.0-190.105.251.255
190.105.254.0/23
Signature Algorithm: sha256WithRSAEncryption
58:7c:4b:80:73:ff:ee:ea:65:39:ca:e2:1f:6c:40:b3:30:68:
ae:8b:fa:d5:86:9c:08:93:3d:a0:be:20:ae:e6:a7:2d:60:8f:
29:4f:13:10:0d:1d:a8:2d:a6:4c:23:5e:1b:0b:df:bc:3f:69:
2a:22:a9:1d:f2:8e:21:4a:93:ec:b5:88:10:4b:72:2e:18:c1:
90:3e:dc:b3:12:08:bf:ff:cc:d5:8f:8f:7c:3c:a0:40:61:de:
1b:c3:eb:3d:30:29:a8:e4:b6:56:18:96:f2:cf:00:b5:fe:56:
6b:bd:a4:50:7c:8d:6b:24:45:6d:59:fc:dd:1a:f0:5a:b9:4f:
56:0d:31:66:1b:40:bc:c5:37:14:29:38:02:79:0a:1f:7a:5f:
e5:df:5e:fa:ac:ad:48:ff:2a:a7:1e:d3:a5:aa:e5:e2:fb:ac:
7e:a3:c6:aa:30:86:83:d2:19:6d:91:35:81:37:7e:ae:ac:6f:
e2:be:1c:23:84:6b:be:b2:a4:23:5d:c5:46:08:07:de:06:a1:
70:14:36:01:67:c7:c9:e6:69:be:51:94:99:fc:cc:c8:54:2d:
38:63:48:1b:c1:77:a1:fc:fb:f3:b1:db:dc:eb:be:35:3c:1c:
84:a0:26:98:af:6c:83:44:95:1f:ec:01:17:d7:c1:45:56:ed:
6b:8a:53:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org