Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/d03915fa14fa22f3f9770dc52ff9da529cc529df.roa
File: d03915fa14fa22f3f9770dc52ff9da529cc529df.roa (raw, json)
Hash identifier: v4e8ib0+T2CBZE+29sR8nZ3bQQyvdHKbSUaQCu+jqT8=
Subject key identifier: F0:A4:C1:4D:4C:51:82:16:7E:3C:10:1A:84:E0:C9:C8:8D:AA:DC:D6
Certificate issuer: /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial: 21F27A
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/d03915fa14fa22f3f9770dc52ff9da529cc529df.roa
Signing time: Fri 02 Jun 2023 14:33:24 +0000
ROA not before: Thu 01 Jun 2023 14:33:24 +0000
ROA not after: Mon 02 Jun 2025 14:33:24 +0000
asID: 13682
IP address blocks: 190.143.192.0/19 maxlen: 24
190.143.224.0/20 maxlen: 24
200.119.128.0/20 maxlen: 24
200.119.144.0/22 maxlen: 24
200.119.148.0/23 maxlen: 24
200.119.150.0/24 maxlen: 24
200.119.154.0/23 maxlen: 24
200.119.156.0/22 maxlen: 24
200.119.160.0/20 maxlen: 24
200.119.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2224762 (0x21f27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Validity
Not Before: Jun 1 14:33:24 2023 GMT
Not After : Jun 2 14:33:24 2025 GMT
Subject: CN=d03915fa14fa22f3f9770dc52ff9da529cc529df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:e5:8b:8e:71:8b:ba:02:fb:db:97:b4:01:
e2:63:e8:91:ea:23:ba:32:49:86:9a:a3:54:5c:8f:
89:f4:26:e5:82:9c:05:a3:ef:7d:96:87:9f:42:b8:
56:c8:8c:a0:05:30:8a:46:97:d6:56:c1:44:13:1a:
55:a7:22:ae:7d:98:a0:e7:c7:12:c2:eb:7b:7d:b6:
ae:1e:f6:34:42:b3:aa:72:d3:ce:22:0a:56:3d:5d:
59:05:ef:2c:a3:27:3a:ac:e8:81:f3:f4:33:d3:24:
1a:eb:a0:bb:03:1a:90:8d:81:9a:be:16:4b:af:0d:
1e:e9:a5:15:ab:42:19:90:04:07:f3:41:4e:cf:1d:
7c:91:bc:43:9a:12:c7:96:63:81:7d:c9:f9:41:8f:
9e:ef:0b:e1:ad:94:fe:01:6c:89:f5:9b:5f:ca:61:
cf:8f:80:95:1d:09:07:6a:0f:94:de:91:52:18:03:
74:0f:92:92:28:ad:a1:6e:58:50:74:40:9f:7c:47:
6b:8f:bd:23:db:f5:19:21:f9:0f:f0:8b:5d:ed:f9:
ac:74:0c:18:d7:c3:5d:94:e1:a5:49:28:ad:03:cc:
19:c8:37:9c:2c:c2:b0:e3:aa:a9:b1:39:d1:ce:35:
3f:ba:52:1e:40:61:74:d4:21:0a:23:e4:a0:77:44:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:C1:4D:4C:51:82:16:7E:3C:10:1A:84:E0:C9:C8:8D:AA:DC:D6
X509v3 Authority Key Identifier:
keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/d03915fa14fa22f3f9770dc52ff9da529cc529df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.143.192.0-190.143.239.255
200.119.128.0-200.119.150.255
200.119.154.0-200.119.183.255
Signature Algorithm: sha256WithRSAEncryption
d1:d4:09:af:15:ca:ce:05:01:78:56:e6:c6:97:8e:9e:57:6e:
5d:2d:cc:43:97:8a:38:0a:13:85:60:fd:92:ee:45:3c:09:35:
63:c8:71:49:4d:da:20:fc:2b:e1:c6:05:fb:fa:ea:f0:6a:ba:
e2:00:ea:df:ca:0b:bf:72:75:35:f5:5e:a6:f1:2b:44:06:40:
16:04:50:7c:6a:86:ef:a5:76:b5:4a:2f:5b:cc:0d:df:d3:90:
c5:b1:68:72:fa:f1:c4:19:9b:1a:9e:07:2e:32:09:44:ad:ba:
2e:c6:8b:d2:53:29:da:88:13:24:57:73:af:96:bf:84:b9:5c:
94:ea:5e:31:62:7b:d0:6b:3d:9c:4e:19:6a:cb:20:c4:e5:6a:
68:d8:71:56:8c:f8:0f:f1:4c:fe:f3:a6:b4:5a:81:88:7b:6f:
92:ac:b4:7e:b5:fe:dc:9c:36:b1:e1:38:06:fa:d5:1b:55:5e:
75:6e:df:99:56:f0:89:5a:4a:bb:ae:3a:e3:1f:61:ab:3c:dd:
c4:ee:fa:6b:64:98:8c:fd:7b:45:ed:95:e0:bf:fb:c0:5d:1b:
ef:c1:e1:f3:03:b7:41:07:46:fa:51:cb:43:2f:7c:ab:ba:30:
d9:df:90:da:10:75:eb:7f:db:79:07:e0:9e:fb:bd:a7:ce:9d:
2e:3f:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 17:05:18 2024 by rpki-client on console-fra.rpki-client.org