Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/fb7273c120dc9e5071a1ad68b4628bca9d9527ac.roa
File: fb7273c120dc9e5071a1ad68b4628bca9d9527ac.roa (raw, json)
Hash identifier: tAV6Uh3m3uAIPADpt5PR89eFGWZwrJkNcEDj8YyRLCs=
Subject key identifier: AB:24:21:59:17:93:EC:83:7F:C0:19:CC:61:5B:5C:CD:BF:ED:47:D5
Certificate issuer: /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial: 2120CE
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/fb7273c120dc9e5071a1ad68b4628bca9d9527ac.roa
Signing time: Thu 27 Apr 2023 06:15:15 +0000
ROA not before: Wed 26 Apr 2023 06:15:13 +0000
ROA not after: Sun 27 Apr 2025 06:15:13 +0000
asID: 262172
IP address blocks: 190.143.128.0/18 maxlen: 24
190.143.192.0/19 maxlen: 24
190.143.224.0/20 maxlen: 24
200.119.128.0/20 maxlen: 24
200.119.144.0/22 maxlen: 24
200.119.148.0/23 maxlen: 24
200.119.150.0/24 maxlen: 24
200.119.154.0/23 maxlen: 24
200.119.156.0/22 maxlen: 24
200.119.160.0/20 maxlen: 24
200.119.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171086 (0x2120ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Validity
Not Before: Apr 26 06:15:13 2023 GMT
Not After : Apr 27 06:15:13 2025 GMT
Subject: CN=fb7273c120dc9e5071a1ad68b4628bca9d9527ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:18:55:12:3d:48:85:9a:5f:e0:6b:a2:88:
7e:08:6b:f2:a4:4d:2d:5e:7d:7e:61:77:9f:65:ab:
9e:cb:c9:7e:35:64:f3:63:a3:a0:09:0f:76:47:58:
a2:37:8b:af:85:ca:71:35:97:00:2e:ef:2a:80:8c:
d3:71:f2:5d:1c:8e:86:df:c6:a0:1a:62:85:d1:30:
9b:aa:23:38:f9:f4:58:81:3c:b6:6b:7f:8c:79:8a:
ed:cb:ba:6d:e6:fa:1f:07:19:9e:ee:f1:3d:13:11:
34:bd:4f:4f:49:a6:b5:ff:11:02:89:13:63:54:e0:
39:f1:1c:16:e9:38:b8:cd:ce:2c:87:57:b7:97:d4:
83:b4:78:2c:8b:21:b9:44:c7:17:01:f1:7c:c1:28:
3e:d6:46:c6:1b:5c:c4:4a:a3:34:53:07:07:6a:84:
ff:6b:f9:33:1c:85:01:93:f7:d3:c5:4a:95:94:58:
6b:a0:32:f7:f3:50:49:db:4b:94:fd:46:b8:6a:62:
b0:ae:36:33:52:df:50:ab:3f:8f:c1:05:62:02:ed:
7a:15:38:26:1b:73:1f:e4:40:61:24:be:94:32:49:
9e:98:b8:f4:db:76:1c:d6:d8:22:87:8a:82:bc:99:
b9:8d:ef:f3:83:b4:d2:89:60:84:e1:b8:a1:c2:18:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:24:21:59:17:93:EC:83:7F:C0:19:CC:61:5B:5C:CD:BF:ED:47:D5
X509v3 Authority Key Identifier:
keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/fb7273c120dc9e5071a1ad68b4628bca9d9527ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.143.128.0-190.143.239.255
200.119.128.0-200.119.150.255
200.119.154.0-200.119.183.255
Signature Algorithm: sha256WithRSAEncryption
23:26:c3:d5:5b:c8:19:00:b6:66:cb:e7:56:8c:17:41:8f:ad:
01:87:e5:e7:d3:5d:e8:80:f9:26:d3:ea:3b:cf:dd:15:c4:3b:
d1:5a:16:b9:d4:64:7f:2e:0d:e7:ea:00:bb:db:75:9d:6e:28:
e0:dc:74:05:64:f7:11:52:b0:9f:da:65:94:81:d6:cc:db:b2:
b9:95:86:3a:aa:db:2d:88:20:26:79:c1:62:7b:c0:71:12:11:
e9:c4:8b:4d:a7:31:a2:33:0b:43:30:3b:ca:54:c1:b2:c6:20:
7b:b5:d9:46:21:1f:39:3a:39:98:e2:44:21:9f:da:0a:e3:e0:
ca:94:b9:09:06:2b:39:ec:7f:1a:49:87:37:cd:7d:4a:be:3f:
de:cd:e9:02:7a:01:d0:1e:08:80:ea:cb:db:26:af:a5:e1:b1:
43:86:c7:67:f0:c8:8a:65:3a:89:35:d0:ab:61:cc:b9:59:f8:
68:ab:c6:57:fd:25:25:5f:bd:a0:75:04:a0:ff:c5:1d:68:56:
f0:e6:ce:48:6f:7c:d5:f8:e8:a9:38:d9:26:ae:f2:5f:cf:ee:
a8:8f:d2:6d:71:e1:a8:99:ad:f2:c1:77:02:9a:f8:cf:3d:6f:
54:53:74:b1:26:0f:50:fd:f4:21:64:34:04:b2:fd:63:23:3e:
d6:ed:df:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org