Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/17d611e4003a0f26fc6026c2b182edbb473c0112.roa
File: 17d611e4003a0f26fc6026c2b182edbb473c0112.roa (raw, json)
Hash identifier: wBjB1TX7YryFtgA2CPkRSC0ReZmV5PEBOiJqX9Qlobo=
Subject key identifier: B9:17:AE:26:3A:1D:13:79:9D:B4:96:3D:1E:B7:FE:17:76:93:E4:E7
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 259BEE
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/17d611e4003a0f26fc6026c2b182edbb473c0112.roa
Signing time: Wed 28 Jun 2023 22:29:58 +0000
ROA not before: Tue 27 Jun 2023 22:29:52 +0000
ROA not after: Sat 28 Jun 2025 22:29:52 +0000
asID: 27837
IP address blocks: 190.90.87.0/24 maxlen: 24
190.90.195.0/24 maxlen: 24
190.90.196.0/23 maxlen: 24
190.90.122.0/23 maxlen: 24
190.90.124.0/24 maxlen: 24
190.90.228.0/24 maxlen: 24
190.90.246.0/23 maxlen: 24
190.90.40.0/21 maxlen: 24
190.90.48.0/22 maxlen: 24
190.90.65.0/24 maxlen: 24
190.90.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464750 (0x259bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Jun 27 22:29:52 2023 GMT
Not After : Jun 28 22:29:52 2025 GMT
Subject: CN=17d611e4003a0f26fc6026c2b182edbb473c0112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:70:fd:b8:f0:ac:a2:c9:c0:d3:17:b3:52:
e8:84:3e:cd:88:a6:cb:2e:cc:59:7a:e6:4e:73:3c:
3e:8b:ed:65:dd:14:68:e9:8b:98:df:d0:3d:ec:77:
f2:9d:4c:1f:ae:18:14:13:fd:5f:0f:5a:7b:fd:d6:
09:33:70:bc:17:28:c7:6a:ed:3a:5c:3c:c0:f1:2d:
40:35:10:ba:bd:85:91:4a:a9:89:23:a2:77:23:97:
04:bf:d1:e2:5f:4a:a9:4d:03:11:8f:0e:df:0f:de:
3d:ab:55:cb:1f:30:4e:e1:dd:de:c4:e3:6a:e3:75:
5a:fb:d0:0f:f0:ab:66:3a:15:dc:9f:fd:11:7e:ee:
f4:98:e1:f3:4e:15:3b:c7:31:ed:45:00:a3:7a:91:
8f:83:c7:f5:fd:87:3a:16:40:e2:b3:3d:14:0a:3b:
b7:a7:e0:11:72:50:b4:63:a8:8d:df:d5:26:28:a5:
67:0b:8f:22:bf:75:0e:26:86:e2:e9:7b:66:bf:b0:
42:d8:1b:70:fa:77:88:a5:15:5f:f3:61:c1:85:e0:
b6:ea:bc:61:9f:44:0b:ab:d3:1c:03:81:69:1e:e5:
38:69:bb:7f:08:6c:88:8c:44:30:38:3b:71:28:09:
18:30:12:9f:b4:93:87:44:54:51:cd:d4:00:d5:15:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:AE:26:3A:1D:13:79:9D:B4:96:3D:1E:B7:FE:17:76:93:E4:E7
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/17d611e4003a0f26fc6026c2b182edbb473c0112.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.40.0-190.90.51.255
190.90.65.0-190.90.66.255
190.90.87.0/24
190.90.122.0-190.90.124.255
190.90.195.0-190.90.197.255
190.90.228.0/24
190.90.246.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:75:07:18:e8:e6:26:46:76:3e:a6:a6:fd:a8:9d:56:19:00:
3b:81:bb:9f:9c:d4:b6:7a:15:c4:ba:9c:dc:fe:09:97:21:a1:
8d:14:ab:3e:af:b6:59:be:30:78:1b:d1:69:5b:ee:95:c8:c3:
0d:12:2b:8a:e5:b4:15:f8:b8:3d:96:77:ad:df:79:85:bf:1f:
59:88:9c:06:51:bf:7c:72:ed:f2:77:7f:7d:05:b7:d0:9d:91:
94:cf:52:73:7f:87:b1:79:3c:18:7d:5b:67:bd:35:9b:be:8e:
ff:43:d5:d9:58:a0:5d:ab:84:9e:64:ed:7d:6f:e1:41:e0:5c:
8e:f5:dc:2c:6d:bf:02:50:46:fa:19:d4:bd:67:77:ff:cd:1b:
81:34:f6:a5:35:3c:03:0a:ec:15:09:47:83:22:18:59:22:67:
e9:26:f6:b0:25:54:98:dd:07:15:fc:00:99:39:28:57:06:ae:
2e:10:9d:7c:16:7a:23:b2:50:b6:ce:4a:4b:5f:d8:01:5f:1a:
7d:87:f0:56:0c:9a:49:01:4f:e8:f6:3d:bc:1d:fc:95:79:21:
f0:14:9b:19:46:9c:60:6f:35:96:6e:f4:2d:46:a3:a4:1f:b6:
41:6c:f3:38:b9:b4:40:b9:44:f2:90:83:4e:27:22:41:91:10:
a5:36:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org