Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/70adcd3eb2991a79cc2c9275c89b2f8ca28b692b.roa
File: 70adcd3eb2991a79cc2c9275c89b2f8ca28b692b.roa (raw, json)
Hash identifier: EjVoQpiKIAbYJLRmuClQ8sySj74TxEj/KJq7SbxegdQ=
Subject key identifier: 76:BF:7C:ED:04:BC:5F:A6:D9:BE:41:9C:4E:07:FF:6A:FE:41:C3:6E
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 20B477
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/70adcd3eb2991a79cc2c9275c89b2f8ca28b692b.roa
Signing time: Mon 23 Jan 2023 15:54:20 +0000
ROA not before: Tue 20 Apr 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 262589
IP address blocks: 190.90.0.0/21 maxlen: 21
190.90.8.0/21 maxlen: 21
190.90.16.0/21 maxlen: 21
190.90.24.0/24 maxlen: 24
190.90.28.0/22 maxlen: 24
190.90.33.0/24 maxlen: 24
190.90.34.0/24 maxlen: 24
190.90.36.0/22 maxlen: 24
190.90.52.0/22 maxlen: 24
190.90.60.0/22 maxlen: 24
190.90.64.0/20 maxlen: 24
190.90.80.0/20 maxlen: 24
190.90.96.0/20 maxlen: 24
190.90.112.0/21 maxlen: 24
190.90.120.0/21 maxlen: 24
190.90.128.0/20 maxlen: 24
190.90.144.0/21 maxlen: 24
190.90.191.0/24 maxlen: 24
190.90.192.0/20 maxlen: 24
190.90.208.0/21 maxlen: 24
190.90.224.0/21 maxlen: 24
190.90.232.0/21 maxlen: 24
190.90.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143351 (0x20b477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Apr 20 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=70adcd3eb2991a79cc2c9275c89b2f8ca28b692b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:44:eb:2e:54:e8:89:7a:84:e2:b0:0b:f5:
c8:1e:a6:00:f1:bf:fa:80:7a:de:b1:21:b8:f9:db:
80:8a:05:f1:c0:b1:d9:b8:d5:88:5c:80:d7:12:43:
11:1e:95:d8:be:a7:a1:90:a3:5b:93:89:8a:a2:35:
1a:a0:17:09:ae:52:3c:94:5c:a2:e8:75:d3:42:0b:
e5:64:9a:b5:71:30:f8:2e:d0:8f:de:06:d3:db:a3:
34:f0:5e:82:0a:05:2c:6c:c3:f7:88:fc:5c:99:b6:
9e:4d:ff:38:02:f3:f5:3e:50:72:d4:88:c8:26:00:
e6:1c:a1:2b:c1:a1:fe:c6:9c:69:2b:9e:f3:79:8d:
1d:12:1c:71:4d:2d:ad:94:02:da:96:95:3e:21:97:
30:80:16:f4:b8:5a:f6:74:db:64:4d:cf:f1:27:6d:
d5:41:09:e8:dc:9a:f3:3a:e1:25:7a:37:54:ac:c4:
21:72:59:27:4d:13:a3:01:30:5f:63:35:87:78:d8:
fb:96:ab:0a:5d:f0:a3:73:b8:9c:19:1f:da:53:02:
1f:0c:44:8a:ff:ea:b8:7c:95:bb:5e:44:d4:cd:dd:
c2:88:75:1e:24:40:36:b3:03:72:45:ed:90:79:4a:
9f:49:ed:29:a0:62:cb:20:a3:f5:d9:d8:91:8b:ef:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BF:7C:ED:04:BC:5F:A6:D9:BE:41:9C:4E:07:FF:6A:FE:41:C3:6E
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/70adcd3eb2991a79cc2c9275c89b2f8ca28b692b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.0.0-190.90.24.255
190.90.28.0/22
190.90.33.0-190.90.34.255
190.90.36.0/22
190.90.52.0/22
190.90.60.0-190.90.151.255
190.90.191.0-190.90.215.255
190.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
67:2d:b0:ab:5d:9a:53:79:e2:0a:38:23:77:9f:42:cd:05:d8:
99:aa:cf:a1:b0:ad:31:19:d5:e3:32:de:6b:36:69:17:a9:f2:
13:08:4f:74:b7:7e:99:97:ca:4c:f5:4f:8c:dc:92:7a:4c:c3:
44:21:c0:4a:a4:dc:d0:b1:f5:5d:9e:1e:a5:75:60:48:b0:67:
09:96:5a:79:1b:fe:4e:7d:22:d8:80:6f:22:46:69:e1:7b:92:
81:eb:b1:f9:e8:be:55:83:24:19:eb:1d:c7:1f:fe:0b:86:8e:
69:09:8d:c5:31:87:1c:4d:89:7f:f2:52:41:ac:13:c2:c3:5f:
ee:50:e4:14:b6:89:ec:b4:28:9f:a6:66:a6:4c:84:2f:3c:93:
bb:1e:e4:f2:ab:91:b6:a5:1a:5b:a6:1f:74:57:61:b7:2a:12:
26:03:8a:a6:4a:ac:bd:bd:46:22:96:5d:2c:cc:d3:20:2d:db:
b1:9c:c2:2f:c6:39:41:a0:5f:5a:e7:82:c9:16:66:09:ad:23:
ba:8f:25:f2:bd:5e:2f:fa:80:d3:05:1b:bc:61:da:ca:34:c5:
9e:27:87:7b:dd:71:52:71:bd:c8:0e:86:e4:09:81:c0:08:88:
24:80:f6:5b:60:19:60:72:60:c1:d9:76:b1:ce:19:01:cc:59:
34:ab:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org