Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/c20ce54b2db2c55f4e2ba7033f4a9e3ea24afd61.roa
File: c20ce54b2db2c55f4e2ba7033f4a9e3ea24afd61.roa (raw, json)
Hash identifier: gezG3mc/W6Pip3LL8LJsDHnH/BmC11vIB+fZGntXj04=
Subject key identifier: E6:7C:DA:C6:73:64:CE:83:B7:FF:E9:62:02:8D:3D:30:C2:6A:75:F9
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 25B64F
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/c20ce54b2db2c55f4e2ba7033f4a9e3ea24afd61.roa
Signing time: Wed 28 Jun 2023 22:42:40 +0000
ROA not before: Tue 27 Jun 2023 22:42:40 +0000
ROA not after: Sat 28 Jun 2025 22:42:40 +0000
asID: 26619
IP address blocks: 190.90.25.0/24 maxlen: 24
190.90.26.0/23 maxlen: 24
190.90.35.0/24 maxlen: 24
190.90.155.0/24 maxlen: 24
190.90.156.0/22 maxlen: 24
190.90.160.0/21 maxlen: 24
190.90.56.0/22 maxlen: 24
190.90.178.0/23 maxlen: 24
190.90.184.0/23 maxlen: 24
190.90.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2471503 (0x25b64f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Jun 27 22:42:40 2023 GMT
Not After : Jun 28 22:42:40 2025 GMT
Subject: CN=c20ce54b2db2c55f4e2ba7033f4a9e3ea24afd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9b:ce:cf:75:ee:2c:59:45:76:92:ac:b6:d3:
af:01:88:66:52:19:f7:a1:b9:55:a6:22:7b:ed:16:
ea:75:1c:03:6e:15:a6:d8:4f:80:db:c0:01:94:33:
ad:1f:1c:8a:a1:b8:fc:f3:ce:89:2e:66:b4:c4:0f:
be:4d:f4:1a:c4:7c:f8:21:54:91:cf:2e:39:93:d9:
7e:34:10:52:57:88:09:85:f9:2c:a5:bd:3c:d5:4e:
8d:71:ce:67:a3:f2:f9:c8:a7:10:62:e8:e6:1d:b5:
35:61:65:d0:88:bc:e6:e0:c8:d4:a7:a9:c1:a3:88:
e9:24:3d:4c:4f:34:d8:6c:85:e9:47:b9:db:db:5c:
72:6b:ac:a8:ec:a9:d3:dd:3f:e0:06:a4:86:8c:fd:
e6:cd:b3:05:e5:11:24:30:c5:4d:35:64:7f:13:bc:
82:60:86:2a:60:74:40:3e:56:68:f1:4c:ac:9c:44:
5f:18:4d:40:8e:10:79:b7:47:ec:50:37:6e:be:0c:
de:48:b7:63:8f:ea:11:cd:36:25:6e:b4:8c:39:47:
aa:52:c0:c1:e8:4e:dc:74:cc:42:0a:18:78:03:93:
b8:28:df:b6:b3:03:f2:06:8a:20:22:b0:34:bc:83:
c0:3a:16:1c:40:07:7a:55:cb:d3:72:06:54:82:e3:
db:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7C:DA:C6:73:64:CE:83:B7:FF:E9:62:02:8D:3D:30:C2:6A:75:F9
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/c20ce54b2db2c55f4e2ba7033f4a9e3ea24afd61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.25.0-190.90.27.255
190.90.35.0/24
190.90.56.0/22
190.90.155.0-190.90.167.255
190.90.178.0/23
190.90.184.0-190.90.186.255
Signature Algorithm: sha256WithRSAEncryption
02:1e:46:99:6f:e8:1b:d1:4e:db:15:bd:fa:7f:09:0c:58:e0:
78:9c:9e:dd:0e:9f:2a:d1:c3:63:ea:ce:ed:02:ac:c5:e8:53:
a1:07:50:f3:6e:9f:26:85:dc:9f:b4:7d:05:cd:c6:9a:e5:4e:
d7:a9:a5:ac:f5:df:9e:50:57:2d:4a:8d:b0:ae:e9:01:73:38:
2e:34:78:1c:57:01:b0:fd:66:b9:34:80:3d:6c:09:3d:02:1d:
d7:47:6d:0f:ab:13:89:93:14:84:cb:16:85:72:67:3d:fe:76:
03:e2:17:26:01:23:9a:cc:df:1c:8a:48:be:7b:13:e7:0e:9e:
ce:a5:29:00:0e:89:c2:43:cf:1c:ba:d2:5f:a0:72:b7:db:28:
08:11:a7:a2:13:33:10:bb:05:17:f8:bf:6f:e4:95:cb:c9:89:
6c:87:87:e9:d1:f5:e2:a2:37:c0:dc:2f:4d:2f:10:f1:49:b5:
41:35:c1:45:27:ff:d1:eb:79:79:44:b3:1d:97:aa:61:7f:1e:
8c:8a:91:3f:c3:c9:48:11:49:1f:65:b9:79:a6:5a:c2:03:71:
46:63:d3:f9:6f:42:da:83:e6:a8:3d:1d:9b:bc:bc:8b:0e:22:
b7:9d:41:8d:19:e7:a2:16:37:65:41:b1:2f:95:10:00:72:cb:
21:b8:17:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org