Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/35ff96173ded11bf3ce9ea583ac2a87424b34487.roa
File: 35ff96173ded11bf3ce9ea583ac2a87424b34487.roa (raw, json)
Hash identifier: /8AIVaBk+nmx09IY87e7UDyS1x1vVXaYVtqkk6kv28Q=
Subject key identifier: 21:52:8D:D3:D3:5F:42:80:6D:6F:F1:2B:1E:CF:0D:81:4D:46:28:1B
Certificate issuer: /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial: 20E6CD
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/35ff96173ded11bf3ce9ea583ac2a87424b34487.roa
Signing time: Mon 27 Feb 2023 17:11:39 +0000
ROA not before: Fri 23 Dec 2022 16:26:20 +0000
ROA not after: Sat 28 Dec 2024 16:26:20 +0000
asID: 28006
IP address blocks: 190.214.5.0/24 maxlen: 24
190.214.253.0/24 maxlen: 24
181.113.192.0/24 maxlen: 24
2800:370:2a::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156237 (0x20e6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Validity
Not Before: Dec 23 16:26:20 2022 GMT
Not After : Dec 28 16:26:20 2024 GMT
Subject: CN=35ff96173ded11bf3ce9ea583ac2a87424b34487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:0d:0c:5d:76:b0:30:30:ea:ad:6d:7d:8b:
d2:c1:e1:9f:e1:6c:1d:a3:52:76:75:82:47:0d:bf:
c5:db:47:82:e1:cf:41:02:dc:94:b8:0d:fe:4d:7b:
4b:a7:e0:f0:5b:25:e6:34:36:84:8f:cc:25:09:bd:
17:9c:93:fe:06:02:2a:92:a1:c3:ca:03:d7:3a:ab:
28:c4:57:0f:f0:15:f4:f5:77:17:43:f8:fd:d6:bd:
e3:eb:de:4a:54:6e:20:eb:0d:31:ed:f0:e3:0e:e3:
7e:ec:65:3e:ac:a1:83:91:b4:44:83:d1:48:8e:12:
10:c3:6a:2a:ee:b4:0b:71:df:a2:c3:f3:be:0f:1b:
28:fc:4e:6c:58:58:cf:78:2f:e2:e8:e4:c2:1d:b5:
9b:84:7a:43:87:fc:a2:df:a2:79:4a:a5:12:44:d4:
a5:c7:be:22:0c:54:46:f9:ae:d5:a3:b8:2f:66:5d:
49:e2:4e:bd:02:25:36:da:09:b8:8d:f7:f1:fe:1c:
2b:7c:2f:85:ce:35:e0:54:e7:c3:2b:25:cb:ea:0d:
a1:7f:85:48:b6:d3:92:f0:3c:58:08:ad:d7:c2:40:
d6:08:3d:68:95:e0:44:64:4d:cc:38:4a:39:85:48:
20:ec:24:68:22:77:0f:97:03:40:9d:f7:46:8b:bc:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:52:8D:D3:D3:5F:42:80:6D:6F:F1:2B:1E:CF:0D:81:4D:46:28:1B
X509v3 Authority Key Identifier:
keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/35ff96173ded11bf3ce9ea583ac2a87424b34487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.113.192.0/24
190.214.5.0/24
190.214.253.0/24
IPv6:
2800:370:2a::/48
Signature Algorithm: sha256WithRSAEncryption
9c:37:4d:00:e0:85:f4:fa:e0:c3:ef:f1:76:64:98:ac:74:f7:
5c:0e:e6:b3:33:e8:10:99:34:fa:28:66:2e:37:cd:fa:e4:07:
bf:e1:4e:a4:b8:0f:f6:d8:ce:96:4b:60:c8:ac:90:a4:67:1e:
ec:37:41:0e:c1:df:dc:34:3b:d6:fa:d7:f9:e0:d1:03:81:22:
aa:4e:4f:b5:e0:47:fa:45:4c:96:1b:a0:d2:8f:ad:f7:58:a0:
60:d0:7b:9f:0d:41:2f:8f:de:64:76:ef:af:3d:0f:d7:7e:e2:
6a:d1:b2:dd:2f:d6:45:b1:54:f7:ae:1f:65:d8:39:cc:ee:d7:
f7:5d:b0:76:92:ac:c8:8e:3e:49:30:6c:73:5d:95:92:d1:0d:
99:49:fc:d0:60:51:20:f9:95:fd:7b:4f:99:a2:50:0b:f7:18:
09:6c:f8:02:46:a6:2f:6a:ec:29:5b:b4:b5:68:f8:3e:59:c5:
52:4f:ad:c0:88:d3:58:f9:d5:b8:7f:7d:a3:7b:54:06:91:97:
6c:1f:24:72:7c:60:17:72:cb:50:03:55:fe:c9:ee:27:75:37:
39:54:9e:43:1e:bc:56:53:23:df:31:c1:1d:86:f4:5b:97:cd:
25:df:60:d2:df:eb:72:9d:96:43:fc:4e:e1:ef:5f:41:2c:5c:
4f:0a:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org