Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/3378fbe438b0b86b650687536493325746ff9e39.roa
File: 3378fbe438b0b86b650687536493325746ff9e39.roa (raw, json)
Hash identifier: fiCfgV/YEC9JqLxvy9GhVbX1WERm+HkCDw7x+CMVUGw=
Subject key identifier: AB:17:10:1C:5F:F5:45:8C:C6:EE:9F:A2:5F:62:97:AE:F9:24:30:C8
Certificate issuer: /CN=09a203b64348f1b177ff9d7141f0356733b30843
Certificate serial: 249868
Authority key identifier: C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/3378fbe438b0b86b650687536493325746ff9e39.roa
Signing time: Thu 26 Oct 2023 05:31:15 +0000
ROA not before: Thu 26 Oct 2023 05:31:15 +0000
ROA not after: Sun 26 Oct 2025 05:31:15 +0000
asID: 27979
IP address blocks: 190.93.224.0/20 maxlen: 22
200.73.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398312 (0x249868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a203b64348f1b177ff9d7141f0356733b30843
Validity
Not Before: Oct 26 05:31:15 2023 GMT
Not After : Oct 26 05:31:15 2025 GMT
Subject: CN=3378fbe438b0b86b650687536493325746ff9e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:16:65:cf:b4:f7:0b:0f:3f:62:eb:fa:24:
d3:5b:ea:33:1e:34:91:63:e4:0b:04:95:5c:43:5f:
16:5a:c7:98:3b:ba:47:ab:7e:9a:5f:03:55:30:6d:
8c:9b:ec:3d:d0:6f:05:b1:75:9a:45:34:10:af:b0:
35:72:43:52:7c:0d:81:41:8b:c3:90:24:df:8c:44:
fb:bb:f9:f1:b3:54:c1:35:32:22:d3:62:50:ff:79:
0e:27:2d:30:be:cb:30:23:cb:73:17:86:88:40:d7:
a8:89:f9:79:9f:49:de:80:a3:0b:c0:af:c4:f1:38:
e7:b2:f1:94:c6:73:b9:1a:41:0f:29:f3:77:fe:ff:
dc:23:1e:bc:51:bf:9c:53:69:12:0d:e6:93:e3:d5:
71:5d:22:7a:2b:fc:0c:65:7c:9c:2d:2c:18:d4:ba:
52:c0:df:40:9e:2a:6a:ac:e9:a3:72:55:30:f5:44:
bb:2b:a7:17:b1:58:cd:7e:39:51:00:55:4e:0d:6d:
82:63:78:91:84:ab:df:e5:f3:3b:66:d6:1e:47:6f:
20:81:43:82:4b:58:c2:93:d7:bc:15:ad:23:c1:9f:
0f:56:87:1f:bc:5b:97:14:47:3d:4d:c4:0a:d2:c2:
61:73:a3:5f:34:6a:74:cd:44:65:de:ee:93:d2:25:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:17:10:1C:5F:F5:45:8C:C6:EE:9F:A2:5F:62:97:AE:F9:24:30:C8
X509v3 Authority Key Identifier:
keyid:C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/3378fbe438b0b86b650687536493325746ff9e39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/09a203b64348f1b177ff9d7141f0356733b30843.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.224.0/20
200.73.208.0/21
Signature Algorithm: sha256WithRSAEncryption
c4:a1:8a:a8:b5:d5:d4:22:0f:6d:56:09:48:d5:48:3c:0b:ad:
98:9f:6e:a8:1a:86:9b:84:9a:99:5d:82:c9:8b:2f:e9:b0:93:
85:25:70:3b:bd:3a:96:37:88:db:e1:07:94:0a:a3:e3:b4:2d:
b2:f8:17:0e:a7:19:43:f7:54:79:b4:46:5c:c6:97:b2:70:78:
f9:c2:d2:c5:d7:55:68:f8:53:74:dc:61:af:f7:a1:be:bb:d5:
2b:8f:72:ee:e6:f1:e1:2d:82:d3:85:d1:72:ca:23:cb:76:a2:
e3:3e:5b:99:0f:e0:91:3f:2c:b1:36:f5:59:f6:18:04:5b:82:
ae:b6:05:03:80:e3:ce:3b:75:ff:5d:6e:95:d5:64:6e:1a:30:
fe:a0:d2:3a:94:cf:f7:fd:11:a5:b2:65:c1:39:4f:fd:d9:8a:
3a:7b:dc:9a:79:a4:32:ff:d1:05:b8:a8:a3:58:e8:e8:79:1a:
b1:b8:fe:cb:34:94:2d:2e:35:13:38:bf:e5:ee:94:a9:6a:e5:
9c:af:3c:ed:9e:84:45:e0:a0:d0:b3:1e:60:80:4c:c5:be:69:
6e:6d:e6:5e:8b:2d:46:3c:7e:41:ba:28:21:ab:cb:15:10:ad:
de:91:8b:3b:35:04:8a:a2:66:fc:35:ac:ed:b2:c0:26:fb:20:
b4:c9:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org