Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/2f0417ef20e47fe1cb819c94787001ceb64c9795.roa
File: 2f0417ef20e47fe1cb819c94787001ceb64c9795.roa (raw, json)
Hash identifier: GKoJEE1ZleB5kMVn9T/QXzWURaweBrOeUIOrVDZuHCU=
Subject key identifier: E9:C8:8B:80:BC:A8:B9:0B:A4:33:E4:10:65:ED:91:57:3C:43:65:FC
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 1F77C3
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/2f0417ef20e47fe1cb819c94787001ceb64c9795.roa
Signing time: Fri 24 Mar 2023 16:22:11 +0000
ROA not before: Wed 17 Mar 2021 14:41:42 +0000
ROA not after: Tue 24 Mar 2026 14:41:42 +0000
asID: 52468
IP address blocks: 190.99.117.0/24 maxlen: 24
190.99.118.0/24 maxlen: 24
138.117.140.0/24 maxlen: 24
138.117.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062275 (0x1f77c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 17 14:41:42 2021 GMT
Not After : Mar 24 14:41:42 2026 GMT
Subject: CN=2f0417ef20e47fe1cb819c94787001ceb64c9795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:29:cb:44:e4:9f:f0:75:bf:9b:19:c5:0f:
5c:8c:08:49:be:3d:78:81:18:11:47:45:f7:55:a7:
88:db:54:3c:ed:de:bc:a3:8d:88:d6:37:89:e6:b3:
5b:ea:48:cb:cf:c3:09:ca:d5:a2:39:87:19:2e:6d:
32:96:b6:b1:5d:41:25:c6:5b:da:8e:bd:06:f3:e3:
a9:a3:ad:20:e8:ad:04:26:c7:f9:b9:39:a5:90:52:
d2:eb:ce:1f:f6:ab:f5:6f:16:01:45:ee:d3:7a:c7:
24:6c:43:4d:14:8c:bc:d3:f1:6b:17:53:39:c0:78:
4f:c7:18:04:5f:45:5b:7a:38:4e:4a:e5:ed:05:bf:
4e:4e:c6:ea:02:9f:a9:87:f5:bf:e3:fd:ae:11:19:
ab:68:7d:1e:e2:06:29:ef:fe:c3:f1:6d:3c:34:f8:
5b:ed:3b:d1:03:5b:46:44:7b:cf:02:56:59:c1:1f:
9b:9c:57:7e:7b:a6:61:ac:bb:ab:13:df:2e:27:c8:
2b:2b:84:bf:8b:85:8d:55:37:e3:8f:7a:a9:a7:d1:
c6:64:82:78:04:d0:90:15:5f:dd:d9:6e:f8:b3:1e:
7d:0a:b0:76:da:5b:e0:18:cf:86:87:c6:c0:36:19:
cd:82:08:db:71:2b:e8:19:9c:6e:9d:95:e4:53:d4:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C8:8B:80:BC:A8:B9:0B:A4:33:E4:10:65:ED:91:57:3C:43:65:FC
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/2f0417ef20e47fe1cb819c94787001ceb64c9795.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.140.0/23
190.99.117.0-190.99.118.255
Signature Algorithm: sha256WithRSAEncryption
34:b6:48:99:40:e2:c7:2c:f6:64:ca:46:87:f1:87:89:18:a3:
79:65:61:21:ba:06:c0:bc:40:44:f1:4d:c2:22:6c:2e:4c:95:
56:58:91:e1:6e:fb:ab:35:4a:5b:ca:66:84:d4:a3:8f:3a:d9:
b7:1b:a6:1b:f0:61:de:74:f2:f3:82:f4:7c:bb:7d:a3:ed:28:
e2:61:fa:c2:24:c8:1a:53:47:94:ca:12:50:1e:33:5b:11:85:
07:7b:e2:9a:04:6f:a1:3b:d6:d9:9a:09:68:4f:7f:56:3e:2b:
e1:7a:34:65:e9:c8:db:d5:92:44:78:86:58:79:14:c1:dc:8c:
c8:df:f6:74:6e:d6:ed:80:1d:12:cb:bb:b5:2e:ff:07:76:9d:
85:00:fc:5a:f1:af:a7:88:e5:90:7c:76:52:c9:7d:f6:b3:e4:
4e:ee:cf:c7:d4:f6:f1:29:57:99:22:f3:ec:d2:a3:6c:6d:77:
64:89:8f:07:3b:44:f2:4d:e0:58:b7:37:ce:c9:9e:c2:2c:bb:
7d:5c:cd:04:df:dd:38:a0:0d:18:31:12:f2:79:d4:2c:f0:07:
f1:00:fa:f1:b4:c4:68:7e:9c:17:7c:31:14:eb:2d:ce:37:8f:
7c:f4:27:b6:6d:32:fa:e7:3f:b5:69:b0:2a:78:80:d2:60:97:
42:97:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-ams.rpki-client.org