Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/faf722514043171d73a80f0a90d4dda06096a099.roa
File: faf722514043171d73a80f0a90d4dda06096a099.roa (raw, json)
Hash identifier: ZBLLbmYb3DsqgtBx+jjYyBdGdTwIb8tWzcwOqTluEYw=
Subject key identifier: A8:09:81:0D:CE:56:35:6A:AF:26:0F:91:CE:8B:D9:43:77:96:AF:8D
Certificate issuer: /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial: 266484
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/faf722514043171d73a80f0a90d4dda06096a099.roa
Signing time: Tue 09 Jan 2024 05:57:39 +0000
ROA not before: Tue 09 Jan 2024 05:57:38 +0000
ROA not after: Fri 09 Jan 2026 05:57:38 +0000
asID: 21575
IP address blocks: 190.187.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516100 (0x266484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Validity
Not Before: Jan 9 05:57:38 2024 GMT
Not After : Jan 9 05:57:38 2026 GMT
Subject: CN=faf722514043171d73a80f0a90d4dda06096a099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:26:8d:a0:84:59:6a:89:0a:7a:bd:0a:52:
f7:f4:6a:64:92:99:5f:7c:4b:41:63:e1:88:cd:1a:
92:d8:47:df:d5:aa:48:35:44:b7:b1:a2:cd:db:38:
27:42:a4:62:ff:40:f6:fd:7c:c6:ef:3e:c2:8f:f7:
8a:10:de:53:3b:0f:f4:ea:dc:7b:ea:22:a4:a6:a0:
5c:6b:14:e1:fd:53:65:35:de:bf:e8:40:9e:7b:bb:
f6:56:ec:78:e6:5d:bb:b1:c6:c5:87:88:37:53:36:
21:16:35:2e:b2:39:d9:71:0b:0e:b3:36:63:e8:ed:
ac:90:12:85:ff:43:84:7f:f0:3d:4e:e7:f3:36:23:
51:62:8f:c8:9b:4c:f8:3b:99:22:38:77:0b:c7:d4:
78:3f:25:5f:04:a3:38:a0:d9:ac:8b:50:e4:03:ba:
ff:b3:4f:15:b0:38:05:43:85:4a:f1:af:dd:fe:c6:
75:8c:5c:1e:c7:07:2b:74:e3:e1:2b:32:40:af:4c:
1a:df:96:48:16:bd:27:d8:c7:9b:4d:6f:86:41:55:
f3:83:93:8d:31:10:f8:62:a4:c1:28:85:cd:b4:15:
b8:9b:62:7a:94:32:9b:8d:1b:db:3c:cc:10:6e:d9:
aa:93:7c:bc:a8:d7:71:c8:fc:26:82:c1:8a:a6:27:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:81:0D:CE:56:35:6A:AF:26:0F:91:CE:8B:D9:43:77:96:AF:8D
X509v3 Authority Key Identifier:
keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/faf722514043171d73a80f0a90d4dda06096a099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:bc:92:aa:66:63:93:8e:51:ac:35:38:f7:c7:9f:8d:48:1b:
f1:92:5a:9e:16:0d:e8:4d:d1:e7:80:1f:d8:1f:50:84:a5:d9:
6e:a5:52:87:03:e7:96:1b:1d:aa:04:db:4b:be:24:1b:f7:aa:
b9:ea:4b:8c:9f:bd:10:21:57:f5:80:da:24:4f:5a:05:d7:b9:
8a:9b:ac:dc:7f:0d:f5:11:80:83:ff:96:b5:02:90:88:71:67:
70:82:30:66:ec:c9:2b:66:fd:f3:61:0e:98:25:cb:39:b3:2c:
e0:93:f6:06:6d:fa:78:03:99:1d:c2:3f:73:fd:94:b8:0d:17:
0e:8b:fc:b5:41:2d:d8:3d:fb:98:aa:3e:f5:c5:98:76:74:42:
4d:05:ef:a1:0c:6c:cc:7e:ed:e3:8f:6e:8d:cd:b0:7d:ff:9b:
46:dc:d0:00:98:5c:d3:17:37:c3:e7:2d:a9:28:51:88:ba:25:
84:1d:49:de:2b:64:d6:e9:a3:25:2f:80:cb:85:17:6f:fc:f1:
5f:ca:c7:84:37:62:ff:29:37:e5:75:76:c3:ab:c7:73:d4:d9:
cf:9f:f9:bc:54:c3:55:c5:ee:06:4b:d3:12:30:43:ae:7e:88:
7d:95:54:93:d6:59:80:b7:14:69:8d:ba:5f:b8:b1:79:df:82:
f0:58:47:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org