Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9552d191a08082b53a75a7078133088f50d61857.roa
File: 9552d191a08082b53a75a7078133088f50d61857.roa (raw, json)
Hash identifier: OC6EmzlzVQXGdqsR3YplfpT4akdzzqgPC6GdGkRaRCw=
Subject key identifier: 78:29:E3:D1:10:75:71:A1:77:35:D2:21:0E:53:30:37:51:B8:93:CD
Certificate issuer: /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial: 219613
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9552d191a08082b53a75a7078133088f50d61857.roa
Signing time: Thu 15 Jun 2023 16:42:09 +0000
ROA not before: Wed 14 Jun 2023 16:42:09 +0000
ROA not after: Sun 15 Jun 2025 16:42:09 +0000
asID: 23383
IP address blocks: 190.4.0.0/21 maxlen: 24
190.4.8.0/23 maxlen: 24
190.4.11.0/24 maxlen: 24
190.4.12.0/22 maxlen: 24
190.4.16.0/23 maxlen: 24
190.4.18.0/24 maxlen: 24
200.35.165.0/24 maxlen: 24
190.4.20.0/22 maxlen: 24
190.4.25.0/24 maxlen: 24
190.4.26.0/23 maxlen: 24
190.4.28.0/22 maxlen: 24
190.4.32.0/20 maxlen: 24
190.4.48.0/21 maxlen: 24
190.4.56.0/23 maxlen: 24
190.4.58.0/24 maxlen: 24
190.4.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2201107 (0x219613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
Validity
Not Before: Jun 14 16:42:09 2023 GMT
Not After : Jun 15 16:42:09 2025 GMT
Subject: CN=9552d191a08082b53a75a7078133088f50d61857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:7a:1a:1a:31:15:65:9e:69:d8:eb:4a:e9:
a5:22:01:ca:3e:67:da:74:d2:8a:67:35:7e:4d:16:
6d:64:ec:26:aa:64:90:bf:27:c3:0a:1b:c9:1a:ff:
60:63:2d:17:33:00:14:03:f7:66:56:76:d1:f7:bb:
95:58:f5:6c:1d:b8:8e:d2:d4:f6:14:98:ac:2e:81:
f6:b4:eb:b4:b8:c0:2b:50:fb:21:4e:ce:4c:bd:ef:
e7:d8:4c:0c:7c:75:66:79:f0:99:be:99:51:16:80:
c5:44:fa:d3:6b:b1:e7:6b:fe:0b:a2:e1:53:93:7b:
cd:c8:4f:a6:12:ed:90:af:51:be:c6:eb:29:1f:96:
00:f1:70:6f:be:ad:92:59:13:5f:4f:d8:01:9d:3a:
4b:39:34:b5:9f:f1:fe:09:8a:ad:6b:c0:33:6b:d0:
25:37:08:4f:15:31:38:8b:d6:ae:7b:93:56:9f:24:
34:c6:1e:ef:1d:80:9a:d1:ee:eb:8c:dd:3e:4d:42:
3b:27:5e:5e:5b:1d:1d:55:3b:28:16:5a:df:f0:b5:
09:ab:74:1c:f8:50:ae:93:51:4b:ef:6d:5a:d1:d7:
e8:03:a0:26:33:19:7c:47:e3:4a:2c:ef:df:eb:de:
14:2b:24:f2:58:bd:98:a8:1a:77:c5:b6:d9:4f:93:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:E3:D1:10:75:71:A1:77:35:D2:21:0E:53:30:37:51:B8:93:CD
X509v3 Authority Key Identifier:
keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9552d191a08082b53a75a7078133088f50d61857.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.0.0-190.4.9.255
190.4.11.0-190.4.18.255
190.4.20.0/22
190.4.25.0-190.4.58.255
190.4.60.0/22
200.35.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:51:53:a9:61:47:83:8f:eb:b3:c4:c3:75:c3:c2:e0:6d:0b:
b8:ca:90:5a:e3:19:23:7d:22:59:5e:bb:01:b8:f4:c3:e3:2b:
3f:22:7a:cc:cb:c1:f8:96:08:71:ec:b5:1b:04:eb:53:22:cb:
74:d9:15:55:34:90:89:ea:a2:4b:69:5a:93:ca:ed:d8:e2:55:
71:53:6e:2d:ae:c7:89:0a:f0:18:8c:9a:2a:44:23:36:d7:f5:
f0:3e:31:1c:95:f0:69:79:89:46:76:9d:fd:b7:2f:e9:94:ac:
59:d6:53:9f:2d:aa:e5:ca:60:dc:db:90:5a:30:a8:c3:34:ed:
cd:38:28:7e:67:7d:f2:b5:29:5e:b0:5d:1d:a3:41:26:09:d1:
bd:c9:d4:fe:ae:81:c5:bd:82:05:b7:ff:0a:24:65:08:cd:a3:
15:56:31:4b:12:69:e5:42:ec:f9:e8:78:f3:8a:f7:eb:9f:e5:
50:1c:25:ca:dd:69:9a:85:cc:1a:75:fb:79:9c:fa:d0:6a:38:
ea:f6:1a:b4:29:6e:9d:ae:97:75:da:b7:58:be:90:dd:8c:79:
14:a5:4a:b0:02:bc:94:93:4d:4b:43:06:80:db:44:b6:77:af:
94:bc:af:16:da:3a:6d:db:a3:e9:f9:88:52:8d:e7:a1:8b:36:
36:ee:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org