Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c0c93313e0ac1b6f6e5089aec4473e271638bc17.roa
File: c0c93313e0ac1b6f6e5089aec4473e271638bc17.roa (raw, json)
Hash identifier: 8xh4/CSzrIqZYVZXbho3OFGvPMxpZQtAQAbiIjPjdNA=
Subject key identifier: CF:89:BB:7E:E5:4D:87:82:17:BA:F9:01:4F:A2:27:13:40:34:33:4B
Certificate issuer: /CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
Certificate serial: 10AEF0
Authority key identifier: E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c0c93313e0ac1b6f6e5089aec4473e271638bc17.roa
Signing time: Thu 12 Aug 2021 21:43:12 +0000
ROA not before: Thu 12 Aug 2021 03:00:00 +0000
ROA not after: Sat 12 Aug 2023 03:00:00 +0000
asID: 23383
IP address blocks: 190.4.0.0/21 maxlen: 24
190.4.8.0/23 maxlen: 24
190.4.11.0/24 maxlen: 24
190.4.12.0/22 maxlen: 24
190.4.16.0/23 maxlen: 24
190.4.18.0/24 maxlen: 24
190.4.20.0/22 maxlen: 24
190.4.25.0/24 maxlen: 24
190.4.26.0/23 maxlen: 24
190.4.28.0/22 maxlen: 24
190.4.32.0/20 maxlen: 24
190.4.48.0/21 maxlen: 24
190.4.56.0/23 maxlen: 24
190.4.58.0/24 maxlen: 24
190.4.60.0/22 maxlen: 24
200.35.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093360 (0x10aef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
Validity
Not Before: Aug 12 03:00:00 2021 GMT
Not After : Aug 12 03:00:00 2023 GMT
Subject: CN=c0c93313e0ac1b6f6e5089aec4473e271638bc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:16:06:f1:65:af:11:a4:9a:be:39:e1:3c:
a3:5e:08:66:76:c8:1e:48:e5:bd:42:d4:1a:a3:a5:
ac:9f:0a:18:7c:36:ac:22:0a:cd:36:24:08:6e:c6:
ad:13:1b:4f:90:9c:a3:3c:d7:3a:66:3b:9b:d1:9a:
93:d5:fc:d4:b5:b2:88:31:29:c6:2b:f4:63:b8:cf:
3d:43:f2:12:7c:cf:b9:2d:68:ac:d1:1e:fa:1d:61:
20:1f:3b:14:3a:ec:f5:ba:34:41:7c:b0:9a:d1:f9:
24:15:33:1c:f0:b5:8e:14:81:ff:89:b5:10:82:22:
d3:30:79:25:9b:77:6e:4e:17:fb:85:ba:c5:cd:9a:
d9:18:92:73:1b:5c:e2:8c:35:b6:56:2b:b5:67:b3:
39:63:65:e1:30:05:e3:74:89:19:f9:a7:67:8a:ca:
ad:45:4d:99:17:06:cd:a7:ae:9a:9f:89:50:c8:5f:
d7:0e:1b:7c:b9:22:2b:de:1c:fe:87:0b:6f:1f:c3:
9f:49:b9:f5:e0:fb:b0:8d:3e:4b:01:88:7d:ed:5f:
97:82:06:4b:b0:46:0f:d3:ed:13:5e:58:c2:c9:29:
5e:9f:aa:ff:b3:f7:33:79:9e:97:2a:3c:3b:5f:69:
18:35:df:80:5e:9b:ab:91:c6:d8:1f:65:7c:c2:1b:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:89:BB:7E:E5:4D:87:82:17:BA:F9:01:4F:A2:27:13:40:34:33:4B
X509v3 Authority Key Identifier:
keyid:E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c0c93313e0ac1b6f6e5089aec4473e271638bc17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9fa677563ca5bfe6068216c74122a5d7cb2db27a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.0.0-190.4.9.255
190.4.11.0-190.4.18.255
190.4.20.0/22
190.4.25.0-190.4.58.255
190.4.60.0/22
200.35.165.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c9:42:75:77:e8:54:1d:d2:19:4e:26:d3:24:7d:ab:f2:86:
d9:15:c6:40:b4:f0:78:e0:93:1b:be:5c:99:06:df:11:0e:0d:
df:10:23:c5:a6:ee:40:ca:6c:86:57:1d:d5:3b:6e:aa:b2:7c:
2d:80:45:c0:15:69:fb:42:81:9d:d6:1c:ed:7d:fe:9e:1f:66:
a1:65:4d:fa:9d:1d:a9:63:04:8d:61:85:0f:c8:a1:a7:27:30:
c4:f1:f5:7c:f3:06:ca:97:21:0c:63:08:1a:01:da:a8:e6:2a:
4f:f4:6a:58:5f:03:65:9e:b9:a0:15:52:b7:37:a7:cd:87:7c:
0b:a2:fb:0f:cf:11:d6:95:4d:6d:94:6f:27:9c:4f:53:63:4a:
42:40:5b:b1:1c:47:70:2c:bf:73:a4:34:20:78:f6:c7:c3:39:
99:93:67:d8:71:88:80:d6:97:35:aa:68:0e:85:f6:2d:88:1c:
90:fc:fe:cf:4b:47:dd:12:bf:47:98:cc:11:33:7c:fd:68:e2:
74:e7:8f:99:2c:54:29:09:9f:c2:52:94:d3:1e:67:ab:71:f5:
74:1f:fa:c5:69:4b:06:8a:c9:e9:c1:c1:5d:17:70:a2:8e:f9:
d5:47:50:3c:0f:4e:96:a8:eb:cc:be:d2:cb:a1:38:d3:b5:70:
27:c4:ca:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org