Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4fb3191330dabb5c01646a59a921dab3f41832f7.roa
File: 4fb3191330dabb5c01646a59a921dab3f41832f7.roa (raw, json)
Hash identifier: kU/x8nZMeL1aL2IeAWIvbbRjn1m1t8mikjZy0zRP/HE=
Subject key identifier: 91:C7:E6:FC:9D:68:29:6C:35:96:29:D8:3D:C1:E2:A2:F5:CD:D2:DA
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 0DCAE3
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4fb3191330dabb5c01646a59a921dab3f41832f7.roa
Signing time: Wed 24 Mar 2021 14:34:58 +0000
ROA not before: Wed 24 Mar 2021 14:34:57 +0000
ROA not after: Tue 24 Mar 2026 14:34:57 +0000
asID: 22368
IP address blocks: 190.252.104.0/23 maxlen: 24
190.252.106.0/24 maxlen: 24
200.21.234.0/23 maxlen: 24
200.21.236.0/23 maxlen: 24
200.21.238.0/24 maxlen: 24
179.33.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903907 (0xdcae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Mar 24 14:34:57 2021 GMT
Not After : Mar 24 14:34:57 2026 GMT
Subject: CN=4fb3191330dabb5c01646a59a921dab3f41832f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:f7:9b:a5:e1:bd:0e:03:c7:a7:9d:56:a1:
2b:5a:c5:13:0e:3d:1a:09:9a:f0:bb:0b:51:27:03:
29:c8:db:51:46:9e:c3:db:73:33:e5:46:44:80:4b:
48:0e:48:b7:0e:bd:4c:5b:c6:81:02:a4:80:06:5b:
f8:2b:1a:fb:b8:10:af:19:a5:31:6a:ad:70:c2:3b:
ec:48:6d:9a:31:e0:ed:20:4b:7f:b2:67:ea:36:ac:
90:4b:fe:12:fa:35:56:6d:13:fd:63:60:4e:ba:2e:
52:19:e8:b6:69:26:4e:45:53:b8:a5:02:1d:cc:10:
b7:7e:15:df:86:76:af:51:c3:f0:ac:fc:dc:64:d9:
15:0d:ca:0c:3a:9d:4d:8e:f4:5d:bc:0a:95:a1:f4:
16:d2:30:cb:2f:e7:cd:e4:e1:6f:96:45:e4:bc:22:
f1:dd:2c:52:3f:94:f3:92:45:ab:e9:78:0e:8d:fe:
2f:45:7e:ca:80:a2:25:bb:07:cd:ca:dc:49:16:dd:
db:54:5b:bb:06:88:34:54:a8:04:b3:61:a4:f6:5f:
d2:dc:2b:4e:77:14:d2:51:0f:f8:ca:ec:85:33:8d:
7c:94:12:25:69:b8:5b:55:1f:99:70:bf:d0:1e:f4:
a3:e6:13:2b:1c:f2:4d:4f:61:75:d3:65:02:3c:36:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:E6:FC:9D:68:29:6C:35:96:29:D8:3D:C1:E2:A2:F5:CD:D2:DA
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4fb3191330dabb5c01646a59a921dab3f41832f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.33.109.0/24
190.252.104.0-190.252.106.255
200.21.234.0-200.21.238.255
Signature Algorithm: sha256WithRSAEncryption
23:87:f2:c3:c0:4b:2d:2a:99:f8:ac:86:af:29:6a:db:ef:fd:
16:a9:9e:c4:13:d6:08:34:ba:cd:7a:8e:cc:5c:0e:46:fd:de:
65:7d:68:53:5c:45:08:a3:fb:dc:5a:e5:9d:38:5d:cc:6c:2d:
63:6d:28:39:9b:99:11:76:69:93:b9:17:f2:e0:b8:e1:c0:6c:
7a:96:8d:3c:55:57:62:69:36:30:e6:81:c0:e8:98:83:38:49:
50:64:e4:b7:d3:64:14:a8:23:2c:1a:fc:f8:69:e8:b6:81:b8:
c8:22:1f:2a:e4:d1:5e:87:5c:12:f3:19:c9:6b:17:ed:8a:9e:
ef:aa:09:35:af:da:79:26:7d:e8:d8:fb:7e:21:31:22:c5:0c:
fe:45:d3:9d:96:50:44:da:dd:0b:37:bd:6d:49:21:c1:03:ae:
9d:a2:09:74:e5:06:b6:fd:f2:02:b9:cb:16:1f:00:8d:a5:95:
86:af:4e:4f:7b:f6:78:7a:d1:c5:64:35:3f:1f:6e:91:ca:49:
a8:81:99:52:0f:e1:73:b4:a4:b5:6c:39:9d:0b:c2:2a:25:d5:
d3:4b:88:fc:fe:22:25:e9:0d:39:3b:a9:d4:8d:15:f0:37:81:
53:ba:ec:ac:a0:b4:46:72:4c:9d:1c:64:2c:3e:7d:4a:e7:9d:
c2:0f:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org