Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/9d69dd31d594f67619d85fffedb4913f2ae60a6a.roa
File: 9d69dd31d594f67619d85fffedb4913f2ae60a6a.roa (raw, json)
Hash identifier: nHS+Nhx28QuR36nZQnonqXY0BGZERdcn+xqrvsmRQ6A=
Subject key identifier: A4:D8:38:DC:3A:4A:7B:DD:7C:4D:8F:0D:04:B3:AF:AE:F6:CF:B8:23
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 1C21E8
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/9d69dd31d594f67619d85fffedb4913f2ae60a6a.roa
Signing time: Wed 28 Sep 2022 13:55:52 +0000
ROA not before: Wed 28 Sep 2022 13:53:38 +0000
ROA not after: Sat 28 Sep 2024 13:53:38 +0000
asID: 3816
IP address blocks: 190.52.0.0/19 maxlen: 19
190.52.0.0/24 maxlen: 24
190.52.1.0/24 maxlen: 24
190.52.4.0/22 maxlen: 22
190.52.10.0/24 maxlen: 24
190.52.11.0/24 maxlen: 24
190.52.14.0/24 maxlen: 24
190.52.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843688 (0x1c21e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Sep 28 13:53:38 2022 GMT
Not After : Sep 28 13:53:38 2024 GMT
Subject: CN=9d69dd31d594f67619d85fffedb4913f2ae60a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:70:b6:8e:cc:08:1a:47:bc:2d:b9:37:00:
e2:d5:c4:b7:5e:84:d0:ff:04:8a:5c:07:0f:27:09:
8c:ef:8e:8d:b7:ce:64:05:05:58:ab:e9:22:72:8d:
74:8a:71:91:df:d1:38:33:b0:3d:dd:8e:4f:e6:03:
b2:da:5b:f2:f5:bc:66:3b:13:77:25:e0:50:13:2f:
1c:37:2a:62:ce:de:32:7c:62:e8:61:64:6e:f3:a6:
27:38:4d:c2:88:91:81:f5:54:4f:e0:40:a9:ea:65:
11:cd:08:e2:54:7b:ce:5c:5d:18:04:f5:f4:e3:88:
c8:69:be:0e:b0:1f:33:da:c1:2f:2f:22:44:6b:d2:
6f:0a:f8:12:77:6d:3e:36:0c:3e:16:85:ce:b1:44:
91:36:7e:7b:02:82:fb:62:9f:a7:88:f1:2d:82:9b:
9e:9b:0f:4f:fb:53:ab:c4:39:03:d1:85:f9:3f:fd:
35:cb:e6:08:a7:70:bf:25:ab:13:90:c9:09:26:8c:
8f:f6:41:2c:1d:1d:d9:fb:d1:5f:d8:6f:f2:3b:14:
a2:53:77:c1:b6:ad:08:2f:89:58:33:be:cb:89:9c:
33:56:ec:ea:8c:8f:96:41:76:90:b7:25:f9:22:a9:
2c:25:3c:0e:dd:e8:b8:bb:5e:cb:0c:2f:8e:79:a8:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D8:38:DC:3A:4A:7B:DD:7C:4D:8F:0D:04:B3:AF:AE:F6:CF:B8:23
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/9d69dd31d594f67619d85fffedb4913f2ae60a6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.0.0/19
Signature Algorithm: sha256WithRSAEncryption
21:5b:25:22:2e:4c:93:54:64:c2:c3:12:62:f1:fa:57:83:c0:
ab:86:07:50:64:73:00:11:70:7c:ad:72:8e:a5:bf:57:7a:e4:
49:5a:ef:4b:15:2f:7b:7d:49:57:29:bf:0c:4c:f6:19:8a:08:
09:d0:8f:04:f3:b4:a1:8a:7b:55:44:2b:f9:bc:a6:b6:16:6c:
cb:aa:2e:9b:31:7c:27:da:54:aa:d5:e4:30:c2:54:db:e4:f3:
82:84:13:f4:a7:ba:56:79:a3:39:4a:82:a6:c7:4e:25:50:6b:
05:ac:aa:fe:10:03:7e:9a:8a:5d:ea:51:d8:3d:9b:0a:af:be:
9d:1c:84:7b:ed:90:6b:9d:b4:19:c6:ed:c5:d5:1f:d7:cf:0c:
27:26:d2:c3:fc:1c:5f:be:8a:fa:fb:eb:46:0b:fb:1e:21:1f:
a2:e4:30:a6:9f:c0:be:9b:d9:67:d2:03:48:89:e2:cf:65:41:
c9:b4:ca:d4:4f:75:06:17:02:e2:9c:9d:66:c4:a8:a8:80:34:
a0:c1:9e:c8:ee:1b:ab:4e:00:01:1b:42:ce:d8:bb:ff:ac:3f:
82:d5:c1:50:1c:8c:2e:ef:d1:23:a3:62:51:8c:35:b8:93:6a:
05:5e:ee:e7:89:e2:e5:bb:46:af:fc:c9:83:87:fc:89:40:80:
30:0d:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org