Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d45a3c77b099e69e260e72b76232473430efafc1.roa
File: d45a3c77b099e69e260e72b76232473430efafc1.roa (raw, json)
Hash identifier: 3WVmj43VIDFT6TBhT4IM3rd/Tc0gsHKB56vtgSw12Qs=
Subject key identifier: 5B:F3:A9:91:8B:84:E9:2D:17:4D:2D:EC:51:CF:DE:0D:FF:D5:8F:D7
Certificate issuer: /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial: 2AE3A4
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d45a3c77b099e69e260e72b76232473430efafc1.roa
Signing time: Tue 20 Feb 2024 22:47:46 +0000
ROA not before: Tue 20 Feb 2024 22:47:46 +0000
ROA not after: Fri 20 Feb 2026 22:47:46 +0000
asID: 273595
IP address blocks: 190.93.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2810788 (0x2ae3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Validity
Not Before: Feb 20 22:47:46 2024 GMT
Not After : Feb 20 22:47:46 2026 GMT
Subject: CN=d45a3c77b099e69e260e72b76232473430efafc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:f5:c1:76:13:d2:4b:aa:d5:21:68:39:47:
32:9b:f3:4f:22:15:60:f7:5f:1f:02:6b:74:af:b4:
4e:41:70:56:53:9d:c6:64:72:4c:8d:40:67:43:ae:
f5:1c:3c:87:02:96:33:6a:a6:1b:0e:16:60:c2:1e:
84:3d:33:01:e0:28:4d:63:8f:af:c6:b1:03:fa:13:
d3:6e:8d:6a:f4:ea:a9:25:fc:f4:ae:ac:c2:53:c8:
d8:9c:00:5d:a2:b4:79:59:bc:d1:66:36:eb:f3:c3:
1f:a5:3b:10:57:5f:56:44:21:db:aa:91:d0:a4:9f:
e1:22:1a:b1:cc:97:36:03:b7:e1:84:f6:59:01:6c:
68:9e:a5:19:6f:ad:81:72:4f:37:9d:b8:2d:3f:95:
e8:e2:04:3f:75:b5:67:de:6f:2c:2a:c5:7b:e5:8e:
59:86:12:0c:db:3d:59:cb:81:9b:ef:9a:80:30:e0:
e7:b9:d3:8e:8d:e1:41:41:cf:cc:ce:38:7c:c7:c8:
b7:c1:5b:ee:5f:8a:be:05:0b:82:d1:12:77:69:22:
28:9e:96:83:fb:df:4e:3f:c6:0a:3e:03:1a:52:95:
d9:2c:70:2c:28:a0:76:9b:b0:71:b8:d3:9d:67:e1:
10:23:da:8f:1e:1f:74:52:cb:73:c4:ca:a7:1c:f0:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F3:A9:91:8B:84:E9:2D:17:4D:2D:EC:51:CF:DE:0D:FF:D5:8F:D7
X509v3 Authority Key Identifier:
keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d45a3c77b099e69e260e72b76232473430efafc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.89.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:09:86:c4:8d:7a:96:f9:e1:06:b9:fb:78:6f:97:b3:3b:59:
3c:ae:1e:68:9c:e2:f0:36:f1:fe:f0:51:5a:49:3e:3c:fe:c4:
4b:82:41:5c:00:bc:56:89:55:22:07:b8:df:4f:e7:15:74:7b:
99:31:b3:fd:17:80:d2:76:ee:fd:a7:7c:44:8b:7a:a5:1c:25:
23:40:64:a1:44:bf:fb:a3:d7:cd:5b:fb:46:45:ea:d8:c4:97:
6f:90:d2:d4:9b:f8:2f:0d:9a:af:2e:7f:9f:ec:0e:a0:c5:97:
d4:67:3b:6c:b1:f2:b7:18:7a:90:50:3c:80:a1:91:e2:b4:d3:
d6:47:e0:d6:4b:5c:9f:d1:69:cc:69:5c:6c:0c:51:76:eb:f5:
ab:92:0c:36:54:85:15:54:08:b9:c2:f8:0d:8a:ef:00:04:fa:
8f:06:fe:e8:c4:da:aa:cc:1d:5f:47:f8:2d:f4:83:9c:5c:34:
72:51:b6:12:08:5b:e1:0a:fe:c3:b4:19:10:e6:4a:ed:58:db:
d9:4e:c4:33:37:c3:9d:89:8e:8d:fa:ae:fb:4d:bc:ab:8e:6b:
4d:6b:f8:3a:97:93:64:ab:b5:df:d8:70:43:98:20:78:f7:76:
c4:58:4b:d7:fe:db:94:1a:16:59:18:58:4c:00:ed:48:dc:36:
87:ab:b0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org