Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/9060ba14843060f563615c822b3274c801bc9366.roa
File: 9060ba14843060f563615c822b3274c801bc9366.roa (raw, json)
Hash identifier: AlvArZCnMAfLoP7sFsqTvvp1UvkTe0YU8s+sJ7CH4ZA=
Subject key identifier: 0C:B2:0F:C6:FB:62:1D:D2:96:97:FE:C2:1C:98:0E:0B:D2:8F:B5:D6
Certificate issuer: /CN=a1e706ce8128add2b25ca400a695dc4620ac6e0f
Certificate serial: 01343E
Authority key identifier: 5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/9060ba14843060f563615c822b3274c801bc9366.roa
Signing time: Mon 15 Nov 2021 14:34:08 +0000
ROA not before: Fri 05 Nov 2021 03:00:00 +0000
ROA not after: Sun 05 Nov 2023 03:00:00 +0000
asID: 13585
IP address blocks: 190.1.96.0/19 maxlen: 24
190.11.128.0/19 maxlen: 24
190.11.160.0/19 maxlen: 24
2800:220::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78910 (0x1343e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e706ce8128add2b25ca400a695dc4620ac6e0f
Validity
Not Before: Nov 5 03:00:00 2021 GMT
Not After : Nov 5 03:00:00 2023 GMT
Subject: CN=9060ba14843060f563615c822b3274c801bc9366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:78:b9:10:fa:08:38:47:71:86:51:c6:41:
00:1d:92:0b:f6:ae:9a:ef:e4:eb:bd:20:b0:41:ea:
06:cf:60:d3:54:56:ef:2d:44:52:b4:79:14:2d:5f:
d2:8a:28:77:90:09:c6:4e:bb:ed:08:3e:b1:ac:27:
ca:09:c9:28:ba:22:f2:93:a0:60:22:ac:0c:5f:b0:
2b:5f:6d:c3:aa:9a:d1:7f:26:5c:94:38:bf:55:96:
d0:a7:80:57:d4:a4:c8:0b:a6:de:ce:c5:73:83:83:
4f:d8:43:0c:b8:69:d5:e3:af:f9:e6:a3:cf:f5:6c:
cd:90:72:76:db:d2:c4:fb:79:c2:82:11:24:05:dd:
d9:c1:05:a1:bc:d1:d0:0d:2c:77:d8:6f:42:91:24:
10:0d:79:e8:11:af:86:1e:b8:44:9e:8b:cd:eb:2b:
7d:49:70:b1:34:1b:5a:54:dd:b1:e9:be:9e:ea:94:
ed:74:5f:76:d0:96:31:9c:be:ed:63:c0:08:d8:36:
06:76:95:b9:75:6e:a8:c2:84:4c:9a:c4:56:c3:98:
e1:a3:3f:c6:0a:de:b2:30:5f:14:f4:42:da:86:3a:
d9:1c:bb:3f:18:8d:dd:49:66:a9:c1:6b:ae:eb:9e:
25:06:4a:30:32:df:b2:10:66:2e:0c:91:5e:5a:62:
a0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:0F:C6:FB:62:1D:D2:96:97:FE:C2:1C:98:0E:0B:D2:8F:B5:D6
X509v3 Authority Key Identifier:
keyid:5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/9060ba14843060f563615c822b3274c801bc9366.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/a1e706ce8128add2b25ca400a695dc4620ac6e0f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.1.96.0/19
190.11.128.0/18
IPv6:
2800:220::/32
Signature Algorithm: sha256WithRSAEncryption
41:2c:7b:64:12:b7:81:09:3c:35:ee:de:f8:90:a9:c1:7c:4b:
4f:ad:c1:e3:88:06:22:bb:c8:3e:ca:f9:69:62:6c:85:06:f2:
8e:73:10:09:c4:c6:f0:10:81:7d:47:89:30:f5:b0:15:b1:96:
68:cd:3e:e7:f4:42:5f:d9:de:4e:f0:b5:25:0e:63:d7:29:e7:
5a:4f:78:c6:a2:c6:ca:11:a4:2b:cd:6a:cf:7f:78:97:5f:94:
c2:84:b5:ae:94:a4:b6:d6:a4:74:cb:a5:6e:78:65:1e:17:24:
45:90:8d:48:47:da:3f:54:f9:ab:10:a7:e1:05:14:bd:ad:71:
e8:b0:1d:7b:c9:d6:f4:d9:b5:8b:63:96:88:fa:a6:19:11:ee:
dc:9f:23:3c:34:5e:e6:36:30:1b:f6:59:a8:1e:a6:14:03:e7:
fd:79:89:50:e3:d8:05:71:85:10:f4:0e:77:0b:c1:8d:41:e3:
7f:47:00:40:6c:76:cb:65:08:de:5e:d1:92:13:2e:91:6a:e7:
16:96:2c:40:92:97:11:c6:5f:6c:66:be:95:a3:fc:8a:97:84:
b3:27:b7:c0:ba:c6:3e:74:18:b1:05:fb:fa:32:03:9d:38:64:
06:3d:81:db:25:eb:6a:c0:1f:27:d4:b8:62:fd:6c:e9:75:ff:
1a:b7:05:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org