Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/c88c81499ad752cf19d6d400c8133b3b66f9b7a4.roa
File: c88c81499ad752cf19d6d400c8133b3b66f9b7a4.roa (raw, json)
Hash identifier: MpE7bc7mM+PDr7saK59AVGk2NsnewQ49xnESWKPs8ww=
Subject key identifier: 29:D7:C4:E5:B2:FA:DE:28:BF:8C:A8:32:8F:F0:E7:A2:56:B4:0C:AF
Certificate issuer: /CN=5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed
Certificate serial: 21EF1A
Authority key identifier: AA:D3:E4:91:DA:FA:6F:0D:36:21:13:B5:B2:84:C7:CD:C9:4E:A0:04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/c88c81499ad752cf19d6d400c8133b3b66f9b7a4.roa
Signing time: Mon 26 Jun 2023 16:30:57 +0000
ROA not before: Sun 25 Jun 2023 16:30:57 +0000
ROA not after: Thu 26 Jun 2025 16:30:57 +0000
asID: 27902
IP address blocks: 190.107.64.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223898 (0x21ef1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed
Validity
Not Before: Jun 25 16:30:57 2023 GMT
Not After : Jun 26 16:30:57 2025 GMT
Subject: CN=c88c81499ad752cf19d6d400c8133b3b66f9b7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:16:31:b8:63:5f:2b:42:97:03:7b:c1:26:82:
4f:bd:0d:a1:3d:22:34:7c:43:f9:07:42:b4:ca:99:
9a:ea:83:6e:d3:cc:8f:86:78:54:17:57:53:75:a3:
27:41:e6:28:dd:1a:d3:1e:07:21:fb:71:14:7d:d8:
47:bd:ea:1d:eb:a9:94:8a:dd:5b:dc:9d:1b:a6:5b:
de:ff:00:6c:4a:94:1f:49:09:e2:92:49:bb:1b:ba:
e0:2e:f5:b6:13:21:b6:9a:19:88:df:10:11:74:f6:
5f:45:0a:fc:2e:0b:64:fa:92:ac:1a:88:2d:0b:8a:
eb:5b:32:06:b3:ca:16:42:0d:81:fd:84:e7:ba:5f:
3c:97:8c:b4:61:43:6b:07:a4:c7:1f:41:e9:50:9c:
60:cf:f1:27:17:d6:b8:cd:ee:24:f3:87:da:30:e9:
ff:7c:99:3a:bd:57:37:cd:df:d4:56:9e:13:25:62:
a0:bd:90:79:89:82:be:d0:20:f6:46:74:89:b0:13:
01:57:67:ec:48:b5:93:b6:ca:73:9b:bf:f7:9e:c1:
e8:7f:c0:79:5e:01:d0:f4:a3:7f:41:fd:5b:f4:61:
bf:f5:ec:de:dd:b2:3a:c8:46:34:8f:4c:da:63:7f:
e6:1d:c9:f0:90:f1:d4:86:f3:bd:ee:28:73:d7:58:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D7:C4:E5:B2:FA:DE:28:BF:8C:A8:32:8F:F0:E7:A2:56:B4:0C:AF
X509v3 Authority Key Identifier:
keyid:AA:D3:E4:91:DA:FA:6F:0D:36:21:13:B5:B2:84:C7:CD:C9:4E:A0:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/c88c81499ad752cf19d6d400c8133b3b66f9b7a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.64.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:c0:80:8b:96:58:b4:98:5c:4e:7d:d3:0b:b6:7a:bd:10:98:
38:87:8f:40:34:c4:7b:a5:8c:75:b9:39:48:50:2d:b3:7d:78:
89:a0:0e:26:06:33:b6:c5:7a:bb:70:3d:64:7b:a0:38:d5:0a:
55:c8:01:98:ca:51:16:c4:48:e2:bb:2c:e4:bf:97:be:da:af:
75:b8:b1:b0:47:55:3b:3c:9d:29:3b:6e:94:3c:a5:53:03:f6:
df:bc:1c:7c:f5:a1:da:25:f6:ea:40:de:e9:07:78:04:8c:9d:
9f:25:6c:83:43:7a:68:66:0d:8b:bf:be:5d:72:ce:93:92:5c:
18:bb:7d:7b:a0:49:63:74:1c:1e:93:88:54:bf:96:74:80:4e:
15:ac:53:d8:c5:92:94:12:b1:5e:91:d3:ed:1a:5c:52:1a:df:
b9:67:46:08:25:16:2f:b2:a7:af:6e:b6:05:eb:65:ee:4f:35:
43:76:63:3e:7d:18:fd:b5:25:b6:fb:49:4f:d5:bb:68:71:ae:
c4:2e:28:98:b8:40:6b:e9:29:c3:7c:fd:f7:73:6f:b0:49:79:
9a:8c:95:47:05:ec:d4:b6:1a:29:ed:5c:f8:c1:61:06:fc:55:
4c:d6:10:f4:05:92:6b:4c:6b:29:5c:28:b7:45:3e:72:eb:79:
a0:9e:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org