Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/dcd897959fdbf35d2e4ffc634b31c4b48c76315a.roa
File: dcd897959fdbf35d2e4ffc634b31c4b48c76315a.roa (raw, json)
Hash identifier: fhAqKUT9ibiHAYl78iHpMJpcq9mNxUO43I1/Aj2lMOE=
Subject key identifier: 5A:DA:0A:B2:14:4C:75:A8:C6:9D:AA:B9:AA:1E:34:63:E9:55:B4:3F
Certificate issuer: /CN=5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed
Certificate serial: 21C7E7
Authority key identifier: AA:D3:E4:91:DA:FA:6F:0D:36:21:13:B5:B2:84:C7:CD:C9:4E:A0:04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/dcd897959fdbf35d2e4ffc634b31c4b48c76315a.roa
Signing time: Thu 22 Jun 2023 15:01:30 +0000
ROA not before: Wed 21 Jun 2023 15:01:29 +0000
ROA not after: Sun 22 Jun 2025 15:01:29 +0000
asID: 27902
IP address blocks: 190.107.64.0/22 maxlen: 24
190.107.70.0/23 maxlen: 24
190.107.72.0/21 maxlen: 24
200.93.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2213863 (0x21c7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed
Validity
Not Before: Jun 21 15:01:29 2023 GMT
Not After : Jun 22 15:01:29 2025 GMT
Subject: CN=dcd897959fdbf35d2e4ffc634b31c4b48c76315a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:f8:3a:07:3a:3f:b3:61:fd:5a:31:c9:02:
bc:a8:1b:5a:e5:42:d7:60:53:8d:08:0a:f3:25:c7:
8d:35:b4:60:b6:20:08:a1:2b:1b:88:de:d1:e9:dd:
ce:7a:0c:bb:96:dc:23:a3:54:d7:e2:73:77:d9:a2:
e2:c6:fe:43:6c:22:bb:9a:a5:cf:9e:cb:6b:1b:73:
fe:96:a9:97:37:1b:c6:3a:a7:4c:76:f6:48:66:a3:
c0:06:92:5f:30:61:9b:7c:4d:3e:76:f4:13:4b:0f:
f1:5c:1f:e2:cd:ac:02:dc:d2:83:82:50:30:af:98:
83:1a:fe:2e:84:75:bf:8c:c9:16:08:7d:95:c9:a9:
30:0d:de:0c:b7:11:cf:81:4a:12:4d:50:ad:66:c3:
39:06:87:6e:14:bd:e8:a6:34:1f:3b:ba:d7:bb:b9:
fc:1a:08:38:29:ae:a4:8b:fe:76:d2:4a:66:b5:4a:
9e:e4:28:aa:5e:51:6e:5d:e8:8d:23:d3:51:8b:c4:
43:10:4c:bb:96:69:3b:aa:36:6e:85:91:28:3a:2d:
05:08:41:ff:cf:cc:16:29:d7:0d:16:f8:f1:40:cf:
4f:30:e0:c9:29:f2:a6:04:ed:92:8a:c8:1e:ee:4e:
4b:79:1d:7d:18:8f:8a:90:46:41:ea:9f:39:5e:0a:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DA:0A:B2:14:4C:75:A8:C6:9D:AA:B9:AA:1E:34:63:E9:55:B4:3F
X509v3 Authority Key Identifier:
keyid:AA:D3:E4:91:DA:FA:6F:0D:36:21:13:B5:B2:84:C7:CD:C9:4E:A0:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/dcd897959fdbf35d2e4ffc634b31c4b48c76315a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.64.0/22
190.107.70.0-190.107.79.255
200.93.248.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:12:fe:ca:55:be:a7:96:0c:8a:34:ef:24:e0:1a:6e:61:cd:
9d:7a:a0:ee:52:58:7d:c7:5d:6a:7f:f5:fd:7d:1c:f0:7c:0c:
99:a7:11:23:a7:b2:88:07:73:66:3d:cb:11:86:fd:43:15:1c:
dc:81:d1:e7:23:f8:6a:2e:85:89:61:f7:02:c3:59:51:d6:b9:
5a:fd:8f:8f:1f:8c:13:f6:5f:45:d6:94:59:63:bf:1e:52:76:
2f:77:44:1d:7c:55:9d:3c:58:18:e1:6f:12:ff:2a:03:5a:9a:
b2:bb:78:44:c3:73:ab:1b:00:f3:8e:c0:e7:eb:a3:dc:2c:e4:
ad:2d:ff:12:8f:1b:1e:8c:64:92:99:f0:b4:cc:2e:fa:21:43:
a4:f4:f6:7e:de:c2:f7:ad:13:93:8b:23:73:05:97:5d:0e:ad:
7e:74:10:f1:93:77:40:cb:80:87:9a:a9:95:3c:31:24:15:f6:
95:ef:46:77:e1:3d:5c:ab:22:8f:59:49:6e:79:92:ab:77:08:
92:a5:c0:46:fe:fa:cd:7c:6f:18:69:fc:71:6f:b7:dc:6d:d9:
38:49:3e:00:2e:6c:9a:91:9d:f1:95:c7:2e:bb:3a:28:e9:7b:
59:81:6b:23:ba:c6:3f:3f:81:d2:27:78:03:2e:89:34:51:95:
c5:d1:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org