Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/3df8216be12391e3b7c4e07fc28eb857fc97cc4c.roa
File: 3df8216be12391e3b7c4e07fc28eb857fc97cc4c.roa (raw, json)
Hash identifier: ml1j83BJrdwEqEPol6A9hBO6SLlHxqGXfiY29JQdz4g=
Subject key identifier: BE:87:AB:71:5C:0E:B2:73:2A:00:32:C0:FC:3B:74:AA:2F:88:D3:01
Certificate issuer: /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial: 25E539
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/3df8216be12391e3b7c4e07fc28eb857fc97cc4c.roa
Signing time: Mon 18 Sep 2023 11:36:42 +0000
ROA not before: Sun 17 Sep 2023 11:36:31 +0000
ROA not after: Mon 18 Sep 2028 11:36:31 +0000
asID: 265867
IP address blocks: 190.98.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2483513 (0x25e539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Validity
Not Before: Sep 17 11:36:31 2023 GMT
Not After : Sep 18 11:36:31 2028 GMT
Subject: CN=3df8216be12391e3b7c4e07fc28eb857fc97cc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:16:d7:f5:50:24:a9:cb:9d:7e:04:76:e5:fe:
c5:a4:e4:ba:9a:68:cd:da:fb:10:0f:8a:4d:a5:a4:
53:cd:b0:40:8c:75:93:b3:b9:47:63:60:63:fd:bf:
95:94:e4:cb:49:e8:db:1a:2c:3d:ef:5a:bc:8a:ee:
c4:7a:f3:cf:b2:83:03:cc:8d:d2:5d:ef:8d:08:61:
8b:46:75:0c:28:8c:4e:bd:ad:4b:11:25:df:ba:f7:
c4:06:aa:d8:34:7b:0d:3c:62:8e:2b:46:b8:7f:62:
e9:cf:a1:ab:c6:e7:49:4e:41:78:8e:f1:ff:9b:f1:
77:c7:3d:44:2f:32:a4:3e:bc:ff:44:c4:e0:f3:f3:
57:2b:35:a3:0c:c9:ea:ac:df:4a:cc:0d:2e:81:de:
4d:a0:26:44:b3:43:2e:03:74:69:92:73:ed:99:d5:
da:49:78:c4:e2:25:73:1d:8a:fa:76:c6:89:47:d0:
ce:96:18:25:30:97:8d:10:e1:cd:95:92:0e:eb:9d:
11:c0:36:84:fa:78:c8:b8:2c:c2:c5:35:4c:e5:c9:
ec:38:03:bb:fa:5e:b0:d0:06:8a:a1:f1:16:d2:34:
3f:b7:03:db:53:c8:5d:ff:80:1c:1a:27:09:c9:24:
1c:2b:a5:5a:74:55:b3:ed:f0:22:2a:7c:fe:f6:63:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:AB:71:5C:0E:B2:73:2A:00:32:C0:FC:3B:74:AA:2F:88:D3:01
X509v3 Authority Key Identifier:
keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/3df8216be12391e3b7c4e07fc28eb857fc97cc4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.98.128.0/24
Signature Algorithm: sha256WithRSAEncryption
68:35:34:c8:7f:49:04:09:a9:f6:7d:07:b9:c1:10:4f:ee:5e:
52:fa:1e:86:31:ce:de:f1:a7:81:b1:00:04:8c:37:8f:42:f7:
ca:db:d1:7b:81:5b:a8:41:85:23:ed:ce:e3:91:cf:b3:33:3d:
91:1b:d2:9a:f2:07:ed:af:38:4c:60:a1:fa:e7:b9:7c:16:d8:
0b:16:96:bc:38:c7:1e:88:f5:11:82:0d:15:33:94:cd:c6:dc:
23:cb:83:6d:f1:ad:11:bd:06:03:3a:0f:0d:9e:16:67:0c:33:
ea:d7:d1:88:55:9d:69:5f:54:15:3b:00:9b:1d:77:d7:bb:92:
b4:43:2b:30:6c:33:f9:97:37:8f:54:1d:72:21:1b:63:02:eb:
b0:55:df:a2:fb:90:cd:da:22:cb:25:57:c0:c9:d5:98:05:c2:
17:ca:98:ad:4f:29:d5:bd:94:2e:77:61:fc:30:23:70:28:4d:
a3:0b:e2:0f:77:0b:2f:36:f8:a1:39:45:6b:c7:99:ab:20:e3:
2a:db:4c:88:48:01:cb:08:07:c1:c6:37:f6:78:37:41:60:5e:
24:82:6c:d8:fe:b6:32:44:eb:8c:f2:98:d8:0c:79:41:08:ad:
9d:0c:79:d1:b5:f0:de:59:8c:39:36:c2:60:58:c8:f9:00:76:
fa:86:9d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org