Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/af743ab4c0bc3754b1a4eb3ecd879f236de31680.roa
File: af743ab4c0bc3754b1a4eb3ecd879f236de31680.roa (raw, json)
Hash identifier: ckATFjYfMVTieZZEjtOtxDtIjwjq5wbD3W0jhOXJTO8=
Subject key identifier: 3E:51:1D:16:B1:49:7F:27:71:87:C8:5B:61:01:FF:39:84:39:2B:1B
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 25976C
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/af743ab4c0bc3754b1a4eb3ecd879f236de31680.roa
Signing time: Mon 18 Sep 2023 11:04:12 +0000
ROA not before: Sun 17 Sep 2023 11:04:11 +0000
ROA not after: Thu 18 Sep 2025 11:04:11 +0000
asID: 138915
IP address blocks: 190.98.163.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2463596 (0x25976c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: Sep 17 11:04:11 2023 GMT
Not After : Sep 18 11:04:11 2025 GMT
Subject: CN=af743ab4c0bc3754b1a4eb3ecd879f236de31680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:0f:f1:85:a7:62:f0:29:d7:3f:d8:e3:11:
cd:7a:40:81:b1:b1:f0:aa:64:37:c8:e8:a1:59:55:
e5:17:48:ef:98:f4:ab:e1:f9:2a:2f:29:a4:23:23:
25:04:5c:14:2d:d9:51:5c:fe:c1:69:4e:71:dc:15:
1a:6f:ab:c3:58:14:98:16:a1:16:96:14:e8:b4:4f:
1e:43:52:5d:01:57:66:1c:9b:8f:71:d6:c0:42:61:
0d:7f:43:2d:f8:4f:3e:5a:d0:74:9b:2e:8e:7a:21:
7f:b2:a9:01:01:33:d1:09:64:df:d1:24:cb:7b:28:
96:bd:72:db:30:c7:db:89:6e:fe:df:07:f7:93:76:
36:8e:d7:60:79:ba:de:19:43:8f:d4:e8:e8:7f:de:
36:0a:b4:5b:98:49:28:7d:77:81:2e:b0:0d:68:e2:
11:c2:04:58:0e:fd:d5:4f:77:91:5c:53:62:54:95:
29:7b:5f:35:01:8e:98:fb:2a:07:8f:1c:8c:ea:a3:
c2:a4:16:15:09:71:b9:14:72:b0:74:be:cd:ac:94:
81:81:c7:6c:79:d5:bc:fb:75:7b:7e:55:6f:f9:d6:
95:59:0c:2d:22:4c:bb:c4:cb:da:1e:60:2d:87:8f:
87:8a:8f:6d:7d:87:24:12:8d:83:22:b2:78:3e:4b:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:51:1D:16:B1:49:7F:27:71:87:C8:5B:61:01:FF:39:84:39:2B:1B
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/af743ab4c0bc3754b1a4eb3ecd879f236de31680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.98.163.0/25
Signature Algorithm: sha256WithRSAEncryption
13:b3:6a:5d:bc:d9:5b:8b:0f:ed:c3:ad:0f:91:58:c3:b1:49:
77:fe:79:80:0a:4b:23:1d:4c:55:48:30:ee:e2:36:fc:37:b2:
20:8d:a4:7b:c1:ed:78:cf:9a:be:30:0c:77:bb:e3:82:07:0e:
56:b8:27:7b:30:e7:73:5c:9d:62:0c:20:ca:b9:fa:4e:aa:a8:
58:75:16:cb:17:45:c0:93:1f:90:28:76:44:c8:19:5a:12:e2:
d9:f2:ce:13:0b:7e:fd:a4:a3:c9:75:33:bf:b9:e1:b7:74:2e:
b3:e5:83:31:93:98:82:29:0c:33:76:53:e9:82:37:df:a3:e0:
8d:43:c1:ba:3a:6a:e3:bd:c7:f1:b7:0b:fb:d1:cd:42:70:22:
99:76:ff:60:49:a5:06:af:f4:b8:1b:07:fa:28:08:32:83:08:
e7:a8:80:fb:a5:e8:89:54:c7:cf:8e:6e:65:c1:10:6f:b3:b2:
a4:70:36:7a:81:6b:ed:d6:aa:c2:c0:0e:9e:87:7c:b4:c8:1c:
6c:1c:7e:db:41:87:46:9f:b5:09:88:82:da:c6:b7:ed:94:aa:
59:f9:8d:ca:2f:f1:29:ac:d7:88:59:d0:91:fd:ff:19:38:4c:
b6:8f:20:3a:49:17:03:af:f0:b4:95:bd:46:ff:4c:40:a4:15:
2a:54:08:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:44 2025 by rpki-client