Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b9f0905dfa8e43a81062b5d6664c83717d05afeb.roa
File: b9f0905dfa8e43a81062b5d6664c83717d05afeb.roa (raw, json)
Hash identifier: PWgBORT5W+gb0ED3Nv0jVQDCkMnb50vcvFgfsCmssk4=
Subject key identifier: BD:7D:0A:54:E0:30:15:09:AD:D0:46:D6:EC:FA:B5:5C:B8:D4:79:CF
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 259C38
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b9f0905dfa8e43a81062b5d6664c83717d05afeb.roa
Signing time: Mon 18 Sep 2023 11:04:13 +0000
ROA not before: Sun 17 Sep 2023 11:04:11 +0000
ROA not after: Thu 18 Sep 2025 11:04:11 +0000
asID: 28036
IP address blocks: 190.98.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464824 (0x259c38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: Sep 17 11:04:11 2023 GMT
Not After : Sep 18 11:04:11 2025 GMT
Subject: CN=b9f0905dfa8e43a81062b5d6664c83717d05afeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:8a:43:a5:59:17:b4:a3:98:54:b0:b7:48:
12:cb:ec:64:46:f0:52:5a:0f:63:b0:4f:0d:6d:28:
7d:93:1a:dd:b7:c7:03:9f:bf:4a:73:76:49:2c:e2:
75:0e:58:43:18:9c:aa:e1:50:a2:f9:4e:ff:60:af:
94:77:e8:87:c0:a8:2e:4c:32:56:cc:26:4c:ee:e8:
25:ff:b9:14:af:d2:80:e9:58:3f:ab:7a:e9:e4:47:
32:c1:62:98:59:41:77:1d:e0:e6:d6:c6:d2:f7:b7:
c8:83:fc:ae:b4:09:a9:b8:f2:02:47:cd:bd:af:03:
8e:db:3d:4e:2a:a0:34:e6:18:5e:22:f4:6a:a0:fc:
da:33:37:2a:47:7a:52:50:b9:de:bc:d2:83:5f:c6:
90:69:16:cc:cc:a6:0b:2e:d6:12:84:e9:04:35:9f:
25:b7:be:91:43:c5:de:77:dc:49:9e:10:28:6b:56:
8b:da:36:5e:f1:2e:2e:77:82:0b:ea:b8:01:44:dc:
3a:0d:00:ce:15:6c:40:21:32:cb:64:16:79:eb:1c:
47:2c:c0:a4:39:e1:19:fb:16:b9:7d:f6:18:00:86:
c5:ed:52:d8:1e:3e:5d:23:0f:04:d3:8c:1f:2c:06:
01:d1:8e:7b:42:9c:c6:9f:6c:71:bb:dc:6e:a9:a0:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7D:0A:54:E0:30:15:09:AD:D0:46:D6:EC:FA:B5:5C:B8:D4:79:CF
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b9f0905dfa8e43a81062b5d6664c83717d05afeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.98.136.0/22
Signature Algorithm: sha256WithRSAEncryption
30:32:ca:fd:83:be:db:ed:53:39:ec:a9:29:d6:03:f1:db:f9:
3c:fe:b5:96:f4:e5:1c:ee:cb:f2:6c:50:3b:03:df:51:d4:d5:
55:99:3c:7b:6e:1b:eb:1c:10:50:07:28:ed:bb:85:16:2b:be:
72:4f:8b:e1:1a:7b:fe:ce:cd:44:b8:a1:96:3b:24:6b:31:b4:
65:2d:a0:a2:7a:78:85:22:32:8b:60:c0:5d:d3:35:71:1a:ed:
fa:4f:88:e9:c5:51:cc:94:e7:d9:f4:2f:60:03:b4:33:80:a0:
43:34:c9:0a:1c:f0:45:9f:b5:18:c1:ba:d8:fb:8f:dd:6b:47:
4c:12:f4:63:2d:5b:33:bb:31:46:95:1e:2a:99:44:70:a3:49:
1e:c8:af:28:a0:2a:bf:be:8f:78:9e:91:68:38:35:27:07:6c:
3f:4f:c5:a1:fd:5e:0f:27:03:bb:2e:05:c5:73:1d:06:19:c6:
ec:15:3d:62:c4:05:85:46:25:72:5b:fa:9a:7e:6f:8b:98:22:
4e:a2:7b:82:3e:59:6f:4e:fa:3a:0b:97:a0:ab:84:36:70:24:
bd:b5:14:5e:fc:ac:b7:90:a0:d6:45:48:90:56:92:75:2b:6d:
02:5b:ab:bc:a0:2f:3e:fd:de:88:0e:65:dd:e1:7f:95:96:68:
13:04:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:41 2025 by rpki-client