Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/ed6d76a1535116f027349cc42d0aca6eed8bd14c.roa
File: ed6d76a1535116f027349cc42d0aca6eed8bd14c.roa (raw, json)
Hash identifier: sfBKv/MpPkQBROJ+Js5D+0uzy72zonF3n7WaFswcOC4=
Subject key identifier: 45:93:6A:39:42:13:DC:EB:76:81:A0:7E:67:A2:23:03:5B:9E:EA:CB
Certificate issuer: /CN=cda627952372991f835267505e212d55f4374cef
Certificate serial: 227703
Authority key identifier: 20:7D:B3:FF:9C:9E:95:99:C6:BD:51:BF:9A:8F:26:DF:84:DC:2C:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cda627952372991f835267505e212d55f4374cef.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/ed6d76a1535116f027349cc42d0aca6eed8bd14c.roa
Signing time: Wed 02 Aug 2023 08:30:02 +0000
ROA not before: Tue 01 Aug 2023 08:30:02 +0000
ROA not after: Thu 31 Jul 2025 08:30:02 +0000
asID: 394474
IP address blocks: 191.102.128.0/21 maxlen: 21
191.102.136.0/21 maxlen: 21
191.102.144.0/21 maxlen: 21
191.102.152.0/21 maxlen: 21
191.102.160.0/20 maxlen: 20
191.102.176.0/21 maxlen: 21
191.102.184.0/21 maxlen: 21
170.244.92.0/22 maxlen: 22
170.254.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258691 (0x227703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda627952372991f835267505e212d55f4374cef
Validity
Not Before: Aug 1 08:30:02 2023 GMT
Not After : Jul 31 08:30:02 2025 GMT
Subject: CN=ed6d76a1535116f027349cc42d0aca6eed8bd14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:07:77:e3:5f:91:a9:3e:7a:8c:5f:ba:3f:
54:70:08:a5:cb:2d:6b:a7:95:5b:84:b6:2a:b2:e4:
24:bd:fb:e9:85:e6:b2:5c:35:84:39:8f:9a:b9:61:
6c:53:0a:50:75:4d:82:52:8d:e7:ee:75:ab:c3:7a:
1a:be:2a:4c:53:24:b2:d2:c1:ee:e1:1b:59:31:67:
53:dd:6b:84:b2:ac:e8:6c:0c:f3:8b:d4:ff:1a:9b:
d7:3a:d8:6a:3b:d9:0a:a8:aa:eb:a3:b9:7a:d7:84:
65:7d:05:7e:d6:22:8b:d7:90:79:63:32:09:da:70:
08:44:cf:77:ec:78:13:46:76:41:d1:ad:56:67:ca:
34:0d:9e:e1:b8:40:5b:f1:ca:11:cc:51:8e:d7:94:
8c:cc:b2:a7:f4:5b:fe:00:ad:2c:2c:72:64:f0:2e:
d5:56:63:02:3e:e1:49:bf:2e:53:81:3c:ac:0d:97:
4d:47:2e:ae:24:56:e6:60:29:d2:75:7f:1e:a8:45:
b1:93:6a:28:4b:b5:11:00:83:86:b2:d5:3c:fc:7f:
f2:cc:90:86:15:8b:fa:f1:0e:ed:bb:21:c6:dc:34:
88:a9:50:9e:1f:85:77:16:2d:73:09:a7:46:97:ea:
bb:f2:bd:fd:cf:85:c1:b2:4b:bc:36:78:76:cf:84:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:93:6A:39:42:13:DC:EB:76:81:A0:7E:67:A2:23:03:5B:9E:EA:CB
X509v3 Authority Key Identifier:
keyid:20:7D:B3:FF:9C:9E:95:99:C6:BD:51:BF:9A:8F:26:DF:84:DC:2C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cda627952372991f835267505e212d55f4374cef.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/ed6d76a1535116f027349cc42d0aca6eed8bd14c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/cda627952372991f835267505e212d55f4374cef.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.92.0/22
170.254.176.0/22
191.102.128.0/18
Signature Algorithm: sha256WithRSAEncryption
45:c5:23:3d:3a:04:5b:e9:17:36:0e:66:8f:cf:e0:db:e0:0f:
78:c8:8f:73:82:eb:f1:18:64:2e:41:8f:50:e9:87:d2:80:59:
69:98:26:34:65:58:65:03:e4:dd:9c:10:31:d5:f0:ad:c9:11:
1f:45:1d:d0:aa:48:e8:7a:11:e5:e9:64:b6:a9:b7:7b:73:fa:
e2:b5:58:28:34:c3:e5:33:b3:9f:0c:2b:8a:58:43:af:86:ac:
31:bb:e8:db:9d:1f:f7:f6:4c:3d:f2:1f:f7:a6:2c:f3:b6:5b:
d8:da:ac:95:e6:97:ba:29:51:8b:7d:21:58:00:5f:ae:53:32:
44:79:42:f9:fe:5f:72:3f:43:4c:79:42:64:59:58:bf:e9:13:
58:2e:bf:cb:f4:c8:c3:a4:c5:b9:41:c7:79:bc:67:9e:f5:f3:
ea:f1:1a:d3:4d:fe:77:88:f9:ad:b7:03:5e:9a:83:aa:d6:69:
da:74:81:4d:49:6e:f4:41:6c:3a:8b:6d:c4:5c:f2:e7:2c:e2:
f9:31:d2:3f:21:9b:25:fe:a3:3f:8b:db:93:68:ec:e3:0a:26:
18:3e:c8:da:bf:04:0b:67:04:55:2b:75:a0:16:57:80:cc:4e:
99:1f:6c:dc:1f:01:1c:72:16:c9:54:b3:df:2b:81:f3:c5:f2:
e8:97:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org