Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/74d9bc4b8bae9fa88656b25c9fab80fadba6bf21.roa
File: 74d9bc4b8bae9fa88656b25c9fab80fadba6bf21.roa (raw, json)
Hash identifier: 0kVJRO9SZ3Mm0NcSAci4x+HKvA2GyyEQlq1Jxf0EJlM=
Subject key identifier: 64:CE:9C:71:A8:11:84:4C:9B:3E:43:08:0C:E0:75:EF:F6:80:10:50
Certificate issuer: /CN=962886d2caf49497dff544bb6ba251bf1ffa6220
Certificate serial: 107246
Authority key identifier: EA:C5:A1:9C:82:7E:D5:4A:C3:AB:89:73:AF:0B:1F:89:D3:FF:0D:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/962886d2caf49497dff544bb6ba251bf1ffa6220.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/74d9bc4b8bae9fa88656b25c9fab80fadba6bf21.roa
Signing time: Wed 23 Feb 2022 13:26:41 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 264628
IP address blocks: 190.103.28.0/22 maxlen: 24
190.89.29.0/24 maxlen: 24
190.89.30.0/23 maxlen: 24
2803:c000::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077830 (0x107246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962886d2caf49497dff544bb6ba251bf1ffa6220
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=74d9bc4b8bae9fa88656b25c9fab80fadba6bf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:01:7c:8c:f0:34:fc:44:9f:3b:ee:5b:a9:
25:11:a1:cf:7d:26:cc:02:54:35:c9:2f:1a:e6:93:
71:73:28:78:7b:7d:7d:76:df:44:d4:9a:86:19:f4:
e2:6b:13:ea:db:d1:b4:51:4e:61:9d:5c:67:dc:86:
d2:f9:58:69:47:88:af:f8:c2:05:f8:92:7e:38:c3:
e9:27:fe:f2:32:d4:db:c8:2d:20:d3:8d:33:f9:b0:
a9:0d:77:46:31:64:b2:98:5e:11:63:76:8a:fc:34:
5c:d8:ab:b1:b9:da:b9:7f:40:8f:48:e4:2a:d1:85:
cf:40:da:f6:a8:c7:50:63:a4:e1:60:de:10:01:6a:
be:93:4c:d7:98:c7:82:1b:18:5a:38:d6:19:5c:84:
29:70:e0:d5:56:a6:24:ba:23:29:99:94:28:07:e4:
99:9d:65:a8:b6:a3:82:ce:86:19:3c:41:5a:e8:7e:
af:df:30:a3:d3:af:de:7b:d8:86:94:e1:2e:da:55:
4e:46:6a:ad:40:e8:0c:f5:ac:fe:1a:2d:75:7d:07:
ec:a7:e0:23:70:b3:30:08:26:4c:3a:02:c0:51:02:
a3:95:da:a9:f2:5e:e1:59:eb:a8:87:6a:0c:d9:1c:
b9:b9:5b:7f:6f:c1:d4:39:f4:91:42:2a:ab:d6:70:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:9C:71:A8:11:84:4C:9B:3E:43:08:0C:E0:75:EF:F6:80:10:50
X509v3 Authority Key Identifier:
keyid:EA:C5:A1:9C:82:7E:D5:4A:C3:AB:89:73:AF:0B:1F:89:D3:FF:0D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/962886d2caf49497dff544bb6ba251bf1ffa6220.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/74d9bc4b8bae9fa88656b25c9fab80fadba6bf21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/962886d2caf49497dff544bb6ba251bf1ffa6220.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.29.0-190.89.31.255
190.103.28.0/22
IPv6:
2803:c000::/32
Signature Algorithm: sha256WithRSAEncryption
30:7f:a6:52:04:eb:3a:74:3f:cd:6f:71:c2:5a:62:f3:73:a6:
27:fa:c7:01:c4:04:44:ee:fe:5e:d1:2a:4a:b2:80:08:a3:6a:
70:37:1a:25:c8:17:9b:6a:41:fc:be:c1:d9:ce:b6:e1:ea:fd:
d3:b6:aa:af:f8:c4:f1:f0:73:cb:e0:63:95:b2:40:1f:cb:40:
fc:15:7e:51:41:b6:d4:8c:36:7d:d9:7f:37:34:bd:73:78:04:
2f:53:b0:23:e3:9b:6f:be:02:87:ca:38:2a:fe:02:89:46:41:
05:a2:43:8a:bc:ab:62:17:bc:67:c6:6e:2c:ff:ca:77:7f:96:
3c:36:8b:62:f5:f9:3f:51:cd:b9:40:06:33:40:f2:ff:ff:a7:
12:05:8b:28:ce:e0:c5:ca:90:81:e8:63:6a:74:48:5d:ce:88:
2d:ad:ca:8c:13:8c:8c:ed:e6:e5:c9:6c:c4:16:0b:53:fd:36:
48:2c:6c:1a:fc:60:bb:e1:65:4f:83:30:e4:63:99:84:e5:12:
34:47:44:f3:92:7f:80:1b:7e:91:22:26:6d:e6:80:7d:ec:60:
26:67:72:71:3a:7e:11:72:2d:c2:4e:92:f8:51:5c:8f:59:e3:
4a:2a:61:9d:93:4b:64:df:ef:3e:8f:e8:28:ee:a5:ff:bf:0c:
28:6e:2b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org