Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/d22d045933e4fcbc4951040ae346a238964704fb.roa
File: d22d045933e4fcbc4951040ae346a238964704fb.roa (raw, json)
Hash identifier: 83mTVh27knrmElYgtPMY5Bw1xjK2nFVm2SIWktzidoY=
Subject key identifier: F4:8C:1A:5D:64:F0:26:0D:CA:7C:DD:FC:5B:D5:39:CC:EF:E2:4A:4A
Certificate issuer: /CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Certificate serial: 2212DC
Authority key identifier: 5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/d22d045933e4fcbc4951040ae346a238964704fb.roa
Signing time: Sun 17 Sep 2023 21:14:02 +0000
ROA not before: Sat 16 Sep 2023 21:14:02 +0000
ROA not after: Wed 17 Sep 2025 21:14:02 +0000
asID: 20454
IP address blocks: 190.112.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233052 (0x2212dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Validity
Not Before: Sep 16 21:14:02 2023 GMT
Not After : Sep 17 21:14:02 2025 GMT
Subject: CN=d22d045933e4fcbc4951040ae346a238964704fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:60:ef:d4:77:de:f9:af:f7:bb:86:3d:a3:
99:f8:19:97:4f:a5:67:86:00:a0:bf:a7:b1:94:4a:
d7:bc:f0:59:c6:2e:7e:22:94:a8:2b:7e:1b:9f:77:
88:d7:1f:27:d0:32:c4:c6:3d:8f:a4:78:60:97:85:
b7:dd:29:7f:e8:b6:87:ee:55:c5:0c:a1:57:2e:51:
a1:c3:9b:ca:be:65:6e:3a:3d:fd:d4:48:d1:58:b7:
34:07:a0:15:52:f2:e4:bb:eb:33:fc:43:ee:f9:a4:
b4:84:0c:d9:47:7b:35:78:a6:f5:59:49:66:54:b9:
c6:f2:74:ce:32:9b:a6:5e:37:53:16:1c:e6:a5:5e:
d5:fa:28:5c:39:05:3c:8f:28:1e:e5:3b:85:3a:c2:
32:c1:3f:34:c9:5b:ef:31:24:97:dc:3d:90:2c:a5:
6d:8a:b3:2f:f6:a0:59:71:07:a6:a8:1e:8d:aa:a9:
aa:1b:c2:13:48:9e:ff:23:d3:96:b8:07:dc:9f:51:
0b:c9:b7:94:1b:c0:22:e8:aa:d0:6d:ae:64:26:29:
86:99:36:34:39:aa:39:60:7a:d3:05:50:3d:2c:23:
b6:a0:ef:6e:b3:b0:b2:47:07:8d:78:38:ff:19:bf:
2f:2f:bb:7a:3c:e5:56:10:79:2a:4f:37:ce:02:1d:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8C:1A:5D:64:F0:26:0D:CA:7C:DD:FC:5B:D5:39:CC:EF:E2:4A:4A
X509v3 Authority Key Identifier:
keyid:5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/d22d045933e4fcbc4951040ae346a238964704fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fc:35:b1:3f:42:5e:a9:15:b0:54:a7:07:35:42:14:79:0d:
05:59:46:82:4c:9c:45:9c:6f:35:2a:df:84:43:40:97:73:6c:
93:cc:77:fe:47:98:02:a4:da:0e:96:e4:b0:f7:58:f2:14:58:
26:99:0f:77:ea:4b:f8:2a:9b:37:4f:e6:25:9c:21:38:3b:80:
b3:47:7e:74:f2:bb:75:6d:fd:a4:4e:7e:de:b1:98:ee:8a:13:
26:11:08:5d:87:e5:e0:61:0a:ea:1e:16:e7:64:40:91:bc:e5:
e6:32:6a:c7:e5:e6:67:48:97:78:f8:9f:67:32:bf:87:1d:3f:
06:5e:8c:88:2f:99:3b:87:82:29:6c:ee:12:fc:0e:de:95:78:
95:07:33:54:48:bd:10:11:d6:65:22:2f:45:e1:f1:b8:3b:f5:
61:b7:66:75:78:70:52:08:10:71:a3:d1:7c:50:27:99:93:dc:
0b:90:9a:1f:50:4e:d0:33:ea:76:dd:3e:c3:11:83:3c:9c:fd:
ea:ff:c7:0b:38:f6:15:03:d5:4a:78:ac:30:1a:a1:2f:39:88:
77:5d:be:89:e5:e2:b0:4f:1c:f7:33:45:87:8a:73:e1:e6:7a:
0c:28:36:af:04:f8:72:43:55:02:c8:5a:fb:56:db:03:a4:89:
91:77:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org