Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/edd738c638b85e76ca218e1b9a7deeff2aa03697.roa
File: edd738c638b85e76ca218e1b9a7deeff2aa03697.roa (raw, json)
Hash identifier: HrBbroCw4P+c76uWOlOcv9HLZT6bENk/nHN9ACHHc6w=
Subject key identifier: 08:78:8C:5F:62:09:15:51:79:50:7C:BD:95:C6:69:94:17:40:C0:76
Certificate issuer: /CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Certificate serial: 222E33
Authority key identifier: 5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/edd738c638b85e76ca218e1b9a7deeff2aa03697.roa
Signing time: Wed 20 Sep 2023 14:40:05 +0000
ROA not before: Tue 19 Sep 2023 14:40:05 +0000
ROA not after: Sat 20 Sep 2025 14:40:05 +0000
asID: 20454
IP address blocks: 190.112.192.0/24 maxlen: 24
190.112.193.0/24 maxlen: 24
190.112.194.0/24 maxlen: 24
190.112.195.0/24 maxlen: 24
190.112.200.0/24 maxlen: 24
190.112.201.0/24 maxlen: 24
190.112.203.0/24 maxlen: 24
200.35.152.0/24 maxlen: 24
200.35.154.0/24 maxlen: 24
200.35.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240051 (0x222e33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Validity
Not Before: Sep 19 14:40:05 2023 GMT
Not After : Sep 20 14:40:05 2025 GMT
Subject: CN=edd738c638b85e76ca218e1b9a7deeff2aa03697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:42:fe:11:5f:1c:6c:2f:5b:2a:d2:87:65:9c:
4d:80:e8:0b:ec:ac:c2:8e:62:39:d1:4e:3a:d5:73:
29:21:79:aa:cc:ef:8e:46:97:14:63:0e:cd:0e:06:
f7:6c:b2:ba:1b:38:78:03:4f:54:61:98:00:b1:b2:
32:62:8b:34:31:e9:dd:5b:23:ad:ab:b5:49:bf:05:
2a:ea:f7:92:50:a1:58:c9:34:e6:f8:0a:54:42:1a:
83:c3:b7:e5:d8:d0:22:e2:fe:89:91:c0:0e:5a:ec:
e0:2c:7d:7c:62:01:f5:9a:fa:b6:15:8b:83:cb:99:
f8:69:98:47:dd:a3:01:6d:ec:96:ff:bf:40:22:3e:
e3:d7:53:6a:a0:f0:5d:d7:2d:ba:95:79:be:6f:fe:
12:fa:ff:64:7d:09:51:e5:4a:b2:94:4d:45:98:31:
36:a1:8a:4c:f6:fe:b8:1d:20:bc:53:16:c9:06:29:
9c:31:f3:c8:32:17:b0:6e:8e:bf:36:5b:5f:b3:eb:
8e:5f:db:60:c9:e0:92:20:47:26:51:ff:81:51:ee:
33:8e:16:c4:ca:fa:96:88:80:2e:62:d0:50:ec:b2:
87:61:7f:8c:2e:cb:4b:dc:d5:1b:46:06:f5:ea:88:
b7:d3:d2:08:52:4e:8a:f5:2d:cf:e1:4a:bb:37:59:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:78:8C:5F:62:09:15:51:79:50:7C:BD:95:C6:69:94:17:40:C0:76
X509v3 Authority Key Identifier:
keyid:5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/edd738c638b85e76ca218e1b9a7deeff2aa03697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.192.0/22
190.112.200.0/23
190.112.203.0/24
200.35.152.0/24
200.35.154.0/23
Signature Algorithm: sha256WithRSAEncryption
20:13:6e:38:29:65:44:32:71:b9:71:bf:30:29:43:5b:47:36:
35:11:91:22:b4:7c:7f:1e:ff:1b:c7:a9:2f:26:aa:63:4b:29:
70:69:ac:06:52:91:f2:42:0b:32:55:ee:22:6d:9d:d2:01:7b:
e0:36:62:80:c2:76:e4:7a:a5:82:50:c4:73:de:ea:e6:98:8c:
b8:71:25:04:ad:63:0d:e5:9f:6d:b1:6a:ff:93:b9:f3:29:d4:
57:db:f3:b1:36:f1:1a:44:9a:e9:1a:95:fc:b3:d2:49:6d:51:
8b:74:58:a2:de:f6:59:ea:ee:de:a2:82:12:75:79:7a:87:fb:
83:3e:9f:ec:64:f2:1c:e6:f0:13:56:21:e0:23:8d:b7:26:82:
b9:33:98:b6:d0:77:4e:a6:3c:71:b3:ea:40:f8:f7:22:13:ec:
e6:75:9b:1b:dd:fc:ec:d1:a6:4f:02:f2:44:1c:db:93:d8:6c:
b4:1b:44:61:6c:8b:3d:f3:1e:47:85:f7:fd:dc:69:74:99:68:
e2:2c:74:e3:26:49:a4:a7:5b:23:9f:57:de:4e:bd:28:8b:6c:
1e:64:36:61:05:5a:ac:ec:71:a7:b3:f8:91:fc:4c:de:92:9c:
0e:3f:73:f0:86:20:54:70:ba:8e:b5:05:f7:55:7d:10:32:c0:
db:20:e0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org