Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/4639a2781e1120abb48c763a616e2cb911aa516f.roa
File: 4639a2781e1120abb48c763a616e2cb911aa516f.roa (raw, json)
Hash identifier: zB25v9WUWjmIpKNyX/VRAnuChKVt4Au+h/AO4oVYaUw=
Subject key identifier: CA:AD:0D:0F:29:AD:CC:0F:43:22:CA:66:E9:BA:07:4A:2C:6D:4F:65
Certificate issuer: /CN=b107b01f11ca47163588855443601d83d9a33e5b
Certificate serial: 0DD008
Authority key identifier: BD:36:E0:95:78:AC:DB:C7:20:85:CC:75:62:F6:EC:CA:BF:A0:C3:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b107b01f11ca47163588855443601d83d9a33e5b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/4639a2781e1120abb48c763a616e2cb911aa516f.roa
Signing time: Wed 24 Mar 2021 14:30:23 +0000
ROA not before: Wed 24 Mar 2021 14:30:23 +0000
ROA not after: Tue 24 Mar 2026 14:30:23 +0000
asID: 28318
IP address blocks: 190.103.16.0/22 maxlen: 24
190.103.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905224 (0xdd008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b107b01f11ca47163588855443601d83d9a33e5b
Validity
Not Before: Mar 24 14:30:23 2021 GMT
Not After : Mar 24 14:30:23 2026 GMT
Subject: CN=4639a2781e1120abb48c763a616e2cb911aa516f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:6e:5e:90:d8:ac:16:fe:d8:35:e3:bc:05:
49:ad:60:9a:74:33:e6:65:d0:4c:4f:43:75:57:61:
6d:60:d9:f9:7e:ed:60:c9:4c:ad:6a:9a:6a:d5:7e:
fe:75:9b:8e:0e:5e:79:ee:1f:89:7a:fa:5a:fa:8b:
4f:fa:9a:0d:61:fb:54:8a:c8:3c:a0:b8:46:a2:b8:
e1:be:90:36:6e:2c:28:59:c7:6a:71:6d:72:27:6c:
87:69:19:28:24:c5:55:d0:c6:a9:1d:16:7e:e2:1e:
28:6c:b2:79:87:1a:7c:df:4e:41:8c:98:b3:95:65:
22:28:ef:60:fa:f7:c9:b0:99:d1:10:eb:60:81:b4:
af:d0:2b:5e:09:cc:21:24:1c:1d:6c:58:01:9a:62:
aa:68:52:cd:5e:6b:b7:27:55:3f:9e:7c:9b:1a:0e:
2a:c3:a8:b8:09:2e:bd:e7:20:3c:34:22:4d:c3:c8:
62:31:89:1b:62:05:e3:e9:01:1b:b3:ea:ae:3c:30:
d5:8b:87:3a:26:47:4f:ea:a5:6b:65:57:a7:57:2e:
b3:15:04:06:6d:69:91:1f:22:4c:6d:ba:69:11:04:
3a:13:23:f1:1d:cc:0b:35:c1:13:03:a7:56:ea:6e:
21:35:16:6d:0c:42:71:0f:1d:30:38:d7:9d:58:ef:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AD:0D:0F:29:AD:CC:0F:43:22:CA:66:E9:BA:07:4A:2C:6D:4F:65
X509v3 Authority Key Identifier:
keyid:BD:36:E0:95:78:AC:DB:C7:20:85:CC:75:62:F6:EC:CA:BF:A0:C3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b107b01f11ca47163588855443601d83d9a33e5b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/4639a2781e1120abb48c763a616e2cb911aa516f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/b107b01f11ca47163588855443601d83d9a33e5b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.103.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:f8:83:21:0e:c9:2e:a6:ee:31:b9:53:02:28:6c:17:c3:13:
f3:4e:c1:a0:7f:4f:c3:63:21:83:0f:53:f5:30:83:8b:de:01:
c7:94:50:0d:69:38:b7:45:c1:96:e2:b7:e1:a2:ad:80:0f:9a:
66:bb:27:88:c1:4b:9a:09:65:72:90:1e:7b:c3:d9:34:23:8e:
6f:d9:8d:b1:6c:88:cc:96:0d:a5:8d:c8:3c:dc:bb:31:e7:7f:
97:d2:92:2d:75:27:55:81:92:ea:0a:1b:6f:5b:ed:97:24:62:
5e:91:6a:18:82:62:a4:4b:5d:bf:68:0d:16:ed:52:d7:1b:c0:
e1:1d:8a:e0:43:fb:77:77:41:c3:01:16:a3:2a:a8:2a:39:f6:
f0:67:a1:c8:fa:71:8c:8a:64:ab:ec:3a:68:ee:71:e3:9e:a1:
e3:a3:12:9a:cf:72:a2:a0:ee:a5:52:24:f4:16:4f:ba:d0:57:
76:29:b8:58:56:b5:23:5b:a8:20:af:92:8e:41:fb:94:47:ca:
5f:cf:e0:37:28:bb:e4:67:d1:1c:5e:c3:20:c0:f6:b1:b7:f0:
ea:b8:ed:a7:c9:f2:84:a9:62:81:d6:4f:10:06:72:0d:40:89:
f2:3d:f7:d0:55:5b:01:5e:de:d9:c8:5c:8b:54:58:c4:96:b9:
40:cc:b2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org