Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/ad20d583bf459fb58fcd2460f960c96c8e2fad17.roa
File: ad20d583bf459fb58fcd2460f960c96c8e2fad17.roa (raw, json)
Hash identifier: mbFhj/UZrm+Lx4DyWqvJcBaU4EBJMQoMtO9SbmIgFsc=
Subject key identifier: 08:82:B4:78:B4:DD:EF:05:46:98:90:0B:C9:6D:DD:A6:55:DC:07:83
Certificate issuer: /CN=b9674112d06595f2d6b84802ac8416687159afd1
Certificate serial: 0D3929
Authority key identifier: 54:08:20:24:F6:0A:38:3E:38:22:4F:8F:77:77:E2:E5:35:5E:9F:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9674112d06595f2d6b84802ac8416687159afd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/ad20d583bf459fb58fcd2460f960c96c8e2fad17.roa
Signing time: Wed 24 Mar 2021 14:34:05 +0000
ROA not before: Wed 24 Mar 2021 14:34:05 +0000
ROA not after: Tue 24 Mar 2026 14:34:05 +0000
asID: 262237
IP address blocks: 190.196.208.0/24 maxlen: 24
190.196.209.0/24 maxlen: 24
190.196.210.0/24 maxlen: 24
190.196.211.0/24 maxlen: 24
190.196.212.0/24 maxlen: 24
190.196.213.0/24 maxlen: 24
190.196.214.0/24 maxlen: 24
190.196.215.0/24 maxlen: 24
190.196.217.0/24 maxlen: 24
190.196.218.0/24 maxlen: 24
190.196.219.0/24 maxlen: 24
190.196.220.0/24 maxlen: 24
190.196.221.0/24 maxlen: 24
190.196.222.0/24 maxlen: 24
190.196.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866601 (0xd3929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9674112d06595f2d6b84802ac8416687159afd1
Validity
Not Before: Mar 24 14:34:05 2021 GMT
Not After : Mar 24 14:34:05 2026 GMT
Subject: CN=ad20d583bf459fb58fcd2460f960c96c8e2fad17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:31:06:1f:dc:1a:49:ef:f1:fe:91:34:3b:
7e:0e:54:b5:17:f6:86:2c:ed:5e:b3:40:82:60:d9:
e1:ae:19:d4:7d:e2:d0:64:0a:89:f4:9c:b6:7d:2c:
83:15:10:0d:80:8d:77:7e:b6:34:dd:91:75:fe:75:
48:55:63:bf:16:35:51:fa:a2:38:93:e1:d3:06:2f:
67:57:f3:35:3d:18:6f:a3:d4:49:59:63:c4:e6:da:
3a:95:34:a5:0a:28:87:cc:be:7d:fb:1b:3c:1c:df:
5a:1f:8f:44:3e:17:b8:6b:1b:54:a7:33:c4:ff:f5:
d3:5a:b5:ab:aa:38:93:ac:5a:36:ec:39:a6:db:b0:
a1:f8:1a:89:2f:9a:8d:4f:f3:e4:5a:c4:22:c4:12:
3a:c3:c7:54:78:ee:2e:33:13:3c:20:58:cb:9a:ed:
68:11:2d:7a:10:38:1b:1f:11:02:db:55:c3:1e:59:
f5:70:8f:f3:58:41:bb:cc:23:14:39:56:c1:24:0d:
b3:14:4b:ec:5d:e0:01:ac:7b:d4:a8:34:92:81:f3:
04:8a:c4:bf:f9:f4:a5:03:bf:f5:a3:6d:6a:f3:9d:
bf:e4:bf:e6:24:7e:da:69:d1:64:1f:fb:8c:20:d0:
54:70:35:16:47:f4:7d:32:cc:46:c8:59:5c:65:3a:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:82:B4:78:B4:DD:EF:05:46:98:90:0B:C9:6D:DD:A6:55:DC:07:83
X509v3 Authority Key Identifier:
keyid:54:08:20:24:F6:0A:38:3E:38:22:4F:8F:77:77:E2:E5:35:5E:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9674112d06595f2d6b84802ac8416687159afd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/ad20d583bf459fb58fcd2460f960c96c8e2fad17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/b9674112d06595f2d6b84802ac8416687159afd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.196.208.0/21
190.196.217.0-190.196.223.255
Signature Algorithm: sha256WithRSAEncryption
2c:c6:0d:86:3f:44:67:bb:a3:69:bd:07:4e:aa:1d:1f:ee:0d:
a4:13:eb:c8:90:f2:9d:fc:a7:21:1c:fb:0c:4d:93:6b:4e:7f:
19:b3:d8:26:d3:01:4d:18:08:3d:c8:0e:ee:b4:b3:ab:74:83:
e5:90:4b:40:b9:c5:fd:4b:1e:f3:1d:fb:f9:e0:9a:7a:56:fe:
2b:99:92:18:2a:6b:04:d0:fd:79:df:05:30:2e:69:43:7a:34:
8d:13:7c:38:26:fb:46:bd:ff:df:eb:30:60:31:fe:b5:0d:fc:
e3:04:b8:5e:ce:b3:a7:e6:c2:b0:e3:12:45:d0:9f:d4:ca:ad:
da:89:3b:1d:50:e0:d5:90:81:72:e3:e1:8c:f9:af:4e:92:3a:
8e:56:82:5f:ab:73:b3:3f:55:c2:49:79:1f:12:8d:35:51:64:
0f:4e:a7:93:4a:a6:a4:07:ab:2c:39:29:da:f4:ac:fe:87:f3:
1f:41:25:dd:74:76:9d:ca:a2:fb:af:0e:e8:41:87:ac:3a:1b:
76:34:66:13:64:94:3c:d7:27:0b:a4:47:b5:cd:3b:db:e5:7b:
31:44:a3:1d:9e:b0:de:b4:ea:5c:86:d9:92:42:49:33:a6:71:
60:b2:2a:37:72:e8:bf:e4:a0:5d:ca:5d:7b:40:64:9b:32:34:
31:5b:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org