Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/b2a62d6925f24f459f4cb1bb8d1bc33ebdd58307.roa
File: b2a62d6925f24f459f4cb1bb8d1bc33ebdd58307.roa (raw, json)
Hash identifier: jJ6NA+4FQksJLFe7BKvp45ibURngGsxO8Hw4yZcAdcE=
Subject key identifier: BA:CC:0A:A1:AD:19:FA:A1:47:62:D6:1A:FD:DE:B9:66:8E:F8:ED:86
Certificate issuer: /CN=b9674112d06595f2d6b84802ac8416687159afd1
Certificate serial: 0D35F4
Authority key identifier: 54:08:20:24:F6:0A:38:3E:38:22:4F:8F:77:77:E2:E5:35:5E:9F:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9674112d06595f2d6b84802ac8416687159afd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/b2a62d6925f24f459f4cb1bb8d1bc33ebdd58307.roa
Signing time: Wed 24 Mar 2021 14:34:05 +0000
ROA not before: Wed 24 Mar 2021 14:34:05 +0000
ROA not after: Tue 24 Mar 2026 14:34:05 +0000
asID: 262237
IP address blocks: 190.196.208.0/24 maxlen: 24
190.196.209.0/24 maxlen: 24
190.196.210.0/24 maxlen: 24
190.196.211.0/24 maxlen: 24
190.196.212.0/24 maxlen: 24
190.196.213.0/24 maxlen: 24
190.196.214.0/24 maxlen: 24
190.196.215.0/24 maxlen: 24
190.196.217.0/24 maxlen: 24
190.196.218.0/24 maxlen: 24
190.196.219.0/24 maxlen: 24
190.196.220.0/24 maxlen: 24
190.196.221.0/24 maxlen: 24
190.196.222.0/24 maxlen: 24
190.196.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865780 (0xd35f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9674112d06595f2d6b84802ac8416687159afd1
Validity
Not Before: Mar 24 14:34:05 2021 GMT
Not After : Mar 24 14:34:05 2026 GMT
Subject: CN=b2a62d6925f24f459f4cb1bb8d1bc33ebdd58307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:7f:fb:bb:a5:39:ce:d1:3e:cf:58:3b:23:
9f:cb:a1:e3:c2:62:8b:06:ba:39:78:64:60:f7:12:
e5:b9:7d:07:36:2d:c3:b2:07:ea:a1:d3:79:28:a8:
cd:19:59:0c:fa:04:4d:b6:c0:3b:24:b1:82:35:dc:
92:bb:e3:b9:39:a1:ea:4f:03:1e:99:6c:9f:b4:c3:
92:cc:72:9d:c6:08:65:fa:dd:46:5d:ea:59:9a:aa:
32:be:9b:74:f7:4b:55:6a:0b:7b:62:b9:67:23:ec:
4f:18:db:20:15:de:83:9b:fe:c2:45:01:ba:3c:c4:
e8:d9:d4:83:2b:db:d9:fb:82:3a:6a:a0:74:91:5b:
8e:f0:02:d3:3e:5b:e7:5c:ba:66:5f:5c:21:4d:b2:
5c:c4:4b:e6:05:ad:6c:27:18:af:cf:dc:52:e5:b6:
74:25:45:7e:da:28:fe:8a:51:3d:d4:1f:2a:a5:60:
db:42:99:e6:cf:0e:5c:c3:06:29:9a:4c:ec:ad:cf:
93:c1:02:6a:24:ed:5c:96:10:e7:2c:ce:6f:7d:1a:
e6:4a:fe:ae:db:de:eb:ff:d7:fa:ab:ce:24:09:0b:
bc:7e:ba:46:70:2a:25:bf:6b:9e:88:60:56:9c:9c:
36:2c:c3:66:05:ec:bb:d6:bc:3c:f5:02:06:e8:b2:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CC:0A:A1:AD:19:FA:A1:47:62:D6:1A:FD:DE:B9:66:8E:F8:ED:86
X509v3 Authority Key Identifier:
keyid:54:08:20:24:F6:0A:38:3E:38:22:4F:8F:77:77:E2:E5:35:5E:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9674112d06595f2d6b84802ac8416687159afd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/b2a62d6925f24f459f4cb1bb8d1bc33ebdd58307.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/b9674112d06595f2d6b84802ac8416687159afd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.196.208.0/21
190.196.217.0-190.196.223.255
Signature Algorithm: sha256WithRSAEncryption
3a:57:cd:57:e9:ff:e6:20:a7:24:6d:11:83:8b:7b:b8:5c:a0:
57:17:06:9d:54:6c:93:e0:c5:24:77:4d:63:54:73:eb:82:85:
58:ff:43:d1:a1:9a:c7:02:ec:76:a1:f7:03:6d:31:78:2e:35:
ab:44:2e:55:ac:75:cc:00:88:e2:ca:d7:d7:f9:b2:34:aa:0c:
10:d6:42:73:7a:e7:25:61:7e:32:dc:15:bd:bf:5f:7b:05:2d:
91:00:6f:6b:a8:d1:34:43:ac:d7:51:f8:da:29:cd:4a:26:f2:
b7:f2:19:0a:8c:9f:8e:f5:da:de:60:2e:c9:15:32:23:09:c7:
6f:56:64:d1:91:f5:08:29:a7:87:0a:cc:b0:d0:3a:58:27:bb:
8b:e3:50:c3:93:25:10:bb:e8:a5:56:11:ef:c7:a1:b9:c2:84:
48:bb:a9:41:ca:a7:97:6d:17:b3:54:06:1e:15:eb:e3:46:4f:
01:3b:8a:2a:b8:4c:47:70:c1:fa:b6:86:18:83:3d:ac:9f:99:
7e:1e:0e:ce:4e:40:2f:1d:fe:57:7e:d3:79:cf:8e:76:d2:7b:
40:3d:ed:06:a0:dd:e4:83:a8:c8:29:ea:5f:be:ae:d5:f1:2e:
eb:13:ba:a4:f2:05:b8:d6:b4:83:81:52:4e:8d:6b:85:20:b6:
96:9d:41:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org