Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/33bd23d1b75c4265348c3fa037f153d12a46db3c.roa
File: 33bd23d1b75c4265348c3fa037f153d12a46db3c.roa (raw, json)
Hash identifier: 4RtHqWFtSMDEU1PFnUZCXpUlVgzFZzC8cDFboGFGY8M=
Subject key identifier: 8A:26:BF:25:61:7B:03:C5:E9:7D:E8:0B:20:02:9C:29:2C:FB:91:50
Certificate issuer: /CN=4670db2847f3f5f45823175e7fcec0e67a763df2
Certificate serial: 20C87F
Authority key identifier: B8:11:79:A9:78:D9:9B:49:1C:57:2B:74:C2:71:69:24:34:10:CB:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4670db2847f3f5f45823175e7fcec0e67a763df2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/33bd23d1b75c4265348c3fa037f153d12a46db3c.roa
Signing time: Fri 09 Jun 2023 17:44:14 +0000
ROA not before: Thu 08 Jun 2023 17:44:14 +0000
ROA not after: Mon 09 Jun 2025 17:44:14 +0000
asID: 52356
IP address blocks: 190.14.152.0/22 maxlen: 24
2803:b140::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148479 (0x20c87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4670db2847f3f5f45823175e7fcec0e67a763df2
Validity
Not Before: Jun 8 17:44:14 2023 GMT
Not After : Jun 9 17:44:14 2025 GMT
Subject: CN=33bd23d1b75c4265348c3fa037f153d12a46db3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bb:2c:30:ce:a1:bd:a2:09:02:fe:5d:d8:29:
dc:3a:85:8f:02:54:f9:f4:bf:cb:cd:de:80:39:e1:
bb:c3:9d:61:86:69:bf:09:48:6a:36:30:51:c0:89:
01:70:b4:66:5c:f9:fc:87:7d:1a:87:1f:3d:f0:8b:
d0:31:dc:fd:ee:fb:d2:10:41:fa:a6:6d:62:13:1d:
4a:1a:77:a7:ed:eb:75:a4:97:1b:c9:d6:4f:e1:53:
0b:eb:c7:f0:33:c3:32:be:6f:17:0d:5b:c2:35:e1:
f2:40:fd:02:13:dd:71:ac:21:70:e1:5a:97:4a:07:
e2:fd:22:14:83:28:a0:20:0d:9c:e1:99:c4:cb:c8:
dc:29:f1:16:d1:c1:af:df:bd:4d:d2:ae:16:4f:3a:
bf:6f:a7:84:db:a1:b3:8f:01:85:d0:4b:10:03:b1:
eb:d0:52:86:ab:ab:8f:3e:97:b1:8f:04:7b:b4:11:
97:f6:6a:21:47:48:01:97:60:2b:8a:a9:72:fc:05:
1c:38:ab:19:2b:93:0d:76:c8:ca:86:6a:9d:af:8d:
01:8c:c6:a6:96:68:ae:18:c9:70:de:30:ff:8d:9e:
34:07:dd:4c:33:c1:8b:1b:da:23:f9:bb:cc:6b:41:
9d:df:8e:15:86:ce:34:bc:00:14:c1:bc:6b:07:52:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:26:BF:25:61:7B:03:C5:E9:7D:E8:0B:20:02:9C:29:2C:FB:91:50
X509v3 Authority Key Identifier:
keyid:B8:11:79:A9:78:D9:9B:49:1C:57:2B:74:C2:71:69:24:34:10:CB:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4670db2847f3f5f45823175e7fcec0e67a763df2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/33bd23d1b75c4265348c3fa037f153d12a46db3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/4670db2847f3f5f45823175e7fcec0e67a763df2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.152.0/22
IPv6:
2803:b140::/32
Signature Algorithm: sha256WithRSAEncryption
0b:54:a2:98:15:6c:72:0b:6f:c2:6e:41:0a:0d:e5:8f:b6:44:
23:7a:f2:02:6b:af:04:b6:11:1e:8e:b4:a2:78:31:3b:c3:32:
36:9e:32:86:74:59:0f:d9:1c:2e:ce:92:da:d7:64:7d:2b:bd:
cc:57:9d:f7:12:d5:5e:f7:0b:46:63:a1:dd:61:d1:56:5e:76:
8a:8d:8b:ce:4c:95:6a:65:35:57:0a:74:08:5f:c5:bf:c0:8f:
8f:2a:93:ed:a7:d9:d2:2f:6b:75:80:60:1b:87:b9:f7:e2:62:
87:29:c8:93:cc:10:ac:7a:11:de:e8:2d:d0:79:24:67:2d:37:
7e:34:5d:f3:8a:51:43:8e:50:04:98:63:a2:db:55:da:9b:2b:
e0:2e:e1:7b:64:db:08:c6:6d:1b:1c:6d:63:ed:e4:2d:9b:94:
d4:c2:be:33:bf:c5:90:25:0b:3b:da:36:78:04:32:3c:db:a5:
88:98:31:e0:0b:ec:d6:62:61:1e:85:07:24:c0:36:a7:e8:78:
b4:88:10:45:38:38:db:03:ca:c2:c5:fd:7b:ca:e8:a4:94:42:
0f:07:2f:1f:27:60:d0:a1:a6:2d:cf:9b:9e:7d:81:9a:e6:db:
b2:6e:a4:7e:f7:7b:ce:42:b1:5e:e9:a5:15:cb:c0:20:c5:48:
50:9d:1d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org