Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/a58d01b998bf847c41032fe4ea27f0098fa94926.roa
File: a58d01b998bf847c41032fe4ea27f0098fa94926.roa (raw, json)
Hash identifier: g84wuiuMfBQZjMktG2veda1oCIxboZu107llc+FZMoU=
Subject key identifier: AB:1A:89:09:33:EA:1C:3F:13:6D:52:88:A4:F1:A9:59:59:86:1E:A4
Certificate issuer: /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial: 2276EF
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/a58d01b998bf847c41032fe4ea27f0098fa94926.roa
Signing time: Sat 03 Jun 2023 19:19:25 +0000
ROA not before: Fri 02 Jun 2023 19:19:22 +0000
ROA not after: Tue 03 Jun 2025 19:19:22 +0000
asID: 27983
IP address blocks: 190.185.128.0/17 maxlen: 24
190.103.224.0/19 maxlen: 24
179.62.0.0/16 maxlen: 24
190.182.128.0/17 maxlen: 24
2800:850::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258671 (0x2276ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Validity
Not Before: Jun 2 19:19:22 2023 GMT
Not After : Jun 3 19:19:22 2025 GMT
Subject: CN=a58d01b998bf847c41032fe4ea27f0098fa94926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fc:87:77:f9:80:2c:53:0a:56:a1:9d:45:4d:
bb:07:93:74:14:25:33:00:cb:0e:0e:39:8c:62:87:
ae:ed:1b:80:68:61:e0:e6:d0:04:cf:2e:c5:2e:37:
29:8f:e2:02:9e:06:86:06:e7:39:35:01:32:a5:ab:
16:2b:17:a6:0d:3e:ed:d3:5c:0f:78:fd:76:ec:f8:
38:b4:62:0f:f8:83:8a:3a:30:f9:b9:bb:c9:e1:33:
71:9a:67:9d:06:a1:c0:d2:eb:7a:0a:11:68:01:c7:
1a:ad:d4:83:31:b5:e1:9a:33:97:5d:ed:0b:e5:ba:
1a:77:1d:7b:1b:02:1d:08:37:9d:37:d2:88:74:5c:
02:49:25:9c:aa:cf:26:76:64:03:67:2b:fd:6a:0a:
ff:25:81:b7:9d:a3:99:ff:fb:27:52:db:e2:52:13:
18:08:d2:88:d2:60:fd:d7:e2:d6:07:d7:15:4a:2d:
4a:cd:f3:e0:9b:3f:ae:a0:dd:57:79:67:76:9a:a0:
cb:54:0c:2c:a4:ac:e6:8a:90:d0:85:4b:cc:8e:14:
af:15:bc:85:f6:6c:97:3d:1a:87:a1:b4:73:0b:2d:
c7:7a:dd:77:4d:db:0f:aa:92:9e:73:7b:09:28:06:
fc:f1:5e:f4:c5:4f:3d:07:e7:c7:77:cf:c5:47:5c:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1A:89:09:33:EA:1C:3F:13:6D:52:88:A4:F1:A9:59:59:86:1E:A4
X509v3 Authority Key Identifier:
keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/a58d01b998bf847c41032fe4ea27f0098fa94926.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.62.0.0/16
190.103.224.0/19
190.182.128.0/17
190.185.128.0/17
IPv6:
2800:850::/32
Signature Algorithm: sha256WithRSAEncryption
5d:07:38:e5:1b:50:45:28:01:f9:49:3d:35:b6:57:36:0e:53:
e7:6c:95:15:c8:6f:57:86:1b:b8:d0:3a:18:9d:38:62:d8:12:
e1:4c:b0:68:2a:19:a3:71:e7:90:18:29:17:22:9c:5b:41:d0:
88:87:d8:a8:6a:11:7d:8a:48:ed:77:48:b5:9a:9e:42:28:a2:
0c:eb:95:97:36:f4:4f:38:27:3d:8e:a6:56:63:ab:46:6b:59:
39:88:1a:05:41:8f:1e:2e:31:d1:b7:c6:83:22:7b:97:98:61:
03:5a:b0:92:c0:8e:0d:c9:d1:de:47:54:f9:fb:06:06:f6:c5:
49:ca:d2:cd:43:04:79:98:9f:b4:1e:13:4b:f0:46:fd:54:a8:
71:ef:3d:d7:53:58:22:6a:77:0e:94:db:18:ad:c5:b6:bb:55:
25:69:12:72:43:a2:cf:bc:05:c3:5c:6a:6a:07:b7:56:67:c5:
a3:ed:f0:c1:94:59:53:0c:49:df:a8:da:72:d1:34:1d:f6:c1:
14:23:dd:22:dd:85:35:4d:61:91:1f:df:c7:8d:bd:6a:33:6d:
2a:ad:52:68:b7:8c:97:0a:d6:c4:c8:ed:ef:3b:3c:72:64:3f:
8a:a0:b4:97:53:a0:a7:e3:78:9c:b2:c5:f8:2d:ca:37:9d:88:
35:d5:e2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org