Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5a64de994dcfda7097bbdbaa0a6d6fd21c6c1a4e.roa
File: 5a64de994dcfda7097bbdbaa0a6d6fd21c6c1a4e.roa (raw, json)
Hash identifier: TAB4tL/7Ua64MSIOAJwikbh24G11CnLD11qBlNPpnM0=
Subject key identifier: DF:2D:06:58:38:A7:79:C2:99:24:F8:FA:69:CB:F3:3A:ED:C8:68:FE
Certificate issuer: /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial: 24F44D
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5a64de994dcfda7097bbdbaa0a6d6fd21c6c1a4e.roa
Signing time: Tue 26 Sep 2023 17:13:00 +0000
ROA not before: Mon 25 Sep 2023 17:12:48 +0000
ROA not after: Fri 26 Sep 2025 17:12:48 +0000
asID: 64110
IP address blocks: 186.101.10.0/23 maxlen: 24
186.101.12.0/24 maxlen: 24
186.5.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2421837 (0x24f44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Validity
Not Before: Sep 25 17:12:48 2023 GMT
Not After : Sep 26 17:12:48 2025 GMT
Subject: CN=5a64de994dcfda7097bbdbaa0a6d6fd21c6c1a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:c5:6d:b4:4e:6b:a6:dc:1b:e4:37:76:2d:
3c:2c:c3:93:80:95:d2:00:59:7b:6c:ca:74:5a:ea:
f9:2f:6d:d1:21:81:26:81:48:96:50:e5:52:0e:3a:
d7:af:f8:5d:7c:76:9b:1a:42:f6:87:fb:fa:5c:a3:
70:e7:aa:7b:2b:a6:72:5f:48:a9:26:58:7f:1c:be:
15:80:63:9b:60:f4:58:18:84:4c:6b:b8:b1:48:01:
8c:4f:73:42:f7:57:ef:ca:af:c1:8c:31:f0:78:d5:
a4:ae:67:96:83:b7:19:60:ca:c6:4c:0b:7e:a6:d7:
bb:dd:21:cf:3a:9f:39:5e:28:f5:7f:9e:12:c5:21:
08:b0:3e:ef:0c:f3:43:06:0f:49:e6:ee:27:ea:43:
a9:72:e3:2b:c2:bb:e3:75:66:86:10:e2:21:17:47:
52:c3:57:2f:de:d9:63:b7:c0:b5:07:7a:21:89:00:
fa:3b:b2:d4:80:0b:23:51:f9:2f:6f:95:8f:15:6e:
0c:0a:cd:b1:be:34:a7:77:25:c8:a5:57:c7:f6:cf:
db:ff:0a:83:62:25:1b:40:dd:1f:2e:50:be:08:2b:
be:49:76:49:55:3d:d2:11:6c:6e:af:c9:e2:c3:0d:
aa:f9:62:e9:fb:f9:3d:51:9d:c3:ec:e0:cc:eb:59:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2D:06:58:38:A7:79:C2:99:24:F8:FA:69:CB:F3:3A:ED:C8:68:FE
X509v3 Authority Key Identifier:
keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5a64de994dcfda7097bbdbaa0a6d6fd21c6c1a4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.5.20.0/24
186.101.10.0-186.101.12.255
Signature Algorithm: sha256WithRSAEncryption
8c:a2:41:5b:d3:68:f5:1c:44:29:a3:72:fb:fb:ee:bd:77:c9:
91:b8:61:ee:21:36:c8:10:2a:ab:3d:ca:1e:cd:5f:aa:b4:a8:
31:d9:d8:74:b8:cb:66:7f:6a:f4:53:9c:21:c1:ca:47:f9:8b:
61:05:2a:e5:32:87:e1:ba:a5:6f:cd:ea:1e:71:f0:a5:54:f6:
da:9c:71:05:d3:1a:9e:84:5c:f5:b0:aa:56:1e:bd:e8:a8:32:
21:32:2f:84:7d:a3:9f:fe:1c:44:9d:69:f2:a4:39:3c:1b:a2:
04:dc:f6:dd:b6:60:7a:a1:2c:6b:a8:a3:1f:c5:9b:b6:ca:c6:
c1:a2:04:a9:38:bb:68:57:62:05:9a:51:b0:a1:76:dc:e7:9e:
c9:d1:fa:47:db:ce:7e:e9:b6:c5:fa:05:aa:0c:c9:14:44:dd:
c4:f1:80:25:65:1b:6d:89:71:8f:11:95:42:e0:5a:c4:dc:46:
5f:5d:15:c7:33:43:bf:f1:71:5b:cf:2f:36:4b:c9:9e:1d:00:
86:b2:99:60:79:cc:2c:4e:ac:11:16:b8:c5:8b:ad:3c:e7:bd:
23:8e:2a:4f:ab:78:d0:8d:70:2a:f4:48:34:d6:29:1e:6e:2d:
1b:f0:43:f1:ed:d3:bf:f5:67:33:a9:f2:74:0d:ef:bb:c0:87:
3e:5c:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org