Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/4a065c57949ee1839988ce8a40bc9774789d17e4.roa
File: 4a065c57949ee1839988ce8a40bc9774789d17e4.roa (raw, json)
Hash identifier: RgHXs1Lr3Zgjreaq3TrqH10LYy28NHVZWgabNVAdwek=
Subject key identifier: 8C:08:9A:F5:84:0A:BA:CA:79:ED:58:2D:EC:16:31:BF:72:ED:35:89
Certificate issuer: /CN=a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f
Certificate serial: 21183B
Authority key identifier: DB:EE:7B:EC:56:4F:90:5D:60:8E:8A:D7:C2:54:C5:D8:32:57:10:50
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/4a065c57949ee1839988ce8a40bc9774789d17e4.roa
Signing time: Wed 06 Dec 2023 19:00:28 +0000
ROA not before: Wed 06 Dec 2023 19:00:28 +0000
ROA not after: Sat 06 Dec 2025 19:00:28 +0000
asID: 264688
IP address blocks: 190.107.240.0/24 maxlen: 24
190.107.241.0/24 maxlen: 24
190.107.242.0/24 maxlen: 24
190.107.243.0/24 maxlen: 24
190.107.244.0/24 maxlen: 24
190.107.245.0/24 maxlen: 24
190.107.246.0/24 maxlen: 24
190.107.247.0/24 maxlen: 24
190.196.225.0/24 maxlen: 24
190.196.226.0/24 maxlen: 24
190.196.227.0/24 maxlen: 24
190.196.228.0/24 maxlen: 24
190.196.229.0/24 maxlen: 24
190.196.230.0/24 maxlen: 24
190.196.231.0/24 maxlen: 24
190.196.232.0/24 maxlen: 24
190.196.233.0/24 maxlen: 24
190.196.234.0/24 maxlen: 24
190.196.235.0/24 maxlen: 24
190.196.236.0/24 maxlen: 24
190.196.237.0/24 maxlen: 24
190.196.238.0/24 maxlen: 24
190.196.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168891 (0x21183b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f
Validity
Not Before: Dec 6 19:00:28 2023 GMT
Not After : Dec 6 19:00:28 2025 GMT
Subject: CN=4a065c57949ee1839988ce8a40bc9774789d17e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:06:8d:e3:20:63:4f:ba:30:f8:75:37:13:
4f:f9:8a:ac:5f:32:3e:a1:d8:3b:f2:4a:d5:88:00:
46:01:e0:0d:44:e1:ff:1d:c9:b7:58:49:3f:0b:79:
52:5f:3d:2f:53:e3:c9:3f:03:5e:b0:2b:0e:ed:3f:
d9:e8:39:e3:aa:29:82:c8:5b:ce:93:d2:da:65:0a:
c2:77:81:66:50:46:5c:d9:a4:fa:95:f9:0c:d6:f4:
bc:6b:00:a5:db:d2:6e:b2:b6:80:6b:f9:39:a1:f5:
b8:ea:95:ec:7b:e0:c7:67:bb:c8:df:45:c4:a6:cf:
5d:7e:ca:fb:0e:97:9a:69:13:5d:58:03:ea:67:62:
31:c7:d7:80:df:00:b4:25:75:b5:06:49:45:86:93:
13:dd:04:1d:18:2e:6b:ab:b1:ce:ba:7e:e5:85:cb:
b4:44:76:83:79:77:f1:d0:cf:49:36:1f:31:e4:2e:
42:71:98:9f:0b:9a:47:51:8e:9a:ea:99:12:b0:85:
a2:5e:d9:19:e4:c1:bd:e7:ba:6d:d7:fa:17:99:e4:
30:47:c6:ba:61:c9:ac:99:37:93:56:42:e7:7e:04:
7d:f1:62:e8:43:ed:53:01:6f:2d:c7:10:78:88:26:
ed:b3:c3:ad:f9:90:3f:1f:0d:b6:5e:8e:ba:4d:4c:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:08:9A:F5:84:0A:BA:CA:79:ED:58:2D:EC:16:31:BF:72:ED:35:89
X509v3 Authority Key Identifier:
keyid:DB:EE:7B:EC:56:4F:90:5D:60:8E:8A:D7:C2:54:C5:D8:32:57:10:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/4a065c57949ee1839988ce8a40bc9774789d17e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.240.0/21
190.196.225.0-190.196.239.255
Signature Algorithm: sha256WithRSAEncryption
45:b9:09:88:e6:b0:19:ce:81:4d:2a:ac:5c:c8:c4:d3:28:90:
ba:a2:df:5b:a7:68:d8:a0:6b:73:80:44:f9:9d:5f:c7:78:66:
d1:ba:09:e0:b0:10:ae:e9:d0:69:1a:37:4c:2b:7c:9f:07:4c:
f2:24:26:8a:05:74:c2:a4:00:4c:97:15:32:9d:27:7c:e9:f7:
54:7a:07:15:6a:d2:fb:96:bc:fd:05:c5:f9:6e:95:0b:61:9f:
29:f3:4f:5e:43:77:4b:49:c3:75:2c:52:ea:4c:bd:47:02:f3:
1d:aa:d2:a7:5a:df:fc:24:45:b0:a5:55:95:e9:68:f2:62:f1:
72:50:bf:6c:d3:d5:a0:01:7c:7d:63:ba:af:dd:1a:66:c4:87:
bd:3f:fc:3a:7c:85:b5:d1:bb:bc:81:c8:bd:bd:fb:b2:66:b9:
b8:9d:e5:a2:c4:a2:cd:fc:26:24:f8:ce:62:44:85:7f:44:03:
49:b2:a6:92:e8:86:0d:10:5d:fe:3d:43:8c:57:c6:1f:68:14:
e8:b2:22:a8:eb:c1:6b:00:ca:5d:cd:b1:44:93:ab:d4:b2:65:
e9:46:1d:e4:74:c4:9a:3f:70:46:ff:a0:b8:96:bb:92:43:1c:
82:59:81:8b:df:9f:06:8a:ce:0e:94:9f:78:e9:3d:00:67:3f:
20:7a:7c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:17 2023 by rpki-client on console.sobornost.net