Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265809.roa
File: AS265809.roa (raw, json)
Hash identifier: 6QwIbEWWDSESx6UeLhCxa9U3nIRjzR9OzFIMi1nZS3E=
Subject key identifier: 60:57:7D:02:68:B1:57:01:53:4B:21:3D:7D:91:5D:7A:D8:8D:72:01
Certificate issuer: /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial: 4DC53AD05DFB8B708043C82AC69A39A368245820
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265809.roa
Signing time: Tue 05 Mar 2024 18:12:28 +0000
ROA not before: Tue 05 Mar 2024 18:07:28 +0000
ROA not after: Tue 04 Mar 2025 18:12:28 +0000
asID: 265809
IP address blocks: 190.228.32.0/24 maxlen: 24
190.228.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c5:3a:d0:5d:fb:8b:70:80:43:c8:2a:c6:9a:39:a3:68:24:58:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Validity
Not Before: Mar 5 18:07:28 2024 GMT
Not After : Mar 4 18:12:28 2025 GMT
Subject: CN=60577D0268B15701534B213D7D915D7AD88D7201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:15:f6:55:fb:19:0b:63:d7:7a:1d:50:5e:
e5:78:5b:e5:70:9f:7d:04:15:bb:3b:61:6e:99:b0:
0f:56:3d:c4:9e:11:72:c4:08:29:dd:22:14:47:99:
66:b3:f1:22:03:33:0b:49:3e:3f:de:1f:b3:c5:6d:
01:bb:ab:e5:b7:55:9b:96:7e:7d:f0:2e:7d:9a:86:
a5:ef:68:eb:21:d7:70:cb:f0:c6:3d:8e:c8:b9:fe:
e2:c3:7c:c6:11:9a:54:9b:08:ef:2b:27:4b:89:03:
0d:74:49:0e:59:c4:ec:af:16:6d:af:2b:75:05:7a:
4c:b2:a6:9c:11:cf:95:80:e4:39:c8:1f:18:d2:8d:
09:73:b8:2b:2e:c6:81:e9:08:80:6d:57:90:59:7f:
79:25:40:16:3b:3e:1f:c7:81:71:8f:17:82:9a:1e:
46:8d:92:e8:8d:63:86:ae:0b:cc:2f:fd:83:ec:64:
95:22:e5:34:06:8d:4c:33:96:d6:90:2f:9e:f2:f7:
f2:9e:73:cf:f6:cf:99:d0:09:31:8c:a4:c3:ae:87:
79:69:42:3a:83:5e:f9:85:33:e3:68:ec:a8:c7:4d:
d8:6b:04:dd:79:7a:c6:44:85:a0:8f:88:37:40:42:
98:83:d8:01:ee:26:7a:ae:a1:c8:fe:ca:7b:9c:4b:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:57:7D:02:68:B1:57:01:53:4B:21:3D:7D:91:5D:7A:D8:8D:72:01
X509v3 Authority Key Identifier:
keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.228.32.0/24
190.228.200.0/24
Signature Algorithm: sha256WithRSAEncryption
21:67:52:b2:57:03:8b:9c:b0:c1:41:d1:67:90:05:e6:91:63:
fd:f4:60:99:15:f7:42:2c:5c:4e:d8:1e:8f:b0:1f:42:62:bd:
a7:46:0f:84:e1:21:ef:91:0d:7f:0b:77:74:ae:d0:01:cf:f7:
fb:3b:cc:7a:55:51:4a:7c:13:58:8c:b9:cf:76:fe:12:8e:57:
61:3e:83:ae:35:75:17:34:d3:13:4a:3b:10:b5:85:22:ae:81:
7c:19:05:d3:c3:71:da:57:7c:55:92:34:5c:57:9b:e5:8d:a4:
5a:1f:db:9f:72:86:dc:f9:67:54:ae:14:9d:55:63:ff:a5:bb:
4f:96:3c:61:4d:52:27:2d:2e:3c:f2:e1:cc:05:3f:ae:27:60:
b3:26:00:1b:3a:bf:de:c8:bb:f4:c3:57:90:4d:70:49:e7:86:
c2:47:f9:52:fe:33:7e:fa:82:db:df:e3:60:d4:54:68:be:8b:
3f:13:9a:65:5d:82:11:36:27:6d:f2:d0:75:46:e5:b1:8b:99:
00:a9:7f:28:51:c0:26:43:d8:a1:dc:4b:6e:73:db:ef:69:63:
f7:76:91:af:7f:a7:1b:e5:83:e2:8c:a0:a1:b9:9a:09:7e:70:
36:64:95:a9:1d:4e:41:2e:6e:36:71:88:47:52:ef:c3:d5:32:
05:c3:49:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:13:08 2025 by rpki-client