Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/1daf54072cf9b0d8a0ca3a75c53c818ffad5d90d.roa
File: 1daf54072cf9b0d8a0ca3a75c53c818ffad5d90d.roa (raw, json)
Hash identifier: uSSeCThFMZt4OBx+bN8MaL+saGIYUVdl9g8IuEsv+Rk=
Subject key identifier: B9:19:64:7F:62:41:83:91:81:9A:6E:17:41:FF:FB:AC:BE:FC:C7:31
Certificate issuer: /CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
Certificate serial: 0DB745
Authority key identifier: 1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/1daf54072cf9b0d8a0ca3a75c53c818ffad5d90d.roa
Signing time: Wed 24 Mar 2021 14:29:57 +0000
ROA not before: Wed 24 Mar 2021 14:29:57 +0000
ROA not after: Tue 24 Mar 2026 14:29:57 +0000
asID: 12150
IP address blocks: 143.0.244.0/22 maxlen: 24
170.84.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898885 (0xdb745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
Validity
Not Before: Mar 24 14:29:57 2021 GMT
Not After : Mar 24 14:29:57 2026 GMT
Subject: CN=1daf54072cf9b0d8a0ca3a75c53c818ffad5d90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:db:f6:83:d9:85:c2:ff:d8:f2:9e:ce:93:
c0:5b:bf:b5:f7:18:6e:93:b4:4a:de:91:7e:7f:6d:
d4:58:fd:15:f4:bd:0d:39:97:b6:bd:cf:f7:b6:b1:
1b:41:55:03:cb:8c:ff:94:55:4c:a2:44:1a:4b:14:
e0:c7:9f:ad:63:bd:83:e1:9c:73:2e:10:00:74:cb:
df:bf:b0:2b:4e:2b:e5:d9:1d:bc:0a:a8:c3:59:e7:
e8:1a:fb:f7:88:96:c1:ee:ee:b4:69:34:24:bd:25:
02:48:e1:ca:23:3e:dd:8d:ac:ec:6d:e3:b6:c4:98:
c4:51:8a:7a:38:d1:fc:21:65:89:32:ae:1b:41:e9:
0f:b8:97:6e:d2:3b:51:2a:f9:bb:c2:00:cc:b0:69:
64:3e:f4:b3:ef:81:92:3b:76:71:81:42:2c:dd:8d:
d0:a6:1f:64:ae:ed:15:de:9c:48:c0:d2:72:46:fe:
40:1e:80:0b:c2:6c:2e:76:ba:41:e5:fe:7c:0c:52:
f5:fe:59:13:0a:80:26:95:ac:6d:aa:da:2b:33:eb:
ce:60:3f:d3:c6:62:80:76:bd:b7:81:0c:d7:08:60:
1c:70:17:fa:33:dd:74:e9:93:b3:02:27:7f:ee:fc:
5b:2b:2d:ae:b7:2f:3b:2a:67:b8:86:b2:19:03:a3:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:19:64:7F:62:41:83:91:81:9A:6E:17:41:FF:FB:AC:BE:FC:C7:31
X509v3 Authority Key Identifier:
keyid:1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/1daf54072cf9b0d8a0ca3a75c53c818ffad5d90d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/8c35dfff317cf25b1f43e239ba268307c208d4c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.244.0/22
170.84.44.0/22
Signature Algorithm: sha256WithRSAEncryption
20:be:a6:0c:bf:dd:e0:01:5d:b5:d4:4a:bc:8d:39:6e:8c:a5:
68:f1:d5:42:8d:09:2a:ce:53:6b:63:31:be:ae:9b:57:56:72:
7a:eb:b1:a1:6a:b9:19:98:02:1a:7a:87:e0:d8:0f:13:17:e1:
8f:93:20:80:54:40:5b:18:e5:79:31:8e:32:1a:db:bc:3e:d0:
79:aa:21:b9:2a:65:29:18:8a:e8:44:d8:2f:b3:cd:1c:e8:f1:
98:f7:2e:f5:db:91:72:fb:dd:75:55:d4:ed:f5:ae:8d:af:28:
53:b6:fa:a6:21:ee:52:f3:fa:c3:a4:6d:e6:0f:1c:34:68:01:
08:af:d5:bb:28:4e:52:d6:e3:e1:54:5f:8e:da:cd:4a:17:19:
9b:92:60:da:86:34:bd:97:1e:09:d2:85:b4:44:69:9c:b6:7b:
f2:e7:7a:4f:5f:c1:94:11:3a:0c:90:84:f6:66:d7:7d:e2:61:
fe:da:16:e5:a7:23:10:34:8d:93:05:08:50:f6:f6:3e:2f:df:
11:4c:2d:38:00:bd:d5:6c:3e:0b:21:53:cf:3e:ae:6f:b6:88:
0c:c5:21:e1:2c:0f:09:41:13:b7:89:fd:ad:73:92:5f:a3:fb:
3b:0d:7e:85:77:70:8b:79:de:d8:37:68:ec:0e:ce:94:3b:d4:
5e:d7:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org