Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/0a14808cb07d570bea40fc672b071349ee8abf28.roa
File: 0a14808cb07d570bea40fc672b071349ee8abf28.roa (raw, json)
Hash identifier: y5lNOiuVFOt+C3LtueXV5bRyTiN4DOiPw3gpgc+0PlE=
Subject key identifier: C6:F1:2F:C7:5D:D8:E2:DE:C5:3B:B7:46:C8:E6:A2:84:51:80:CC:12
Certificate issuer: /CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Certificate serial: 0D76D3
Authority key identifier: 65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/0a14808cb07d570bea40fc672b071349ee8abf28.roa
Signing time: Wed 24 Mar 2021 14:39:59 +0000
ROA not before: Wed 24 Mar 2021 14:39:56 +0000
ROA not after: Tue 24 Mar 2026 14:39:56 +0000
asID: 264851
IP address blocks: 170.83.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882387 (0xd76d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Validity
Not Before: Mar 24 14:39:56 2021 GMT
Not After : Mar 24 14:39:56 2026 GMT
Subject: CN=0a14808cb07d570bea40fc672b071349ee8abf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:38:64:08:8b:ae:39:a7:f6:35:25:a9:3a:
b2:47:4c:14:d3:d2:fd:17:0b:e0:cd:f1:8b:9d:8a:
4d:17:23:73:cc:98:47:49:17:98:a7:9f:70:44:2e:
0a:98:84:a0:1f:16:af:0c:5a:63:60:06:57:52:60:
a6:81:1f:36:59:71:96:c3:36:32:f8:56:73:5e:72:
ea:76:f6:58:29:43:e0:4f:4a:61:59:ed:e9:a3:e8:
e9:ad:a8:06:a3:38:d4:d2:90:31:0a:44:83:e5:09:
0b:41:4d:88:33:8f:04:56:d4:07:f9:b7:88:5e:8b:
8d:c4:f4:f9:d5:11:d8:91:58:58:79:34:2d:5a:c5:
37:8f:36:37:53:e5:a8:67:dd:1d:9d:a0:b4:b5:b8:
d6:e6:2f:8d:90:8f:4f:7e:ad:6d:8f:c4:b0:22:dc:
45:4c:52:5f:27:ba:ee:5f:66:ea:d8:56:6e:f7:57:
03:67:db:26:44:d2:56:81:e5:82:e4:24:df:9e:f8:
65:e2:e7:76:64:a3:3d:10:77:95:4a:2b:9e:03:9b:
1e:85:bd:d0:b2:d2:12:55:b6:13:59:72:7f:23:a8:
77:20:8f:54:ab:39:ce:2c:ed:ec:10:dc:06:67:ec:
ed:02:e7:3b:3c:f7:48:ab:8e:64:ee:fe:8c:1f:96:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F1:2F:C7:5D:D8:E2:DE:C5:3B:B7:46:C8:E6:A2:84:51:80:CC:12
X509v3 Authority Key Identifier:
keyid:65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/0a14808cb07d570bea40fc672b071349ee8abf28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:1a:7e:f5:a1:f7:f8:e2:bf:38:05:e6:1c:86:ed:24:bd:b2:
aa:d8:ca:a9:95:db:43:8b:e6:15:9c:22:1e:64:7c:f9:c3:ae:
9a:60:72:78:d2:91:3d:b8:1c:89:b4:08:d1:fb:9d:d1:71:32:
31:f6:00:e1:88:b4:32:b2:4a:a2:a7:38:82:11:d0:4c:8d:7f:
96:84:a3:a1:7c:6b:cb:dc:46:36:a8:1a:80:f5:0d:6e:93:6c:
b3:c6:f8:ac:ac:c8:bc:8d:09:df:e0:36:07:ad:3c:f9:59:c5:
ac:06:05:8a:44:a1:68:af:27:71:72:5c:48:a0:90:2e:cd:2d:
58:af:bf:9f:56:72:37:ba:3f:21:6d:a4:0a:28:ea:4d:d4:c6:
1f:99:bb:a7:62:f7:d1:69:90:a5:fb:7c:2b:9e:04:1a:7c:f5:
fc:43:61:7a:f8:5d:32:16:3f:57:28:2b:57:3e:db:11:a3:00:
f4:3f:88:32:b3:4f:8f:bf:ec:d7:68:ca:e1:04:d7:8b:99:b2:
ea:d8:24:bd:35:72:90:e3:99:74:96:e8:79:68:9a:bb:6d:94:
bd:64:9c:71:7e:1c:84:9a:b1:42:a2:57:9c:b8:c8:64:f7:f0:
b8:a5:a7:ed:5a:94:3e:f2:59:0f:21:57:ea:7a:b9:ae:5b:7b:
2f:af:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org