Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4a31ec7-6e28-45af-83b7-b2e2faff7670/94a24d86d14171c248b14c9244f3cc06f1a345b4.roa
File: 94a24d86d14171c248b14c9244f3cc06f1a345b4.roa (raw, json)
Hash identifier: y7a60YK3u4l6elHwkp68E6nN3Yo2j+ep0NyL883TKhA=
Subject key identifier: 0E:91:A9:ED:67:2F:40:30:C3:FE:C8:62:0C:32:0D:1B:D3:BE:CA:DB
Certificate issuer: /CN=da10b4373c1a02f19caaedb2e493b9129c63e1c8
Certificate serial: 122136
Authority key identifier: 1A:A9:09:8A:9D:E7:C6:24:14:0D:29:5D:76:2C:64:A5:F7:2A:FF:44
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da10b4373c1a02f19caaedb2e493b9129c63e1c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f4a31ec7-6e28-45af-83b7-b2e2faff7670/94a24d86d14171c248b14c9244f3cc06f1a345b4.roa
Signing time: Wed 01 Dec 2021 11:43:36 +0000
ROA not before: Wed 01 Dec 2021 03:00:00 +0000
ROA not after: Tue 01 Dec 2026 03:00:00 +0000
asID: 52465
IP address blocks: 161.0.72.0/21 maxlen: 24
2803:8680::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188150 (0x122136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da10b4373c1a02f19caaedb2e493b9129c63e1c8
Validity
Not Before: Dec 1 03:00:00 2021 GMT
Not After : Dec 1 03:00:00 2026 GMT
Subject: CN=94a24d86d14171c248b14c9244f3cc06f1a345b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:9a:d5:02:7d:6c:c9:a4:1e:0b:cf:7c:fa:
30:9f:8a:42:eb:f6:a2:5e:cd:34:66:92:06:65:e4:
aa:68:ee:51:56:31:8f:4e:1d:bf:f1:73:91:c3:f7:
35:12:76:35:04:0d:90:af:bf:9c:e5:85:47:e4:a0:
d5:44:59:20:dd:52:f2:83:63:f6:1c:af:47:02:42:
8a:9d:f0:4c:06:f8:0c:63:18:86:c0:62:c5:7e:a6:
a1:70:57:59:a8:c7:50:d9:67:65:f3:c2:30:b6:d5:
ce:e5:c5:0e:bc:ee:d0:87:09:f4:bb:0d:37:c1:1f:
66:c0:b4:4a:b5:9c:5b:94:05:09:be:a2:7c:37:4f:
b8:0d:36:9a:e1:7c:3a:a4:56:99:88:ef:38:f1:cd:
29:56:9d:b7:d2:ac:31:3c:97:de:10:c3:cc:d4:4f:
13:e8:1d:6e:83:9a:87:e3:50:1b:91:32:2f:80:49:
51:86:c8:92:d2:38:1f:66:87:be:b9:66:0e:9b:93:
ca:31:4c:79:da:93:a4:aa:15:8d:bf:3c:84:ab:63:
5f:ab:07:7c:7c:9d:31:3c:04:c3:1e:ed:18:12:3a:
ba:99:74:b2:98:8c:32:4a:eb:87:8e:4d:64:37:88:
94:7f:77:58:bb:4c:76:d4:d2:ad:a6:f2:2d:21:9c:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:91:A9:ED:67:2F:40:30:C3:FE:C8:62:0C:32:0D:1B:D3:BE:CA:DB
X509v3 Authority Key Identifier:
keyid:1A:A9:09:8A:9D:E7:C6:24:14:0D:29:5D:76:2C:64:A5:F7:2A:FF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da10b4373c1a02f19caaedb2e493b9129c63e1c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4a31ec7-6e28-45af-83b7-b2e2faff7670/94a24d86d14171c248b14c9244f3cc06f1a345b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f4a31ec7-6e28-45af-83b7-b2e2faff7670/da10b4373c1a02f19caaedb2e493b9129c63e1c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.0.72.0/21
IPv6:
2803:8680::/32
Signature Algorithm: sha256WithRSAEncryption
21:02:73:8c:bd:bc:a9:33:c7:0c:58:ac:88:aa:b9:77:9c:74:
4f:dd:99:1b:ae:1f:a8:af:8e:54:88:ba:5b:58:54:2d:20:bb:
bb:c8:b0:68:2d:bb:d5:51:58:11:5a:a9:16:f3:ad:2a:9f:21:
10:23:01:44:82:17:0f:a4:d5:1f:1f:3e:99:cd:86:fa:d1:28:
1c:56:53:58:38:c6:23:ee:8c:01:07:5b:db:1c:58:60:7f:ee:
6f:61:77:74:2f:fc:24:c7:fa:99:2a:d4:bb:13:2f:a6:0a:e5:
be:bd:ee:33:1b:e7:50:d5:9d:43:d7:a8:42:7c:b3:9b:80:52:
db:9b:f4:59:be:7b:73:1e:74:ee:22:08:b0:29:02:03:bd:4b:
92:91:62:e9:c1:5c:f4:9b:09:fe:4f:da:7d:7f:37:3e:42:bb:
33:86:58:e0:65:c0:24:5c:34:16:16:49:57:84:42:eb:08:b3:
49:22:eb:4d:39:ec:a1:88:10:d1:6b:75:88:64:9a:02:d1:68:
8f:5c:ab:d3:a3:6b:b9:2e:38:a9:23:b2:07:b9:ba:9a:51:3a:
8e:e8:3d:65:06:f6:0c:c8:74:d2:5c:94:d1:b4:dc:8a:24:5c:
d1:c3:95:0a:cd:29:a8:9b:17:b7:29:92:6a:da:d9:a3:70:b4:
79:ff:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org