Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d4ee2e3735ec3ce56a55039e981e6dd7750438c2.roa
File: d4ee2e3735ec3ce56a55039e981e6dd7750438c2.roa (raw, json)
Hash identifier: FL5kkZHIEi7lOJMnoMqTTwLBkhcwEhK78KE9VYIj/Vc=
Subject key identifier: C8:D6:33:22:66:9A:10:E3:46:B8:B5:EB:0D:56:23:05:CD:46:EC:4D
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 2A4159
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d4ee2e3735ec3ce56a55039e981e6dd7750438c2.roa
Signing time: Sat 02 Dec 2023 20:40:27 +0000
ROA not before: Sat 02 Dec 2023 20:40:27 +0000
ROA not after: Tue 02 Dec 2025 20:40:27 +0000
asID: 14080
IP address blocks: 186.146.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2769241 (0x2a4159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Dec 2 20:40:27 2023 GMT
Not After : Dec 2 20:40:27 2025 GMT
Subject: CN=d4ee2e3735ec3ce56a55039e981e6dd7750438c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:cf:e5:87:d7:9d:6a:f6:d8:2e:0d:b2:55:
c1:e5:ed:01:c9:0f:f5:7d:de:90:39:82:8a:65:1d:
d8:13:3f:2e:d1:ac:27:01:1f:5f:e9:e3:cf:64:9d:
f6:e0:d0:62:f9:f5:9d:e5:db:81:ac:b4:fc:b6:9f:
48:79:ed:11:9b:05:c1:de:31:68:94:0e:fc:48:4c:
87:93:7f:df:82:90:73:5d:1c:c8:02:fd:2c:44:63:
91:50:a4:c1:a8:cb:15:ad:8b:62:3f:0b:d3:f8:6a:
76:d4:a0:9b:7c:f0:bd:96:78:4a:3f:b0:6d:d1:2e:
50:22:5f:9e:d3:01:45:8b:f9:c4:22:14:88:ac:39:
1f:16:5e:ce:0c:5f:7a:86:3b:b9:53:0a:71:58:bd:
dd:04:01:96:1c:4a:f7:d7:17:6a:05:37:73:21:a7:
b5:61:e2:4b:97:7c:94:52:f1:a7:6a:a6:ea:f3:ce:
1f:a5:1f:b8:72:a5:c9:d8:c2:ea:9e:1c:31:dd:7f:
63:65:3f:73:47:0a:1b:10:b5:d8:f0:7e:b7:a4:d1:
a1:22:84:e4:7f:41:92:db:36:3f:96:30:4b:3d:37:
c2:c3:b8:56:ac:33:35:ca:f5:8a:f8:0f:3f:c0:a7:
5d:b7:cb:52:19:b9:56:b1:15:6d:71:36:b9:aa:43:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D6:33:22:66:9A:10:E3:46:B8:B5:EB:0D:56:23:05:CD:46:EC:4D
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d4ee2e3735ec3ce56a55039e981e6dd7750438c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.146.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:d6:f6:1a:b5:51:53:b0:4e:29:0c:3f:01:bc:35:f6:75:0e:
6f:3d:35:fa:d6:06:fa:09:58:61:9d:39:77:b3:76:ee:76:ac:
c5:1e:23:26:b2:78:f4:41:a8:1a:e3:72:83:6f:bd:ac:42:5f:
6f:ae:b2:54:a0:69:bb:3c:0d:4a:7b:f3:22:50:4e:b0:95:ea:
65:26:58:b3:20:8b:02:04:2a:d5:0c:d9:63:c1:1e:1a:0c:a5:
0c:80:34:2f:d9:86:97:dc:7a:f9:73:e9:c3:41:1b:ef:63:7f:
32:91:59:56:b9:0c:d9:c2:11:08:65:e5:87:a1:20:16:a9:5a:
b3:67:97:5c:88:a3:fe:9f:7c:29:55:56:af:5b:6c:f8:6b:47:
4d:d4:71:a9:7a:50:05:6d:af:b6:4a:1d:a6:9e:85:1d:e7:08:
66:d1:7f:9a:6e:74:ba:7c:d8:68:52:48:13:c2:53:6b:66:e1:
c3:9c:eb:dc:b5:99:6a:dc:43:76:d4:9d:9d:23:7b:ba:b0:6d:
c6:4e:b4:29:97:a0:2b:f2:c6:8b:a8:66:77:28:aa:96:c5:55:
d2:7d:f2:26:d7:d4:6f:be:8b:87:27:2e:3a:74:f9:f6:05:be:
c1:74:95:05:fb:ca:dd:86:d4:c2:a9:52:40:99:e0:71:8e:ce:
86:c3:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org