Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/a648116100111b25c35047aa08457ef47eccb068.roa
File: a648116100111b25c35047aa08457ef47eccb068.roa (raw, json)
Hash identifier: 4G0IaplfaqETT2OsLr9SwG+tu1jKGoHC1Sy/AViTg4s=
Subject key identifier: 02:4C:F0:C8:DA:0E:C4:56:62:A8:43:3B:FE:D3:5F:24:61:02:A0:79
Certificate issuer: /CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Certificate serial: 0EEDDB
Authority key identifier: 88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/a648116100111b25c35047aa08457ef47eccb068.roa
Signing time: Mon 03 Jul 2023 16:19:31 +0000
ROA not before: Sun 02 Jul 2023 16:19:31 +0000
ROA not after: Thu 03 Jul 2025 16:19:31 +0000
asID: 263824
IP address blocks: 131.255.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978395 (0xeeddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Validity
Not Before: Jul 2 16:19:31 2023 GMT
Not After : Jul 3 16:19:31 2025 GMT
Subject: CN=a648116100111b25c35047aa08457ef47eccb068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:39:fb:36:81:53:43:cc:18:2a:89:49:bd:
fc:79:c8:e0:63:5c:d9:f0:42:1a:e3:8f:7b:80:9b:
29:37:c5:13:13:a6:8a:57:16:9f:29:fb:9a:14:e6:
98:54:8f:16:43:77:13:67:9b:04:ae:c5:aa:b3:df:
4f:81:6e:64:4e:10:23:50:14:ef:5c:61:ef:2b:00:
73:61:0a:67:1c:bb:d7:ca:f2:1d:f5:87:6b:bd:e0:
ab:37:05:10:c1:55:96:f3:de:bb:18:05:06:65:91:
65:05:10:37:52:27:d5:a4:0e:8f:e7:70:3b:62:5d:
14:f1:1a:da:43:93:be:dd:5e:97:d1:73:3b:e8:de:
6c:08:0b:59:76:b5:ee:0e:ba:fc:24:d0:73:31:7b:
7f:f0:ab:52:17:81:cd:6a:48:9c:e0:1c:74:bc:22:
87:3f:a1:ac:68:69:92:1f:20:ad:ad:1b:3c:dc:29:
97:68:f0:b8:68:98:80:a5:78:ef:6f:7e:0e:48:dc:
3e:b4:5b:c3:2e:89:ba:ee:12:66:9f:aa:85:55:75:
0e:ae:9e:53:a5:d4:2d:1a:5a:d4:d2:39:55:dd:91:
3d:c9:84:ca:c5:07:4c:ee:37:82:d7:05:f2:e2:ba:
60:d5:6a:a6:93:39:2b:0f:6e:f1:92:76:c2:22:b7:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4C:F0:C8:DA:0E:C4:56:62:A8:43:3B:FE:D3:5F:24:61:02:A0:79
X509v3 Authority Key Identifier:
keyid:88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/a648116100111b25c35047aa08457ef47eccb068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.40.0/22
Signature Algorithm: sha256WithRSAEncryption
14:ca:51:a8:3f:48:41:4d:76:aa:33:78:4d:96:a0:08:89:3c:
7f:ae:51:70:00:cf:03:a1:11:ea:77:86:5d:1e:43:e9:96:78:
92:05:8f:17:93:4e:04:e2:07:cd:33:26:0b:c6:99:f0:5d:f7:
d2:99:20:0b:d2:2b:44:dd:2f:14:eb:67:2c:31:d3:0f:96:b3:
e9:15:72:20:de:8c:c1:5f:d5:39:f3:36:81:61:8f:03:75:f0:
0a:31:44:b5:a8:28:54:2b:bf:d6:2a:49:7d:54:34:e8:1e:4c:
3e:f9:26:d5:91:86:71:08:38:1c:67:29:72:13:bf:e2:0c:64:
21:10:1b:64:c8:a9:c6:14:63:95:c1:43:11:31:a2:6b:7c:e7:
ea:67:7c:01:93:8a:b6:c5:9b:c9:4e:08:d6:7e:43:4c:39:ba:
e6:16:67:ef:06:21:d0:05:b6:d0:07:a0:73:71:fc:0e:af:06:
64:18:b1:42:af:81:11:f4:d6:8b:15:5d:e7:8e:52:f3:92:91:
bb:8b:4a:0f:3d:53:73:f9:0b:db:9c:2a:4a:e7:2c:55:55:6b:
3f:56:d3:21:bb:25:f5:a7:b6:db:fa:d9:ca:4e:6a:af:6e:96:
90:a4:46:cb:e9:ce:de:9c:db:11:c0:7a:cd:bd:02:bd:8f:53:
7f:e8:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org