Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c945048-3b60-49e8-93b5-66a63169f013/b1d026d9220919e2534b14a0bab6224648a3dd5d.roa
File: b1d026d9220919e2534b14a0bab6224648a3dd5d.roa (raw, json)
Hash identifier: 0DN1rc2XA3cx5d9dPc0lFqNC3CL6wV/Cx02KbRPO0lo=
Subject key identifier: 52:4C:C7:2C:F4:F0:5A:DB:74:AB:79:22:72:C8:D6:71:68:5B:87:64
Certificate issuer: /CN=fb8149a4c34afc6f97e6537d5af99417b7a1cb94
Certificate serial: BF
Authority key identifier: 59:9C:3A:63:E1:B9:C0:CF:B7:BE:A6:74:A1:DE:AF:F3:E3:A9:8C:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb8149a4c34afc6f97e6537d5af99417b7a1cb94.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c945048-3b60-49e8-93b5-66a63169f013/b1d026d9220919e2534b14a0bab6224648a3dd5d.roa
Signing time: Mon 04 Oct 2021 19:57:42 +0000
ROA not before: Mon 04 Oct 2021 03:00:00 +0000
ROA not after: Wed 04 Oct 2023 03:00:00 +0000
asID: 394474
IP address blocks: 170.81.52.0/22 maxlen: 22
170.84.228.0/22 maxlen: 22
2803:2b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8149a4c34afc6f97e6537d5af99417b7a1cb94
Validity
Not Before: Oct 4 03:00:00 2021 GMT
Not After : Oct 4 03:00:00 2023 GMT
Subject: CN=b1d026d9220919e2534b14a0bab6224648a3dd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:d9:c9:1a:a5:f6:50:f3:ed:d9:8a:ba:7a:
d7:e0:6a:0b:75:14:85:8d:df:ad:f5:cf:0c:6e:b6:
52:36:5c:c0:ca:88:a3:bd:7c:ac:4a:d2:5f:74:99:
c7:85:04:4d:65:0c:46:08:7c:e1:9f:f2:da:01:14:
f3:33:c4:a7:62:6f:17:7a:aa:c9:21:ed:bc:cd:eb:
ad:80:84:b2:3a:a0:9e:2c:52:16:4b:54:04:d0:c0:
d1:3c:29:55:f3:0a:27:21:c1:1b:03:6f:60:4e:25:
ea:28:89:43:f9:e7:8c:80:9a:61:04:47:7e:89:c8:
9c:ea:bf:c1:a0:87:e1:10:42:48:1a:b4:21:da:d2:
54:e3:e0:fe:ac:3e:03:14:42:64:b6:d9:d2:8f:61:
7a:30:97:33:d3:c3:fe:aa:c5:27:ce:40:e7:4b:07:
da:c3:d0:da:53:fe:aa:f7:04:cb:3b:21:cf:7f:51:
2c:e4:2b:83:7a:9e:c8:0f:a4:f2:65:31:68:34:7c:
d9:3a:b9:0a:06:a8:23:a0:2f:24:6c:20:26:29:fa:
d0:4f:c1:0f:b2:37:a3:6b:17:05:97:5b:60:88:16:
f9:ca:3b:ae:7e:39:7f:81:b0:11:49:d8:2c:81:24:
10:27:da:0a:14:3c:60:8a:b6:ae:d8:08:3b:18:ae:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4C:C7:2C:F4:F0:5A:DB:74:AB:79:22:72:C8:D6:71:68:5B:87:64
X509v3 Authority Key Identifier:
keyid:59:9C:3A:63:E1:B9:C0:CF:B7:BE:A6:74:A1:DE:AF:F3:E3:A9:8C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb8149a4c34afc6f97e6537d5af99417b7a1cb94.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c945048-3b60-49e8-93b5-66a63169f013/b1d026d9220919e2534b14a0bab6224648a3dd5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c945048-3b60-49e8-93b5-66a63169f013/fb8149a4c34afc6f97e6537d5af99417b7a1cb94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.52.0/22
170.84.228.0/22
IPv6:
2803:2b40::/32
Signature Algorithm: sha256WithRSAEncryption
8c:c9:3b:fd:a2:c8:d7:99:09:a8:cc:28:3d:d5:f9:b3:ef:8a:
31:7d:55:48:d9:5c:44:02:7f:9a:1b:b5:ef:23:ce:77:38:54:
c3:03:89:25:99:3b:d4:e1:5b:01:e4:56:e4:1b:47:1a:68:ea:
af:e3:9c:37:3b:2f:af:1e:08:80:00:53:69:35:5c:1b:7c:24:
f7:c2:6b:3c:6a:22:f1:cd:f7:bf:e1:ab:7e:bb:bd:fb:97:b1:
a0:13:c8:b9:aa:4e:07:05:61:bc:78:fa:2f:74:3d:1a:7b:3a:
23:f0:e3:a2:66:4a:b8:5e:46:bd:a0:83:29:6d:6d:10:a0:e2:
df:22:31:bd:63:bb:4d:2b:22:b0:93:dc:c1:4f:f1:e5:6c:33:
8c:ba:ac:8b:dd:2c:cb:b8:56:87:d5:ce:25:7a:78:4b:7a:d5:
a3:8a:74:8a:e7:c4:3a:13:0a:10:3e:b5:25:27:b1:b1:64:6e:
2c:71:a8:e8:66:fa:93:02:8a:87:4f:42:11:cb:2c:d5:c1:98:
c4:8f:d6:d5:9e:9c:e0:4a:c4:f8:b0:b7:62:fb:f2:4b:ae:d2:
1c:74:03:25:e5:19:7c:e9:00:4c:11:37:6f:65:f7:c6:53:82:
eb:25:52:d5:a6:f7:85:3f:7d:5f:8e:2f:3f:3d:9e:8b:46:41:
a9:9f:46:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org