Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127a40ea-1d5d-4ec3-870b-c03a19c9ea9d/d7112f68b764d171cf19beef55a144e7acbb9549.roa
File: d7112f68b764d171cf19beef55a144e7acbb9549.roa (raw, json)
Hash identifier: kIHnMnwgT6ej0EXWVsjSeAyET4TJ1xWFRlVOBaCXAu0=
Subject key identifier: 49:0D:EC:08:67:91:C0:D2:EE:C8:E8:8B:F3:57:4F:0E:43:F3:F0:6B
Certificate issuer: /CN=8ba71de6ce7469eb07bdfd6d05a75e6325c7e090
Certificate serial: 0D5178
Authority key identifier: A6:2A:34:1A:3B:C5:1F:EB:3F:27:3B:7B:2F:29:C5:35:8F:67:E7:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ba71de6ce7469eb07bdfd6d05a75e6325c7e090.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127a40ea-1d5d-4ec3-870b-c03a19c9ea9d/d7112f68b764d171cf19beef55a144e7acbb9549.roa
Signing time: Wed 24 Mar 2021 14:32:13 +0000
ROA not before: Wed 24 Mar 2021 14:32:13 +0000
ROA not after: Tue 24 Mar 2026 14:32:13 +0000
asID: 264608
IP address blocks: 143.202.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872824 (0xd5178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba71de6ce7469eb07bdfd6d05a75e6325c7e090
Validity
Not Before: Mar 24 14:32:13 2021 GMT
Not After : Mar 24 14:32:13 2026 GMT
Subject: CN=d7112f68b764d171cf19beef55a144e7acbb9549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:1c:83:25:7d:26:3e:ed:ad:ff:59:c2:10:
97:0b:4b:04:38:ba:b5:2a:2b:92:2e:0c:09:18:db:
50:9e:c0:f5:aa:03:b9:f0:77:27:a5:7c:60:f5:a0:
e1:db:20:b9:38:64:f1:6e:b0:54:bd:2e:48:49:51:
fd:67:16:5c:9a:95:2f:e7:91:ce:cd:03:5c:bb:e0:
b1:f4:c4:31:3c:62:3f:a1:bf:29:28:f4:9e:92:d7:
f1:e5:3b:44:26:8e:fc:68:a9:ba:a9:e7:61:0f:a2:
32:50:6e:64:ec:5e:2e:d1:16:1a:1b:0b:50:03:09:
8c:e8:6f:28:3a:0f:5b:3a:80:23:0e:7b:82:e0:4b:
83:83:ef:c5:ee:5d:49:f5:27:46:6e:78:9a:7a:bb:
17:e0:f0:62:78:79:48:55:02:5a:61:3a:92:1b:5f:
bd:06:60:a4:7a:88:0f:f2:16:8f:b8:e7:8a:40:e2:
60:4f:10:00:df:4e:10:30:85:d0:c8:a2:49:d6:da:
28:a7:69:9b:77:15:ed:10:37:9d:cc:95:ce:68:e4:
a4:a1:bb:5e:40:28:72:d7:61:5d:81:53:4b:8c:9e:
e0:40:96:f6:97:77:8f:25:65:11:83:9e:b1:e2:af:
ff:24:64:b7:12:2c:4b:85:7b:79:64:7d:d4:f2:08:
fc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:EC:08:67:91:C0:D2:EE:C8:E8:8B:F3:57:4F:0E:43:F3:F0:6B
X509v3 Authority Key Identifier:
keyid:A6:2A:34:1A:3B:C5:1F:EB:3F:27:3B:7B:2F:29:C5:35:8F:67:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ba71de6ce7469eb07bdfd6d05a75e6325c7e090.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127a40ea-1d5d-4ec3-870b-c03a19c9ea9d/d7112f68b764d171cf19beef55a144e7acbb9549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127a40ea-1d5d-4ec3-870b-c03a19c9ea9d/8ba71de6ce7469eb07bdfd6d05a75e6325c7e090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.20.0/22
Signature Algorithm: sha256WithRSAEncryption
14:16:46:31:0d:97:88:7d:35:53:9f:6f:c7:1a:ab:fc:60:89:
af:a8:e4:d1:a9:f6:dd:2e:6b:5a:06:8b:a4:62:89:26:32:dc:
84:41:bb:4f:d9:14:e8:00:c8:24:b0:dc:4d:f6:72:87:ce:64:
68:65:4b:4b:e4:8c:d8:85:77:0a:cb:7a:fc:80:fa:4c:a9:88:
ca:e7:5a:85:c5:eb:8d:6a:c7:04:85:78:25:13:69:5d:32:ce:
88:e4:59:f5:ef:6a:b9:cc:f3:b8:07:fe:98:c2:ac:33:92:0e:
e3:c6:10:e3:48:33:22:62:9d:86:e2:a9:2b:6d:cc:fd:a2:f0:
99:bb:40:2b:a9:58:ce:76:87:f1:52:82:1c:80:31:63:d9:87:
27:3a:35:32:1f:f2:2b:20:15:26:64:c1:16:3c:23:f2:13:29:
72:4e:ff:df:13:f5:3b:ea:19:7c:e3:a9:fc:5e:fb:c2:69:0d:
af:1c:4c:a1:a5:0e:99:3b:cd:fa:e5:27:98:c3:4d:0d:26:d4:
c9:55:be:cc:38:40:1a:8d:0f:d9:cc:00:ae:b6:01:46:5e:7a:
e2:42:c0:0b:59:d8:dc:7b:b5:7b:eb:1c:73:b1:52:34:00:07:
33:8d:7c:f3:c9:cc:4d:f4:2d:5e:71:b5:39:69:bc:73:c5:d6:
d9:63:59:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org