Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/d33bb0afbfa5598995d02c9f3ef5854ebcdba8f4.roa
File: d33bb0afbfa5598995d02c9f3ef5854ebcdba8f4.roa (raw, json)
Hash identifier: q0Vie/Q/Va/Q3Ewton5lQeZ/fR64On9/8oim9X8hRg8=
Subject key identifier: 75:BE:96:40:19:D2:55:23:84:F0:71:DC:D0:9F:DB:4E:C4:E9:3E:78
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 247F95
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/d33bb0afbfa5598995d02c9f3ef5854ebcdba8f4.roa
Signing time: Fri 21 Jul 2023 20:55:28 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 265758
IP address blocks: 190.216.56.0/24 maxlen: 24
201.234.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391957 (0x247f95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=d33bb0afbfa5598995d02c9f3ef5854ebcdba8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:74:7c:43:de:3e:08:9e:14:bf:28:db:34:
50:67:df:2e:c6:ef:fd:11:19:fb:3c:a8:9e:a2:1c:
fb:99:17:5c:8d:f8:07:81:6f:66:62:12:82:cb:ef:
6e:5d:45:84:e9:fb:49:6e:4a:d0:8b:09:4b:e3:fa:
ec:61:81:62:b7:ec:73:4a:df:4b:42:6b:1e:59:59:
c2:49:f3:5e:52:af:70:26:6a:75:12:10:52:8c:58:
0d:18:47:f1:18:3b:79:fd:68:af:b0:e6:99:65:11:
70:74:ec:b7:23:ae:70:32:09:d6:a6:e0:20:14:27:
be:33:a5:41:56:6d:94:c8:d6:37:3d:6f:bc:11:85:
2a:cd:89:18:9c:7c:5a:56:69:76:d0:80:39:c6:37:
38:b1:3b:d7:b0:77:5a:a9:1c:ef:20:6f:e7:62:c7:
3f:86:47:cf:a3:b6:92:94:59:a2:49:2f:03:89:7a:
d4:0c:d6:9b:be:07:c1:38:f7:54:b3:ac:25:a6:87:
9e:35:e1:9c:92:df:6f:e3:65:fe:c7:4d:2b:dc:eb:
65:13:72:19:b6:38:25:30:ff:b6:88:be:c5:15:b1:
c1:94:dc:e9:15:80:93:8b:8e:fc:e3:5f:7e:cb:7f:
c1:e3:1d:83:96:d8:fd:99:d9:0a:40:e4:f5:d3:4f:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BE:96:40:19:D2:55:23:84:F0:71:DC:D0:9F:DB:4E:C4:E9:3E:78
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/d33bb0afbfa5598995d02c9f3ef5854ebcdba8f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.56.0/24
201.234.24.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c1:e0:52:6f:1a:30:81:3e:dc:dc:b1:47:d1:12:aa:12:6f:
ba:05:36:7e:eb:2a:9c:22:e3:b9:c1:f3:76:67:91:a8:1c:5c:
34:31:30:f8:e8:b2:4e:64:a7:39:fc:b6:45:6f:3f:0a:3c:60:
75:66:97:2f:28:25:4e:59:1b:95:f3:9f:86:4b:b4:cf:f2:12:
3b:54:fe:bf:81:08:5f:2f:b5:98:bf:e4:ba:68:a3:55:b3:62:
d3:54:aa:fa:1a:2c:b6:d5:5f:46:8b:b5:a1:a4:fc:6a:27:2a:
43:fd:67:60:cf:08:4d:c5:1d:5e:52:cf:31:17:bc:b3:ad:8c:
50:6f:91:9e:dc:fc:48:b9:e4:82:5e:f2:28:50:bb:33:4c:e6:
7b:24:97:36:a4:b7:66:48:7c:19:ea:ce:3d:86:79:8d:2c:ac:
4b:30:9a:47:7d:03:a4:36:f8:3f:a5:84:43:c2:98:3c:3f:73:
98:be:6b:14:e5:04:51:f1:0f:74:0f:75:e5:f9:03:42:7d:a0:
d9:2f:2a:38:98:f3:a5:16:ef:d3:a8:71:d7:de:3e:23:7d:de:
09:25:ac:ce:94:a9:66:1e:80:ee:1b:8d:1b:ab:14:e2:90:1e:
0b:55:e2:3c:48:31:ce:21:b0:e1:7a:22:24:b1:26:84:d9:90:
ac:1a:70:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org