Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/dcffd881f281fc7c8cdcc80b873e0131f1e76f10.roa
File: dcffd881f281fc7c8cdcc80b873e0131f1e76f10.roa (raw, json)
Hash identifier: xkPWhOyYZ4FlBAqpaV21vnmZACUxW89msAhaO0WktV0=
Subject key identifier: 7E:7A:DB:1D:48:AD:40:CA:E3:DA:FE:58:30:CB:59:38:48:CB:22:B9
Certificate issuer: /CN=0736b876e6c976d927742fb22fc1d06c98292216
Certificate serial: 2575D5
Authority key identifier: E4:C8:26:B0:8C:18:BD:7F:97:7F:2B:35:5F:70:5D:26:C2:59:2A:07
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0736b876e6c976d927742fb22fc1d06c98292216.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/dcffd881f281fc7c8cdcc80b873e0131f1e76f10.roa
Signing time: Fri 01 Dec 2023 19:22:45 +0000
ROA not before: Fri 01 Dec 2023 19:22:45 +0000
ROA not after: Mon 01 Dec 2025 19:22:45 +0000
asID: 262262
IP address blocks: 190.124.16.0/21 maxlen: 24
170.231.52.0/22 maxlen: 24
138.204.180.0/22 maxlen: 24
170.247.84.0/22 maxlen: 24
2803:b700::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2454997 (0x2575d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0736b876e6c976d927742fb22fc1d06c98292216
Validity
Not Before: Dec 1 19:22:45 2023 GMT
Not After : Dec 1 19:22:45 2025 GMT
Subject: CN=dcffd881f281fc7c8cdcc80b873e0131f1e76f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:63:fd:1e:c3:17:b3:83:07:04:34:9b:27:
4a:42:09:65:cf:99:46:27:cb:15:5c:f0:f8:8a:e7:
8c:fa:e9:2b:da:49:cd:ec:54:8f:f1:59:c8:64:67:
dc:34:ca:65:ff:f1:f8:5e:c8:2a:59:f7:f0:a2:1b:
6e:8b:5c:0b:91:b6:a4:90:0a:47:95:79:fb:4b:b3:
06:c3:d4:12:1a:42:44:0d:65:fc:0c:af:a1:70:5a:
87:2b:4b:85:7c:c6:ae:e8:e9:bb:58:df:c1:d8:d8:
cb:0e:0e:29:23:b1:d1:82:f4:09:c9:9c:14:bd:9c:
33:42:d5:47:de:67:7c:e6:ab:70:e1:ef:67:9d:50:
c0:54:8d:07:1b:32:83:a8:44:50:c7:a5:af:94:9b:
56:b6:69:68:c9:49:c2:77:6a:be:ce:5f:94:2a:66:
8c:78:39:1f:a6:0c:e7:dd:08:72:6e:d9:88:80:fa:
88:b2:86:88:31:87:29:2a:0d:68:ba:f6:4d:54:79:
7a:70:9b:05:d4:76:c0:4f:aa:2d:3a:2a:26:cc:2f:
d4:ba:ae:bd:f5:35:a6:9c:57:76:d1:32:e6:de:c9:
f6:df:bb:7f:4e:32:26:11:d4:77:03:eb:01:46:4b:
99:84:c5:81:71:a9:fb:f5:8e:05:ae:ea:16:db:9c:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:DB:1D:48:AD:40:CA:E3:DA:FE:58:30:CB:59:38:48:CB:22:B9
X509v3 Authority Key Identifier:
keyid:E4:C8:26:B0:8C:18:BD:7F:97:7F:2B:35:5F:70:5D:26:C2:59:2A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0736b876e6c976d927742fb22fc1d06c98292216.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/dcffd881f281fc7c8cdcc80b873e0131f1e76f10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/0736b876e6c976d927742fb22fc1d06c98292216.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.180.0/22
170.231.52.0/22
170.247.84.0/22
190.124.16.0/21
IPv6:
2803:b700::/32
Signature Algorithm: sha256WithRSAEncryption
36:84:4f:3e:5d:fe:43:e5:e2:cc:04:1c:a9:a5:c2:b1:10:23:
58:73:2b:86:a5:56:4a:d3:3c:ac:4b:39:8e:be:9c:09:8f:f3:
a4:60:7d:2a:26:be:c3:aa:ab:ff:b8:20:55:9a:9f:1c:97:07:
f3:f8:fd:17:6a:e8:66:3e:37:9d:a2:3b:9f:c3:81:34:0f:07:
49:96:d9:04:48:aa:46:5d:b0:c4:96:a6:ff:5e:c8:77:dd:22:
4b:d5:ac:56:53:99:90:32:28:76:9a:49:08:ca:e5:dc:28:38:
d7:16:2f:62:8e:1f:e6:24:19:38:64:09:7c:47:0a:6e:e8:7e:
49:0b:07:8b:e7:5e:e6:d3:92:ed:3c:eb:85:83:52:2b:5d:f5:
45:f4:41:03:3f:04:79:bf:3e:95:ca:ef:31:24:8d:ae:47:ea:
d9:0e:31:21:a3:76:52:d3:8d:e5:10:01:68:e8:fe:5c:36:ed:
4c:69:2c:ce:3f:5a:1e:7c:87:bd:5a:05:19:77:3f:3c:5b:c0:
3f:7a:45:f6:1c:75:38:94:53:3c:9c:08:2f:b8:50:92:9d:8e:
c8:df:da:1d:66:d3:98:16:72:77:58:69:3a:9e:3e:1d:84:35:
91:ac:cc:2b:ac:a7:94:a9:1b:5f:93:8a:90:d9:5d:88:3d:4e:
b3:9c:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org