Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/612a12b8eddf9f4fd08624c8b89582b6571077c7.roa
File: 612a12b8eddf9f4fd08624c8b89582b6571077c7.roa (raw, json)
Hash identifier: /uNf9PAbtQtJsaH9zNi5OHUoqwX/msOdOF7fjWRqEhI=
Subject key identifier: 67:40:42:CF:57:65:94:D7:22:B6:B7:90:4B:96:D9:6D:84:A2:33:26
Certificate issuer: /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial: 157BBA
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/612a12b8eddf9f4fd08624c8b89582b6571077c7.roa
Signing time: Fri 18 Mar 2022 21:00:45 +0000
ROA not before: Fri 18 Mar 2022 03:00:00 +0000
ROA not after: Mon 18 Mar 2024 03:00:00 +0000
asID: 14080
IP address blocks: 191.156.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1407930 (0x157bba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Validity
Not Before: Mar 18 03:00:00 2022 GMT
Not After : Mar 18 03:00:00 2024 GMT
Subject: CN=612a12b8eddf9f4fd08624c8b89582b6571077c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:47:8a:d2:52:ec:8c:d6:27:3d:62:dc:d3:
f9:35:ca:7a:a2:26:2b:a9:45:83:fc:f1:2f:bb:f0:
7d:ff:4c:09:c5:00:e4:b0:2d:30:99:75:be:62:5b:
30:eb:cb:ac:f9:d2:1b:95:3f:5e:15:c8:f5:13:24:
d5:93:e2:bc:ef:6a:80:b7:fa:f4:1b:41:5b:a1:fd:
20:06:c8:86:e6:fa:6f:75:06:f9:2a:00:51:4f:5b:
e2:2d:5f:e8:6d:86:ff:7f:80:c4:23:ed:9e:c4:1a:
a4:b6:e2:7f:8e:a4:a1:88:2d:51:95:a0:c3:cc:e1:
89:fc:b7:52:7c:f1:2d:63:68:58:f7:80:70:8f:c4:
15:5f:78:d7:91:a8:ed:15:bd:61:21:e8:41:3a:cf:
2f:25:3b:f0:09:f7:a0:e8:71:87:05:df:c3:96:02:
36:0f:0c:7d:3b:e6:dc:6b:30:1e:4a:2d:66:12:8b:
37:5d:ea:d8:bc:85:81:44:2d:4d:73:e3:14:a7:d2:
10:3b:55:07:78:19:9e:17:26:ca:bc:b0:20:21:54:
d5:43:62:61:ce:76:e7:97:4c:63:b6:1a:e8:97:28:
10:1f:ea:ae:09:ea:79:45:d0:2c:1b:d9:57:78:44:
49:66:2d:85:90:d8:a4:cb:ac:ae:63:2b:3f:7d:79:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:40:42:CF:57:65:94:D7:22:B6:B7:90:4B:96:D9:6D:84:A2:33:26
X509v3 Authority Key Identifier:
keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/612a12b8eddf9f4fd08624c8b89582b6571077c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.156.23.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fa:93:69:d8:9e:df:5e:c4:81:2f:44:b6:b9:7c:2c:44:50:
14:35:3e:8f:f4:68:28:1e:52:21:9f:4a:e7:c3:c4:0f:09:27:
ea:b3:5b:1a:01:e2:4b:66:d2:74:89:e6:40:36:87:89:9d:13:
3c:26:8e:ab:db:bd:52:7e:84:af:52:e6:23:a6:ca:fb:a6:71:
b5:27:c0:16:09:5f:cc:08:4e:82:68:3b:84:7d:49:2d:4b:2c:
fa:e9:fd:97:f1:87:12:f7:b6:82:fc:7a:ea:ee:e2:85:eb:dc:
e0:5f:a8:5a:de:01:03:fe:d4:0b:89:9d:12:82:2d:6a:1a:2d:
e8:2e:15:f9:44:85:f6:eb:f3:2e:d9:f1:39:a0:b9:0d:7e:a2:
7c:eb:63:63:f6:7a:88:93:5a:95:bb:3d:a4:7b:12:9f:41:7e:
cc:ca:6a:c1:f0:b4:86:45:87:73:e9:63:d5:fe:5e:68:50:6a:
05:69:8a:b0:f4:41:54:a1:37:e4:3b:67:83:30:03:68:50:80:
9b:0f:98:00:1e:63:01:c8:13:07:39:df:fa:cc:08:c1:24:70:
be:12:7b:29:9d:c2:c1:ae:7d:7f:5c:ed:08:54:93:21:14:44:
de:32:cb:74:39:f0:51:b6:33:18:0f:1b:c9:6a:7a:ad:32:8a:
a6:c5:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org