Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/af0e9aa05add3be689177e462758918982512571.roa
File: af0e9aa05add3be689177e462758918982512571.roa (raw, json)
Hash identifier: DxhGpQnC+1jjJgyHibJhTwl6wkogxQEo+3GRZdh/StQ=
Subject key identifier: 19:92:94:1C:D5:69:1C:97:C0:DE:AC:5D:7B:6D:3E:71:8D:9A:64:DC
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 13BDBC
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/af0e9aa05add3be689177e462758918982512571.roa
Signing time: Thu 06 Jan 2022 18:09:59 +0000
ROA not before: Wed 01 Sep 2021 03:00:00 +0000
ROA not after: Fri 01 Sep 2023 03:00:00 +0000
asID: 42831
IP address blocks: 191.96.110.0/24 maxlen: 24
191.101.59.0/24 maxlen: 24
181.215.229.0/24 maxlen: 24
181.215.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1293756 (0x13bdbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Sep 1 03:00:00 2021 GMT
Not After : Sep 1 03:00:00 2023 GMT
Subject: CN=af0e9aa05add3be689177e462758918982512571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:49:c2:bb:46:71:f3:ed:f4:27:bf:c2:8c:
a9:06:1b:c3:a2:7a:f9:55:45:dd:4f:ef:5c:1e:21:
c2:55:b8:0a:27:24:00:67:02:da:a1:1c:5c:66:c6:
73:82:bb:07:38:44:c0:ef:66:75:eb:1a:5e:38:62:
bf:4d:db:a9:0e:3a:89:a4:a6:71:87:78:61:6f:f0:
ec:33:2e:bc:81:7a:66:af:94:4c:fd:02:fd:41:34:
10:5a:35:29:44:93:4a:40:fa:30:a1:ba:f1:eb:bc:
ec:5a:a3:e6:b8:36:1e:aa:05:be:42:26:4d:2b:89:
f6:14:40:85:80:ff:52:f7:c9:35:a1:71:c9:09:bd:
5a:39:4a:84:ee:ce:a6:8f:d0:be:46:8a:48:d4:59:
e0:fe:e3:80:2a:4b:e5:bd:6d:2c:7b:8a:ea:77:7a:
3e:54:b9:7e:64:39:fe:75:26:48:09:a1:02:2c:1b:
2a:c6:bd:18:5b:93:fa:30:3c:46:ce:cd:a9:10:e7:
03:e5:0c:f3:8e:ee:a8:97:21:4b:3d:e5:cd:62:ae:
08:6f:df:6b:09:cc:d5:05:e4:03:de:bd:e1:33:ab:
e8:7e:22:23:8b:1b:ac:9d:b0:a3:4b:e2:bb:cb:a6:
0a:4e:5f:2c:d5:7f:cb:97:72:ed:2c:1c:51:de:45:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:92:94:1C:D5:69:1C:97:C0:DE:AC:5D:7B:6D:3E:71:8D:9A:64:DC
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/af0e9aa05add3be689177e462758918982512571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.226.0/24
181.215.229.0/24
191.96.110.0/24
191.101.59.0/24
Signature Algorithm: sha256WithRSAEncryption
21:85:0e:b7:ab:19:0b:2c:46:b4:60:fc:45:79:86:94:5a:31:
68:b6:b8:dd:b2:c8:7f:ea:01:34:2b:96:a4:a2:c9:a5:91:a2:
bd:78:8e:8c:f4:28:95:91:bc:6f:c3:56:48:07:ea:c2:63:e7:
9c:02:da:d4:71:67:5f:38:31:7e:4d:6e:2b:9b:8e:73:9d:18:
6c:4a:04:12:68:4b:a4:1e:65:c1:48:df:a9:e2:0d:13:e0:36:
11:54:8a:0d:1a:9e:44:ee:61:53:31:23:4e:cb:7b:1c:5d:64:
50:13:f1:00:b6:83:12:f1:17:9d:ed:04:f0:c1:86:7f:8c:6e:
82:cb:66:66:d6:d3:4d:b4:7d:30:e3:81:d0:a6:29:2d:bf:e4:
c7:aa:52:84:89:a0:76:02:78:59:40:38:2b:cd:46:19:0c:b5:
ae:9d:3b:e8:df:9d:32:3f:b4:c2:12:fa:c5:f6:bb:d9:c4:30:
54:17:53:8d:ad:95:32:b4:34:7f:90:a5:47:14:4a:6f:3d:a1:
34:25:4a:6b:09:56:c1:13:8d:62:02:da:12:8b:01:84:68:b2:
f3:c6:a7:13:dd:33:c6:10:7d:af:33:01:7f:74:6b:ec:5f:83:
7a:c0:70:a3:07:10:4a:fc:55:29:5f:84:34:a7:a7:4e:5a:60:
3f:13:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org