Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c3ef95db91500aa1203ac92e8ffbf0bdd5fdc51a.roa
File: c3ef95db91500aa1203ac92e8ffbf0bdd5fdc51a.roa (raw, json)
Hash identifier: MojjU5dKuAXFgomGJB4JBkEXZ5lVzxTrxSxa8M1uL1Q=
Subject key identifier: 33:4E:70:DD:79:74:53:1B:D7:C2:C1:ED:90:5B:AF:F2:98:48:3C:19
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 1231A3
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c3ef95db91500aa1203ac92e8ffbf0bdd5fdc51a.roa
Signing time: Wed 08 Dec 2021 21:50:50 +0000
ROA not before: Wed 08 Dec 2021 03:00:00 +0000
ROA not after: Fri 08 Dec 2023 03:00:00 +0000
asID: 11426
IP address blocks: 181.214.13.0/24 maxlen: 24
191.101.190.0/24 maxlen: 24
191.101.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192355 (0x1231a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Dec 8 03:00:00 2021 GMT
Not After : Dec 8 03:00:00 2023 GMT
Subject: CN=c3ef95db91500aa1203ac92e8ffbf0bdd5fdc51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:2f:67:bb:c6:a9:c6:6d:40:47:a7:2f:cb:
f8:34:6f:f5:1d:f5:c2:30:0a:70:ab:04:af:d6:1d:
f8:8f:f7:78:32:49:e6:98:28:04:61:15:a1:49:ca:
09:b7:6d:3a:0f:f9:26:aa:52:42:9a:0f:6c:63:6c:
1a:4d:27:1d:79:0a:d5:1e:2a:92:cc:b4:fd:f4:12:
dc:b2:ee:74:9e:6a:0b:7e:99:f6:4c:c5:fa:10:e3:
da:ce:7a:72:ce:10:e9:17:48:e3:e8:3d:04:fb:2b:
86:77:6f:14:c7:e4:ed:4d:d8:cb:c2:85:ad:6a:45:
b6:af:1f:81:eb:f4:da:b8:ce:69:f4:1b:2a:b8:1d:
d7:7e:07:11:6d:73:d5:64:60:0e:3f:d5:24:d0:ec:
08:4d:3e:67:30:0d:66:27:ee:bd:3b:cc:65:99:ec:
5d:ac:d1:f2:0b:bb:97:31:fb:03:2a:70:53:9d:84:
1e:c8:d0:d1:29:71:11:ce:9b:36:d6:db:59:02:07:
e4:83:df:07:51:35:24:b2:35:3d:39:38:a5:91:e0:
ee:88:55:d5:a7:93:b3:b3:96:a5:81:b0:47:21:5f:
a1:26:f7:f7:51:04:91:59:88:e3:e0:58:af:83:80:
51:14:e2:03:26:b0:ce:3c:98:80:92:65:dc:db:8d:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4E:70:DD:79:74:53:1B:D7:C2:C1:ED:90:5B:AF:F2:98:48:3C:19
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c3ef95db91500aa1203ac92e8ffbf0bdd5fdc51a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.13.0/24
191.101.190.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:c5:98:2e:f0:fe:90:d8:d3:b2:bb:73:8c:82:6f:83:d8:6f:
3b:36:ac:9a:8a:3b:ca:5d:a9:b7:d6:99:40:c8:61:52:9b:aa:
74:2a:43:ee:93:11:3d:b0:84:7d:a4:64:5b:f3:a9:97:ee:95:
92:30:0c:1b:be:a6:ba:7d:25:fe:16:00:9f:0f:ae:6d:bd:6d:
ed:e3:87:a9:59:d5:41:2c:28:48:fc:c7:75:4e:42:d2:59:65:
f3:ba:90:27:88:0a:a6:94:22:c9:20:d9:86:4c:ec:bf:51:8f:
29:43:7a:97:55:92:8d:95:15:a0:dc:7b:b7:b3:bc:82:f3:4c:
d8:44:25:23:22:98:2d:0b:94:76:f3:47:4d:d9:fd:5a:ce:6c:
f5:41:60:62:b7:72:85:cb:93:56:70:43:ea:44:3a:6f:36:1e:
3d:56:c7:58:70:84:5f:0c:c9:a0:d8:7d:ae:b1:e2:21:45:25:
4c:f7:2a:21:0c:93:b3:a0:0c:e5:56:59:07:46:23:e8:92:74:
35:e4:fa:26:3a:fd:5a:b1:c2:fc:0b:a9:34:57:60:ae:51:6a:
68:01:0e:f7:08:31:e0:55:23:37:d9:ff:5e:60:ed:98:e6:12:
db:96:68:7d:9e:8f:00:b8:6f:e3:cd:32:b9:0d:17:7a:5d:54:
d8:32:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org