Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f67f7acfb1a1e161d25f8a0fb11d767eee2833c8.roa
File: f67f7acfb1a1e161d25f8a0fb11d767eee2833c8.roa (raw, json)
Hash identifier: hekuTXlFvIlXDvpcAmJ7dpGc++VyMHkKD7VUwZD0qms=
Subject key identifier: B2:4F:94:E0:26:64:98:3E:8B:4D:33:A0:BA:1C:2F:87:C3:BA:55:EC
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 076C20
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f67f7acfb1a1e161d25f8a0fb11d767eee2833c8.roa
Signing time: Wed 31 Mar 2021 07:04:10 +0000
ROA not before: Wed 31 Mar 2021 03:00:00 +0000
ROA not after: Fri 31 Mar 2023 03:00:00 +0000
asID: 8100
IP address blocks: 191.96.64.0/24 maxlen: 24
191.101.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486432 (0x76c20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 31 03:00:00 2021 GMT
Not After : Mar 31 03:00:00 2023 GMT
Subject: CN=f67f7acfb1a1e161d25f8a0fb11d767eee2833c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:cd:6f:bb:09:8a:3a:3c:fe:39:eb:34:4c:
ba:58:53:e6:e6:b0:76:a3:d3:ea:61:52:0d:a6:5d:
33:e0:0f:bc:cc:5a:2b:1b:1a:a9:d1:d6:d4:c9:59:
3c:8b:53:95:b7:c2:05:b8:e4:85:1d:f7:25:71:7c:
ac:80:8c:c1:52:b7:24:13:16:26:a3:82:aa:bb:54:
d8:08:81:d9:ee:3d:a7:64:e8:d1:89:16:8b:30:22:
90:cd:42:cd:b8:f3:5d:d2:d0:2c:1f:68:7d:a5:6f:
12:e8:bc:d5:2c:0f:fe:9c:bb:da:71:1f:3d:e2:07:
ee:a8:90:83:71:38:63:26:25:ad:7f:ef:2b:94:36:
c8:62:67:50:49:bf:b6:ee:5e:66:f2:90:13:f3:98:
02:81:45:c0:f5:aa:08:bf:19:f8:e1:21:c8:87:ed:
82:15:26:21:e1:14:0d:56:ea:dd:f4:c6:bc:01:74:
38:9f:bb:4e:e2:b2:ea:18:fc:03:99:2e:75:e1:ff:
de:dd:a9:4d:3d:a1:08:05:25:47:0a:5d:0f:08:b8:
e5:fd:31:ad:b7:30:55:23:1c:3c:fa:e8:36:33:19:
cf:95:8c:94:69:17:41:c9:d0:55:cd:4b:02:14:c3:
46:cb:2d:65:7d:b9:ef:13:74:1f:79:99:a7:44:47:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:94:E0:26:64:98:3E:8B:4D:33:A0:BA:1C:2F:87:C3:BA:55:EC
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f67f7acfb1a1e161d25f8a0fb11d767eee2833c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.64.0/24
191.101.177.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a0:d2:f8:46:45:68:cb:3e:17:61:0c:7d:18:82:d8:ba:db:
dc:07:2f:98:2a:9f:e5:65:52:06:58:7d:f8:1f:d8:7e:74:1c:
57:f0:d5:f0:e6:7a:c6:97:6a:4f:92:ef:14:57:b8:c2:e3:16:
66:29:c8:dd:4a:6c:f5:6e:8e:43:85:eb:04:7a:4f:fe:91:ac:
e8:df:e1:1e:bf:1b:17:08:4c:ba:41:21:ec:d9:8d:cd:65:cf:
05:9e:d3:76:71:ad:00:03:5c:12:a7:07:07:11:c5:8b:7d:ec:
12:53:dd:0a:85:82:00:92:50:e7:1d:c8:df:54:cf:cc:b5:10:
c6:76:b6:3a:65:13:d8:42:63:cf:12:6a:91:04:a1:dc:b1:e3:
00:a8:38:c8:f8:4b:82:12:f5:fc:bd:ef:de:c2:5e:66:b9:fb:
ef:1d:49:1c:34:48:93:53:9e:63:78:f2:45:02:3e:7c:b4:e8:
48:1b:f6:08:f4:15:07:fd:e3:a3:32:2d:40:de:b6:3d:be:c4:
2b:d4:e7:76:9d:d3:e4:b0:1b:4e:63:59:3e:6e:c6:8b:c5:0b:
eb:3a:50:90:7c:73:6a:d3:9c:40:d9:93:46:c4:a0:58:a1:d2:
3b:e4:bb:fb:1a:58:b6:2d:c0:50:14:ac:44:d5:b1:2b:46:7b:
a1:0e:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org