Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1fffbf97-8a9a-4261-8e1d-53b5264f45de/14788dd48ea2724f3e012a49737ea9bddc708633.roa
File: 14788dd48ea2724f3e012a49737ea9bddc708633.roa (raw, json)
Hash identifier: RCA3IgG2J/htCR1wzt7fG9+ORosAI9JQPato7RD+dKU=
Subject key identifier: 68:3E:6D:6D:C2:9B:D8:77:72:C9:D6:48:F5:81:F5:2A:0E:50:89:BB
Certificate issuer: /CN=e1129399c2c45f18c2b3360cd94263772f9d4bca
Certificate serial: 2014B7
Authority key identifier: 68:72:6E:76:C4:05:6B:64:82:2B:65:F9:D8:76:91:0B:87:40:52:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e1129399c2c45f18c2b3360cd94263772f9d4bca.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1fffbf97-8a9a-4261-8e1d-53b5264f45de/14788dd48ea2724f3e012a49737ea9bddc708633.roa
Signing time: Wed 12 Apr 2023 18:06:49 +0000
ROA not before: Mon 22 Mar 2021 14:32:07 +0000
ROA not after: Tue 24 Mar 2026 14:32:07 +0000
asID: 28038
IP address blocks: 131.72.72.0/22 maxlen: 24
170.231.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102455 (0x2014b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1129399c2c45f18c2b3360cd94263772f9d4bca
Validity
Not Before: Mar 22 14:32:07 2021 GMT
Not After : Mar 24 14:32:07 2026 GMT
Subject: CN=14788dd48ea2724f3e012a49737ea9bddc708633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:80:b5:ee:83:b7:2e:85:a9:28:df:8c:54:
64:63:9b:14:6c:f5:b1:39:ee:f8:3c:c9:98:3a:fc:
c4:d7:7b:ac:d0:4c:7a:ab:ac:fe:a7:0d:db:6d:15:
a2:7f:44:df:62:a0:f2:1a:1b:46:60:9c:a1:d5:57:
ed:bf:a7:c7:47:d3:f6:43:0f:9e:5d:65:f0:6e:b6:
12:c8:cb:53:32:ac:f8:56:97:f7:fa:99:d7:35:96:
d8:8e:4d:3a:2a:4e:b7:44:64:a7:29:7e:b5:0f:ff:
b1:49:fc:41:9b:69:d5:d3:09:99:57:d0:bd:ed:da:
b5:82:16:f0:35:51:6a:57:e4:30:7f:bf:74:23:9b:
de:47:b9:bc:09:8f:30:49:66:91:56:eb:a5:76:3e:
f1:e0:ca:19:04:4e:80:dc:ce:bc:a2:38:fe:1a:11:
ce:9d:5c:b0:5c:9c:b5:ed:67:50:c9:d6:a7:27:76:
1f:be:cc:5d:09:22:0b:2b:37:60:87:b3:08:f8:13:
fa:4b:bb:f3:c5:83:6b:20:f2:78:e4:0e:70:96:85:
5a:3f:50:c0:37:c9:37:94:49:cf:c5:17:64:d1:7e:
13:58:ba:33:c3:03:ea:fd:92:f7:a1:2d:91:8a:87:
a3:f6:e6:df:ee:c5:99:aa:ff:22:b0:5c:31:8a:a0:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3E:6D:6D:C2:9B:D8:77:72:C9:D6:48:F5:81:F5:2A:0E:50:89:BB
X509v3 Authority Key Identifier:
keyid:68:72:6E:76:C4:05:6B:64:82:2B:65:F9:D8:76:91:0B:87:40:52:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e1129399c2c45f18c2b3360cd94263772f9d4bca.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1fffbf97-8a9a-4261-8e1d-53b5264f45de/14788dd48ea2724f3e012a49737ea9bddc708633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1fffbf97-8a9a-4261-8e1d-53b5264f45de/e1129399c2c45f18c2b3360cd94263772f9d4bca.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.72.0/22
170.231.160.0/22
Signature Algorithm: sha256WithRSAEncryption
59:93:a4:9c:3c:11:02:7d:bc:51:3e:83:28:55:f8:1c:7a:47:
5e:23:3b:80:a6:3e:26:ee:fd:51:e3:61:2f:d9:e0:8f:6d:fe:
e8:d7:d4:f4:86:4f:fc:d5:45:7b:fd:9f:b1:6e:35:1d:28:22:
94:f4:6b:5a:24:fc:8c:41:f3:3e:c8:1b:be:5a:8b:7e:a0:b0:
19:20:09:8f:92:04:f0:54:11:00:49:df:07:9f:c6:41:c4:56:
dc:23:51:0e:bf:a7:b0:b4:7b:cb:11:87:7d:3d:e5:ac:11:ca:
24:2f:8e:74:12:f6:ce:b4:55:9a:70:71:24:63:11:69:ea:76:
6e:44:b7:e2:7b:55:ed:8d:ab:9f:d9:f6:13:20:50:e4:87:8d:
7a:b9:0a:68:90:d3:7b:28:bd:f8:86:11:19:e4:26:e3:42:9b:
8b:07:4a:ee:fa:4e:36:e0:6e:04:a1:4f:37:f6:0d:30:93:8d:
59:ab:ab:86:4a:9f:31:01:43:a5:24:a4:0b:59:90:c8:12:e0:
3f:a6:c1:0a:86:b2:75:86:3b:cb:3b:35:df:c1:7b:9b:ad:96:
ad:09:a7:3e:1c:c3:a4:01:37:eb:3f:c5:eb:20:a4:df:18:c8:
7b:e1:1c:7f:d0:49:ad:20:ce:06:8d:81:c3:bf:69:b8:55:14:
8a:e5:a4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org