Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/940b6d304d0c3160eade5697ff165e0418c5c797.roa
File: 940b6d304d0c3160eade5697ff165e0418c5c797.roa (raw, json)
Hash identifier: GlWwa7humSp0+6KTuzSDUfMMbPcV6Vd5yLKLGCHpU0w=
Subject key identifier: 8A:C0:8A:32:8D:1A:9C:68:94:A8:24:13:30:97:72:FA:6F:0A:F3:A8
Certificate issuer: /CN=9facf1e4ddef7682e26c289d5411679fcf8b7155
Certificate serial: 0D50D5
Authority key identifier: 94:73:DB:DA:2A:63:D4:2F:8B:7C:C8:8A:9F:3C:7C:D6:0C:CA:E3:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9facf1e4ddef7682e26c289d5411679fcf8b7155.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/940b6d304d0c3160eade5697ff165e0418c5c797.roa
Signing time: Wed 24 Mar 2021 14:36:22 +0000
ROA not before: Wed 24 Mar 2021 14:36:22 +0000
ROA not after: Tue 24 Mar 2026 14:36:22 +0000
asID: 264829
IP address blocks: 170.80.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872661 (0xd50d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9facf1e4ddef7682e26c289d5411679fcf8b7155
Validity
Not Before: Mar 24 14:36:22 2021 GMT
Not After : Mar 24 14:36:22 2026 GMT
Subject: CN=940b6d304d0c3160eade5697ff165e0418c5c797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:28:2b:cc:38:1d:dc:e7:2b:af:10:02:ec:
a5:ef:fb:c6:31:07:f2:6e:8b:97:3b:2d:6d:7f:8f:
0b:fa:ea:15:39:f4:2b:36:0b:28:db:18:91:4f:96:
2f:fb:83:a4:93:05:3e:bf:d6:5d:4c:eb:5e:65:53:
d3:a4:49:fb:97:d8:71:41:16:10:88:f5:d4:b0:19:
2c:68:3e:bd:12:20:d8:0a:d9:26:e2:fd:90:32:07:
7a:c5:92:90:88:bf:b8:48:2f:ca:68:03:d5:6f:6b:
03:d0:dd:34:e3:dc:4d:a3:1d:73:c6:51:80:8c:8e:
b0:19:02:e5:a3:19:c0:e4:a3:ab:0c:fe:13:4b:5d:
37:ed:24:d0:4c:0b:6f:dc:f5:bd:67:c8:9a:9e:72:
fa:5b:f5:e7:23:b1:ae:de:d2:e3:15:b5:04:f1:7b:
1d:55:7c:9e:2c:63:f7:40:cd:d0:a3:b9:0e:9d:15:
a9:7e:f7:ea:5a:c2:6a:ed:38:35:8a:45:18:9a:92:
24:09:5c:00:74:00:f4:63:23:ec:3a:e7:f9:28:53:
c8:c6:d1:60:b8:33:ef:88:1d:f0:97:a8:87:70:f9:
5c:94:d2:bb:3e:0c:78:6a:d8:0c:bf:e8:a6:70:31:
3e:5b:a7:1e:f2:1e:9a:fb:86:88:b3:2b:6e:15:21:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C0:8A:32:8D:1A:9C:68:94:A8:24:13:30:97:72:FA:6F:0A:F3:A8
X509v3 Authority Key Identifier:
keyid:94:73:DB:DA:2A:63:D4:2F:8B:7C:C8:8A:9F:3C:7C:D6:0C:CA:E3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9facf1e4ddef7682e26c289d5411679fcf8b7155.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/940b6d304d0c3160eade5697ff165e0418c5c797.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/9facf1e4ddef7682e26c289d5411679fcf8b7155.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.96.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:65:7c:44:d6:e3:39:0c:85:d6:34:2a:9e:0c:3c:6f:57:68:
63:4d:7d:1e:bf:9c:68:95:14:f5:67:70:e8:c8:75:72:22:a8:
42:f1:50:d3:61:c1:3a:02:f0:c6:86:e0:b7:7d:e8:16:2b:f9:
7e:6b:24:37:2d:9c:d6:ce:db:6b:d7:be:da:5b:ed:e7:b4:82:
f8:68:72:de:44:2f:e0:0d:85:5a:21:fd:fc:4b:9b:a5:f8:46:
5e:8e:12:a3:93:a5:06:cf:c6:dd:72:27:03:30:f6:91:f8:b6:
ed:bd:84:fe:67:c7:44:5b:5f:3c:b1:d6:62:b1:09:6d:47:9f:
7b:17:ba:f9:ce:72:b9:0b:de:70:f4:72:33:e8:08:2c:7b:cd:
f2:3a:67:17:35:f2:0b:3d:dd:9e:f9:0f:e8:6c:4b:57:1e:6b:
c0:52:76:20:a7:77:00:37:a4:25:1a:87:8d:ff:a2:51:d9:86:
78:4d:4c:92:28:87:44:92:28:83:e5:be:a2:e5:cd:b2:fd:03:
46:84:50:77:f4:83:7b:d1:1f:90:3d:55:53:12:37:a1:c4:ca:
59:ef:73:f7:75:a7:ee:bb:2e:ae:ee:a5:e3:c2:fa:cb:4d:4b:
85:26:ef:c3:8c:31:ee:97:48:d1:73:09:92:cb:50:1d:b5:d4:
a4:cf:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org