Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/9a54880c1d6cfa9a219ed396150d8615cd50b598.roa
File: 9a54880c1d6cfa9a219ed396150d8615cd50b598.roa (raw, json)
Hash identifier: gv92Ek580CaEDHT+7Ym+GphRmEb8KP90bfvNZSp5+3I=
Subject key identifier: C0:6B:68:64:47:CE:F3:FF:C5:09:D5:93:26:A0:FF:2A:54:F9:C9:FE
Certificate issuer: /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial: 193FFD
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/9a54880c1d6cfa9a219ed396150d8615cd50b598.roa
Signing time: Wed 31 Jan 2024 21:34:31 +0000
ROA not before: Wed 31 Jan 2024 21:34:31 +0000
ROA not after: Sat 31 Jan 2026 21:34:31 +0000
asID: 14593
IP address blocks: 149.19.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654781 (0x193ffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
Validity
Not Before: Jan 31 21:34:31 2024 GMT
Not After : Jan 31 21:34:31 2026 GMT
Subject: CN=9a54880c1d6cfa9a219ed396150d8615cd50b598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:05:8f:7d:97:95:30:21:26:5e:7c:05:2f:
37:aa:12:95:1b:8c:ce:2c:8d:5b:26:3e:fa:27:60:
9b:a6:0f:23:ab:96:90:25:ac:a2:ba:d8:ce:c1:30:
8e:50:ac:95:bf:ad:a5:b0:77:4b:a3:ef:4d:ff:73:
5c:d4:99:62:2f:c7:55:87:ea:88:77:11:2d:61:2a:
a6:b4:7b:fd:5f:57:97:ab:f6:e1:50:9d:82:15:92:
aa:57:78:46:4f:67:ec:60:76:cf:66:0b:9a:81:f4:
97:9b:8b:70:45:6a:2e:f7:e5:06:ef:ea:29:c7:b4:
d8:84:07:76:5b:63:92:0c:32:ce:ea:54:40:3e:02:
40:a3:5b:a9:cd:5b:f2:f6:f2:28:0e:bf:f4:7e:25:
42:60:66:2e:5b:38:fb:68:d7:6d:7e:b4:7d:4c:d3:
c3:6c:64:c9:ef:87:76:10:3d:05:e1:64:02:3c:1e:
0a:4e:67:31:46:7e:30:ef:ca:d8:d8:e9:aa:4a:61:
ab:23:81:96:85:69:b9:73:d4:cd:90:66:77:50:b5:
fd:30:7b:0a:63:b9:1c:89:2b:48:3f:14:bc:ff:9d:
33:87:7d:a0:cc:4c:f2:4b:2c:89:b4:4a:b2:3a:bc:
d9:82:e0:19:fd:23:3a:69:79:5d:30:90:07:fe:d4:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6B:68:64:47:CE:F3:FF:C5:09:D5:93:26:A0:FF:2A:54:F9:C9:FE
X509v3 Authority Key Identifier:
keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/9a54880c1d6cfa9a219ed396150d8615cd50b598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.19.162.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:49:42:1d:d3:6c:b3:a3:22:24:13:a3:74:c4:51:97:81:1b:
cc:b8:6b:ce:b8:ae:db:76:ed:f2:4e:8b:87:a8:eb:66:a7:e5:
7e:71:00:68:30:c8:7a:85:ba:cc:01:71:80:40:7a:68:80:b4:
42:71:b6:50:24:01:47:92:0d:e1:40:a8:f7:0e:7d:58:7f:d2:
00:ee:cc:61:a5:19:8c:5b:4e:d8:61:39:9a:17:f4:8e:5d:a7:
f0:6d:4c:da:c8:75:d8:d2:f2:c7:77:d4:7c:d6:1e:48:d0:e5:
d9:2b:50:b9:97:c5:2d:62:26:10:35:d7:45:8f:bb:6f:e3:4e:
db:79:54:b1:5d:30:8b:e3:9f:22:06:99:b6:4d:13:3e:cc:36:
3a:a9:3f:16:d9:e5:26:a9:96:a6:af:71:ae:bf:a3:63:4d:b8:
61:ba:c5:f6:71:1c:ec:b0:07:1c:f5:3e:49:9d:89:88:4c:03:
fe:24:fd:1a:6f:ca:7b:ae:55:48:ad:0b:03:8e:94:91:71:52:
91:4b:f5:49:bb:04:d7:ab:ef:93:36:53:ce:98:af:34:e6:26:
d6:a6:20:de:5d:d9:03:70:23:d7:a3:92:1e:fd:7e:0c:81:b7:
38:64:0f:79:f4:f6:c3:4f:a5:37:b3:2a:e2:c9:a9:db:be:03:
b5:09:2d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org