Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/41c0587cdf82cd750eeba4ccb2401f0df87f02d3.roa
File: 41c0587cdf82cd750eeba4ccb2401f0df87f02d3.roa (raw, json)
Hash identifier: UpG6jLS5SCnPcEDkQ1EjJPlOVbQnnUl3FcfSRNG7plY=
Subject key identifier: 32:F9:56:5B:1D:E1:69:71:C6:96:D5:86:BD:FA:42:1E:86:30:53:14
Certificate issuer: /CN=41145cf73cb5131f722225203b5434540f5f373f
Certificate serial: 03053F
Authority key identifier: CB:5A:97:57:85:81:0B:73:F6:99:67:01:A9:CB:B1:85:3D:D8:7A:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41145cf73cb5131f722225203b5434540f5f373f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/41c0587cdf82cd750eeba4ccb2401f0df87f02d3.roa
Signing time: Wed 24 Mar 2021 14:32:31 +0000
ROA not before: Wed 24 Mar 2021 14:32:31 +0000
ROA not after: Tue 24 Mar 2026 14:32:31 +0000
asID: 61496
IP address blocks: 131.221.0.0/22 maxlen: 22
2801:18:6000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197951 (0x3053f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41145cf73cb5131f722225203b5434540f5f373f
Validity
Not Before: Mar 24 14:32:31 2021 GMT
Not After : Mar 24 14:32:31 2026 GMT
Subject: CN=41c0587cdf82cd750eeba4ccb2401f0df87f02d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:ae:65:a9:d3:62:27:e9:0b:cd:b5:6a:1f:
81:25:a1:fe:ba:0b:14:02:73:0a:af:43:35:3a:a6:
e0:42:8f:61:2e:9d:81:99:89:e6:3c:49:60:cd:50:
23:f8:12:01:ea:83:2f:9e:32:06:c7:7f:5d:cf:35:
05:74:f0:c3:67:6f:b4:f2:80:23:81:47:32:f9:fc:
00:01:54:75:34:c1:07:ce:17:14:2c:7a:8b:a3:ca:
7e:3b:d1:a8:cf:5b:be:90:ec:86:2c:33:f8:ab:55:
5a:44:bc:dd:5a:b1:d3:11:9a:d4:8a:a4:06:64:68:
12:78:f0:98:93:33:24:c5:eb:62:6b:95:3e:35:34:
d1:3a:d9:9c:2f:f2:a6:a2:6b:a6:11:a7:87:92:7c:
ac:75:fd:b7:f8:84:a4:da:ce:fa:f9:3e:2e:b7:c1:
3b:5a:08:15:8e:1e:ae:d4:1a:f9:55:16:a4:b9:ee:
96:b3:1e:d9:b6:52:4c:d6:97:e2:54:ae:42:6e:f2:
ba:11:4e:3b:db:e8:9f:00:50:2f:97:69:d4:ae:8d:
67:b5:c6:75:fd:0b:c3:80:8c:83:a8:c2:37:68:66:
f5:d2:ab:27:3a:5c:94:f8:da:9e:44:63:71:0b:10:
1d:35:04:72:64:83:1c:c4:78:0c:35:df:ec:ed:5b:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F9:56:5B:1D:E1:69:71:C6:96:D5:86:BD:FA:42:1E:86:30:53:14
X509v3 Authority Key Identifier:
keyid:CB:5A:97:57:85:81:0B:73:F6:99:67:01:A9:CB:B1:85:3D:D8:7A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41145cf73cb5131f722225203b5434540f5f373f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/41c0587cdf82cd750eeba4ccb2401f0df87f02d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/41145cf73cb5131f722225203b5434540f5f373f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.0.0/22
IPv6:
2801:18:6000::/48
Signature Algorithm: sha256WithRSAEncryption
84:1f:48:59:13:e4:22:9a:03:e7:60:5e:29:54:f2:ce:db:57:
29:51:09:e6:3e:e1:fd:c9:d4:bb:5e:cd:d9:c2:49:f5:1f:36:
02:89:41:64:11:42:6e:15:34:fa:e6:83:df:dc:0e:e8:f3:64:
4e:9d:bc:26:86:39:fa:8d:54:43:ae:0d:59:94:8f:7c:0a:f4:
70:21:3b:b9:00:92:8b:71:46:00:2e:ce:bc:e5:d3:ca:95:40:
0f:b5:c8:86:9a:1b:a5:d2:15:f3:f3:5e:32:7f:ae:0e:97:9d:
9b:03:4c:b5:e6:cb:0b:62:51:58:e1:31:12:67:34:dc:88:7d:
f6:c8:8b:5e:cf:e6:9f:ee:8c:2a:b9:28:7e:5e:17:ea:34:78:
8a:11:77:31:52:b8:57:87:9f:68:e2:fa:88:1a:b0:b8:a0:cc:
6c:50:1f:b5:e7:1b:7f:03:47:3a:d8:cf:fb:41:ff:d1:6f:34:
a3:03:54:94:3f:b7:e9:d8:73:03:7c:9e:36:8a:67:e0:a8:91:
e4:fb:b7:c8:ba:27:0f:a4:ff:58:f5:48:c2:aa:ee:41:4e:67:
06:10:f5:d7:3e:db:54:78:03:48:95:c3:69:fe:2d:c2:b9:6a:
9b:3a:46:28:bc:d9:46:56:e3:1e:e2:52:58:58:a1:74:af:23:
89:8a:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org