Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/660c0e24ea33336a3937e8bd6eb61024f5c41bf1.roa
File: 660c0e24ea33336a3937e8bd6eb61024f5c41bf1.roa (raw, json)
Hash identifier: FByPYP367i2do57T85giIikXWRRu2a6bd1OA5Lp4j94=
Subject key identifier: B9:EB:C8:56:AB:2E:95:DC:E6:CD:D1:F0:0E:84:BE:D0:B2:55:76:D8
Certificate issuer: /CN=bb19c09d60068941cd9accf181184832d6474490
Certificate serial: 07C134
Authority key identifier: C1:72:FA:27:6B:4C:45:67:77:A6:D3:24:4B:19:58:A3:30:93:22:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb19c09d60068941cd9accf181184832d6474490.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/660c0e24ea33336a3937e8bd6eb61024f5c41bf1.roa
Signing time: Wed 24 Mar 2021 14:38:14 +0000
ROA not before: Wed 24 Mar 2021 14:38:14 +0000
ROA not after: Tue 24 Mar 2026 14:38:14 +0000
asID: 269983
IP address blocks: 177.200.238.0/23 maxlen: 24
2803:2ee0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508212 (0x7c134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb19c09d60068941cd9accf181184832d6474490
Validity
Not Before: Mar 24 14:38:14 2021 GMT
Not After : Mar 24 14:38:14 2026 GMT
Subject: CN=660c0e24ea33336a3937e8bd6eb61024f5c41bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:88:4a:4f:74:82:b3:ab:b7:02:1d:82:31:
79:1d:5b:a1:1d:bc:22:c0:9a:3d:80:01:68:60:44:
2f:e2:4a:4a:b5:91:da:93:9a:52:af:2b:29:af:d6:
0d:f1:8f:79:75:aa:4a:a2:45:c3:56:ea:48:28:d4:
58:21:d6:14:4e:da:70:e8:d9:43:dc:df:a2:c2:be:
f8:af:3e:91:21:5b:8f:58:a9:f7:c2:26:7e:1c:6e:
d5:57:b5:01:4b:1d:14:d2:e7:82:c7:63:b2:41:39:
f1:04:da:9c:45:83:08:83:fb:bf:54:a5:70:a9:21:
c9:93:3b:fc:02:25:4a:0e:a1:b1:7e:1c:d3:12:aa:
6d:f6:05:30:3e:22:85:af:7d:6a:53:0d:28:d9:73:
70:af:5c:8a:4c:f3:34:63:a1:40:9d:dc:fe:49:49:
b6:b0:c3:76:29:b6:82:b5:50:88:4c:b4:23:2b:b5:
72:50:a7:1b:4c:b6:57:b5:95:58:9f:24:48:0a:2e:
b5:c9:36:c8:2b:23:c1:cc:e3:02:7b:ce:14:f7:a6:
98:d1:2a:8c:ea:0f:60:95:16:25:5e:cc:87:2c:98:
48:bc:31:52:bf:e1:09:22:80:31:dd:f6:b4:cd:bd:
89:01:cc:79:2f:61:b2:cf:47:f8:cc:e6:17:8f:10:
1f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:C8:56:AB:2E:95:DC:E6:CD:D1:F0:0E:84:BE:D0:B2:55:76:D8
X509v3 Authority Key Identifier:
keyid:C1:72:FA:27:6B:4C:45:67:77:A6:D3:24:4B:19:58:A3:30:93:22:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb19c09d60068941cd9accf181184832d6474490.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/660c0e24ea33336a3937e8bd6eb61024f5c41bf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/bb19c09d60068941cd9accf181184832d6474490.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.200.238.0/23
IPv6:
2803:2ee0::/32
Signature Algorithm: sha256WithRSAEncryption
05:a3:b5:9c:8c:50:b9:a6:9f:2b:f9:95:90:fd:3a:6e:83:21:
4a:2c:f9:0b:7e:a5:66:49:17:d4:26:32:0b:f2:0a:17:67:31:
93:15:a1:4d:0d:cc:a5:07:2d:c0:ce:92:90:fc:dc:b7:6c:6b:
4f:ce:ea:0b:50:b7:7b:d8:79:9e:99:5b:33:dd:b6:a7:8c:2b:
1f:d9:7e:9b:84:94:b0:40:db:38:62:f3:23:22:66:ef:dc:2c:
53:4f:63:18:1c:94:7b:cb:51:31:e6:05:c9:d4:cd:54:25:fb:
b1:53:bc:fd:c7:f2:c9:5e:59:4d:74:16:71:ec:be:f0:21:73:
b1:33:17:44:a1:b4:e6:67:19:81:4d:4e:24:ba:47:01:6f:af:
87:6f:70:98:40:1a:21:06:d4:f5:45:01:8b:57:d3:5a:2c:7d:
1c:72:d3:ac:8b:f6:d2:07:6f:d7:79:cd:f9:c1:e8:3e:4b:af:
64:40:2e:b8:bc:9a:35:79:97:aa:05:d0:6c:c2:d4:9a:3f:c3:
86:3d:5d:2a:b5:95:01:c0:dc:ec:bd:46:31:94:7e:77:67:a5:
c7:fd:3e:3e:90:cb:79:a8:38:6f:c7:88:b3:5f:2b:e4:59:de:
0f:4c:73:10:db:b3:55:3f:a0:11:9f:23:aa:71:d6:88:7f:c9:
c8:bd:85:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org