Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/d07246f86ffc49f7069c921dd1914c707596ff02.roa
File: d07246f86ffc49f7069c921dd1914c707596ff02.roa (raw, json)
Hash identifier: /kYT767Wl0uLKBdcQtjgfolfF1lYp6VCjC7seSe9q4c=
Subject key identifier: 96:BB:4B:55:ED:73:84:D7:C7:CB:1F:CF:57:B1:D9:F3:50:EA:FE:1E
Certificate issuer: /CN=33cc246e2aa61ac0c03176ebc5d03e7f4767c548
Certificate serial: 8A5D
Authority key identifier: FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/d07246f86ffc49f7069c921dd1914c707596ff02.roa
Signing time: Wed 19 Apr 2023 16:38:42 +0000
ROA not before: Tue 18 Apr 2023 16:38:42 +0000
ROA not after: Sat 19 Apr 2025 16:38:42 +0000
asID: 272973
IP address blocks: 181.233.152.0/23 maxlen: 23
181.224.220.0/23 maxlen: 23
2803:1590::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35421 (0x8a5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cc246e2aa61ac0c03176ebc5d03e7f4767c548
Validity
Not Before: Apr 18 16:38:42 2023 GMT
Not After : Apr 19 16:38:42 2025 GMT
Subject: CN=d07246f86ffc49f7069c921dd1914c707596ff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4a:e4:b1:42:d0:29:63:ad:76:60:15:88:c9:
be:11:62:eb:a4:32:9b:d4:e2:50:fd:70:a8:ca:55:
b4:64:0f:b4:2a:a7:9c:2c:42:d6:b4:f3:a7:97:d7:
83:70:2a:69:34:1c:ad:3f:4a:b1:72:bd:60:74:5d:
f7:5d:a1:a7:6b:a8:73:01:75:d8:e7:57:dd:e0:2f:
c3:12:e1:ab:98:4b:37:5a:49:2c:b5:21:d7:ed:fd:
30:21:47:6e:2a:3f:a1:64:84:f7:5c:11:2b:b4:48:
2b:e8:1d:7e:44:41:af:d7:38:1c:88:5e:d5:fd:9e:
f4:77:fc:84:72:18:fa:49:41:fe:db:d0:50:c0:ce:
fe:1b:83:ae:9e:3c:ad:10:2f:9f:6d:a5:a1:aa:b6:
3b:a0:25:e4:9b:44:5d:0b:e3:b3:26:49:2d:b7:0b:
a3:2d:d0:9d:5f:e3:85:3c:48:a5:1c:be:f4:8d:0f:
37:68:fd:8e:9d:ed:0c:28:16:3c:00:ec:c1:14:03:
27:89:c7:e9:ff:94:e5:0e:4c:9b:dd:bf:84:f9:e4:
34:28:b8:5a:1e:dd:3c:05:9a:21:23:db:aa:fc:a8:
f9:16:f2:89:00:65:74:46:48:86:9e:43:14:72:d4:
09:df:e3:eb:7f:5a:71:a4:78:6c:d6:a6:07:fb:97:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:4B:55:ED:73:84:D7:C7:CB:1F:CF:57:B1:D9:F3:50:EA:FE:1E
X509v3 Authority Key Identifier:
keyid:FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/d07246f86ffc49f7069c921dd1914c707596ff02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.220.0/23
181.233.152.0/23
IPv6:
2803:1590::/32
Signature Algorithm: sha256WithRSAEncryption
24:6a:83:2b:e7:6a:32:a8:54:98:3b:42:1b:54:54:be:f1:41:
f6:7c:95:12:8a:64:64:1a:64:ab:9a:6d:8a:51:09:fb:3c:14:
94:46:ac:8d:2a:b5:8c:bd:9c:f4:53:3a:4a:bc:56:cf:17:35:
6c:97:9b:1c:db:fe:56:5d:61:d3:de:2f:df:85:12:d4:dd:23:
f5:53:de:02:a6:93:58:63:85:7b:36:34:e3:83:e5:35:50:e8:
47:82:3d:8e:45:9e:38:4d:69:80:4d:1a:2e:d6:b6:c9:d8:6c:
9b:d4:3b:47:6c:de:32:8d:5e:a3:67:43:82:68:ac:ec:1e:b6:
f3:99:57:d7:99:ac:5a:ca:85:0a:0a:76:2e:a3:68:b4:eb:27:
47:ee:5f:b9:3b:6d:97:ce:24:50:8e:d1:27:ce:b2:5d:5c:a0:
87:24:10:43:2b:a4:87:f1:fa:b7:df:3e:37:13:3d:27:ef:a8:
59:f2:61:cb:60:bf:1e:48:fb:3b:7c:cd:76:f7:ee:8d:bb:dd:
2a:28:8f:52:69:e2:92:31:40:cf:e0:02:9d:ce:14:92:6a:b3:
d7:55:65:60:51:c0:4e:55:59:22:fa:ff:80:b5:49:05:77:a6:
46:d2:2e:e6:72:3e:fe:6f:a9:30:30:87:ba:1d:fd:56:a0:cf:
63:74:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org