Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/152f3c7b4559057da96fc5360125ce4bcb529171.roa
File: 152f3c7b4559057da96fc5360125ce4bcb529171.roa (raw, json)
Hash identifier: 4M3Ilzjj1gDqGIUeBoulv8SVOI8+y88XDdkw6k6baAQ=
Subject key identifier: E9:A1:FA:A0:AE:40:DD:A3:C2:68:A2:1F:32:B8:17:37:D5:F7:49:7A
Certificate issuer: /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial: 1B5255
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/152f3c7b4559057da96fc5360125ce4bcb529171.roa
Signing time: Wed 05 Oct 2022 22:44:29 +0000
ROA not before: Wed 24 Mar 2021 14:37:01 +0000
ROA not after: Tue 24 Mar 2026 14:37:01 +0000
asID: 27742
IP address blocks: 186.32.8.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1790549 (0x1b5255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Validity
Not Before: Mar 24 14:37:01 2021 GMT
Not After : Mar 24 14:37:01 2026 GMT
Subject: CN=152f3c7b4559057da96fc5360125ce4bcb529171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f4:6f:1f:65:d7:05:fd:b6:49:e1:a9:eb:2e:
8d:29:d2:62:2b:54:34:84:48:c5:2c:a6:45:78:63:
4e:53:e7:c3:3e:ff:ca:cb:e2:88:b2:43:e3:f3:1f:
a4:79:ac:63:48:a7:da:da:7e:f4:c3:98:db:69:2d:
40:b8:52:07:73:c0:25:5e:da:e2:12:d6:c0:08:9c:
49:ed:98:0e:e1:42:c2:3a:26:2a:09:f2:95:0c:d5:
97:9b:d9:10:02:0f:db:b1:7e:e5:d1:12:91:b7:11:
85:4c:64:e1:67:93:21:6a:d6:30:49:24:65:e6:53:
0d:e2:79:9f:6e:ba:79:c0:b2:87:df:c4:f7:e4:2d:
0d:d2:90:ca:76:f1:20:fe:3a:58:6f:b7:d3:bf:7d:
93:f7:37:9f:95:4a:32:80:f0:b3:ed:1b:ed:a1:08:
b6:07:9a:76:53:46:55:99:13:02:91:5a:71:26:52:
9e:92:dd:90:4a:8f:39:71:5b:02:64:97:03:85:33:
aa:65:c1:4a:f2:3b:55:98:a0:23:c3:49:b2:76:d3:
4a:54:6a:49:29:9f:b0:81:5a:b3:ed:1c:0a:94:5e:
a9:99:02:e4:61:54:8d:cd:5c:5d:f1:58:c0:d9:b7:
1c:66:1a:cf:14:14:5d:2b:f5:12:9a:43:56:6c:c5:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A1:FA:A0:AE:40:DD:A3:C2:68:A2:1F:32:B8:17:37:D5:F7:49:7A
X509v3 Authority Key Identifier:
keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/152f3c7b4559057da96fc5360125ce4bcb529171.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.32.8.0/23
Signature Algorithm: sha256WithRSAEncryption
04:66:76:9d:9a:0a:73:f8:cb:4a:69:39:65:23:93:78:10:1d:
91:ab:01:c3:06:c2:b9:72:24:ff:b2:3d:ce:95:1c:e0:b3:12:
99:f4:08:9c:ce:43:30:3b:6d:49:17:30:e8:ff:7d:fc:a1:0f:
52:c0:9d:27:42:ca:68:78:be:79:83:20:b3:02:ca:de:98:78:
fe:aa:ad:6a:7c:c3:f6:3c:62:ba:a1:ad:b7:73:21:f3:09:1b:
dd:27:39:16:c0:5c:bb:60:d0:13:9d:9f:78:fa:63:3f:19:4d:
6e:27:9e:da:a9:73:10:cd:68:3e:62:33:dd:d3:f3:da:94:71:
bc:41:88:ac:47:26:9e:1a:f8:88:75:72:23:34:99:af:48:a1:
3c:86:c3:9f:f0:ea:5b:c0:9a:81:b3:44:29:13:ce:46:ba:31:
c5:cb:2f:fe:40:3e:c8:18:07:72:85:d8:c8:8d:a0:db:25:d7:
71:bd:38:69:cd:de:64:96:14:56:48:b4:b6:4f:74:f7:25:56:
8a:91:12:ba:bd:34:7a:88:be:02:56:54:d2:a9:24:78:f8:1e:
c3:9c:8b:d9:45:05:f0:ea:e3:e7:45:d4:6a:0a:ba:24:c8:39:
70:00:74:fc:14:5b:8d:d4:01:32:f0:fb:19:ef:84:56:76:d7:
fb:f9:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org