Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/8e32a3e33cc82b5bcc4a9ee31500030cd627fe59.roa
File: 8e32a3e33cc82b5bcc4a9ee31500030cd627fe59.roa (raw, json)
Hash identifier: At9RupdrR1DHN2lio27AgDqGlDwqqVEFtfCdIXyr5zs=
Subject key identifier: 2E:73:FF:B6:1A:6E:9E:41:FF:0B:25:90:BB:6F:21:33:5C:08:49:EF
Certificate issuer: /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial: 0DAD97
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/8e32a3e33cc82b5bcc4a9ee31500030cd627fe59.roa
Signing time: Wed 24 Mar 2021 14:37:02 +0000
ROA not before: Wed 24 Mar 2021 14:37:01 +0000
ROA not after: Tue 24 Mar 2026 14:37:01 +0000
asID: 262206
IP address blocks: 186.176.224.0/24 maxlen: 24
186.32.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896407 (0xdad97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Validity
Not Before: Mar 24 14:37:01 2021 GMT
Not After : Mar 24 14:37:01 2026 GMT
Subject: CN=8e32a3e33cc82b5bcc4a9ee31500030cd627fe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:48:90:52:4c:e3:65:ce:e6:b3:1a:df:59:21:
48:b0:d4:86:1a:bd:45:41:21:22:b8:df:f7:f1:30:
9b:42:cf:1b:25:29:92:14:18:2d:06:ee:bb:e4:f8:
55:ff:e2:96:c1:8c:32:c0:7a:25:41:bd:99:11:f5:
e9:5d:c6:5b:c7:bd:64:c8:c1:81:3a:e4:0c:71:92:
0e:07:d0:00:0b:9d:6c:0b:9c:ce:01:5e:cf:89:12:
0c:fa:f3:3c:13:a2:e0:e6:65:15:19:4e:d1:4f:81:
df:b3:d3:d9:31:9e:40:6e:42:22:f5:15:19:27:b1:
cf:56:22:89:0a:57:1a:00:67:2f:19:d9:f8:c1:8c:
a9:35:e6:f0:72:ed:67:10:c4:34:fb:09:41:44:9f:
66:b9:bc:fe:49:f1:01:65:51:53:49:9a:6f:02:7e:
9b:12:e5:89:42:23:11:99:98:d1:26:26:f0:44:c3:
b8:23:f4:a3:7b:3e:10:95:cd:f4:68:2e:a8:35:66:
ed:32:f3:21:00:92:7f:34:2c:de:3e:8f:b2:8f:06:
90:83:5b:02:ed:92:b7:d5:30:65:d0:07:10:3a:f9:
ea:99:8e:bf:81:14:63:f7:64:ed:8f:1c:ff:e7:1d:
29:4a:60:3c:0d:c9:5a:55:36:67:20:9d:e6:6c:55:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:73:FF:B6:1A:6E:9E:41:FF:0B:25:90:BB:6F:21:33:5C:08:49:EF
X509v3 Authority Key Identifier:
keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/8e32a3e33cc82b5bcc4a9ee31500030cd627fe59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.32.0.0/24
186.176.224.0/24
Signature Algorithm: sha256WithRSAEncryption
18:87:00:87:5a:7f:b7:43:a7:29:c0:e1:25:cb:d0:ba:da:ca:
ab:30:55:1b:73:18:eb:11:83:08:13:15:6c:a7:85:15:e6:92:
44:ca:43:fd:0e:cc:00:e4:55:a8:75:83:46:35:3e:94:14:e9:
1c:d1:ef:0e:da:59:17:69:1c:56:3e:05:59:38:2a:74:87:64:
01:f0:22:e8:94:b0:0d:0d:2f:ac:6a:ce:39:3a:1d:9e:bf:50:
6c:6f:25:bc:82:b5:66:ae:e4:d1:df:13:ff:6c:db:18:2e:5d:
ef:a6:08:67:7b:ea:38:27:cc:75:5e:2a:35:f0:d5:77:a5:ed:
fc:a7:2c:45:b9:58:34:be:87:93:7e:c2:23:04:b5:1b:ae:97:
70:ba:80:bd:22:46:77:6e:15:36:db:a1:47:c1:06:41:62:58:
52:8c:68:c4:d1:bd:c1:bc:06:4a:d7:fe:cc:52:ae:15:53:bc:
19:c3:57:4f:59:72:2e:4c:01:ec:9f:d8:c7:9d:54:5d:de:c3:
b0:21:bc:2f:22:09:9e:45:37:9f:d2:d3:48:16:43:bf:df:df:
60:ff:14:fd:b2:29:de:a6:ec:8c:b2:9d:b0:93:1b:b6:47:5e:
c0:7b:34:2f:3c:ce:a3:d6:2e:7b:6f:a4:ea:c2:84:aa:e7:e3:
08:1c:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org