Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/147343ee16935b2982f6cfdf9b040860ffda99db.roa
File: 147343ee16935b2982f6cfdf9b040860ffda99db.roa (raw, json)
Hash identifier: TyJX6pW40Vn5zZW1PHCKo6lpyJHDIwKxMqhfJuhfb3c=
Subject key identifier: 1D:1E:97:F0:87:1F:D7:8C:5A:E6:86:A3:B6:9F:2F:02:96:13:97:BA
Certificate issuer: /CN=ef788f83ad12f7488de1d2fc19482e9274b780f6
Certificate serial: 26FE2A
Authority key identifier: 8B:E8:87:5F:E4:12:90:64:23:50:28:2A:14:DB:8C:0A:9F:3A:20:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef788f83ad12f7488de1d2fc19482e9274b780f6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/147343ee16935b2982f6cfdf9b040860ffda99db.roa
Signing time: Mon 22 Jan 2024 14:40:48 +0000
ROA not before: Mon 22 Jan 2024 14:40:48 +0000
ROA not after: Thu 22 Jan 2026 14:40:48 +0000
asID: 264750
IP address blocks: 170.82.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2555434 (0x26fe2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef788f83ad12f7488de1d2fc19482e9274b780f6
Validity
Not Before: Jan 22 14:40:48 2024 GMT
Not After : Jan 22 14:40:48 2026 GMT
Subject: CN=147343ee16935b2982f6cfdf9b040860ffda99db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:81:b6:eb:8d:45:25:5f:49:89:ee:bb:86:
a7:22:f1:d7:10:ed:ee:1f:a7:93:1c:f8:05:a2:46:
28:5b:df:d7:23:ac:3b:ce:8a:bc:b5:d2:c4:85:5a:
e7:14:bf:3b:00:4c:72:83:b8:23:ca:b6:40:b2:7f:
26:d9:5e:89:8f:f1:fc:c4:f5:28:89:05:cc:11:dc:
d1:f7:8d:bd:b3:de:f1:06:e5:7a:02:64:d6:7f:c3:
7a:f9:46:6a:19:65:35:ed:78:43:26:91:24:37:53:
7f:2c:70:f5:41:5f:fa:1b:35:6b:35:c4:b3:a6:5d:
d8:1b:64:f3:38:47:19:f0:84:07:3e:7c:90:45:c3:
28:1a:30:5d:00:fd:51:95:8e:0c:79:c7:21:6b:60:
76:bf:7f:56:2b:82:ac:bf:d3:88:ba:12:e4:0f:d0:
ea:ab:9d:8b:3b:f2:85:5e:fc:fe:1b:45:4d:c5:52:
16:bf:3d:42:4c:52:bf:68:a1:3d:92:1f:5e:9e:37:
ff:13:b8:d4:ab:4e:07:53:fe:fc:bf:2e:ad:d6:64:
9c:2f:16:90:7f:14:0a:ca:e1:40:cf:f8:a4:8a:09:
8d:09:82:56:8d:62:50:2a:a7:1d:1c:da:8f:1f:e3:
b1:24:83:2d:56:d1:8f:79:07:bb:46:28:30:a0:09:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1E:97:F0:87:1F:D7:8C:5A:E6:86:A3:B6:9F:2F:02:96:13:97:BA
X509v3 Authority Key Identifier:
keyid:8B:E8:87:5F:E4:12:90:64:23:50:28:2A:14:DB:8C:0A:9F:3A:20:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef788f83ad12f7488de1d2fc19482e9274b780f6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/147343ee16935b2982f6cfdf9b040860ffda99db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/ef788f83ad12f7488de1d2fc19482e9274b780f6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.24.0/22
Signature Algorithm: sha256WithRSAEncryption
23:13:c4:6b:ea:0c:fd:13:f9:b4:67:da:6d:dd:b1:3e:41:c0:
6d:6d:a3:80:84:e1:87:d9:d6:02:b6:e7:8a:29:36:0d:08:a9:
1a:dd:49:10:b1:13:94:71:03:47:31:24:e5:28:68:02:4e:14:
98:b5:06:1f:52:64:bc:fe:70:b2:7f:1a:d6:6b:6d:27:27:c3:
61:9b:3b:a4:db:11:1e:63:2e:37:57:3e:28:31:93:7f:6b:46:
53:17:4c:ae:41:0c:88:d9:96:a6:c7:a6:27:f3:d3:01:44:69:
6d:d9:99:fd:64:ce:ae:0a:71:35:98:4a:c2:5d:69:b9:a1:5f:
2c:c2:b1:a7:d9:12:13:7c:f9:1f:cc:ca:7a:8c:f5:dc:25:a0:
bf:11:3b:c3:6e:ac:79:27:28:ea:aa:44:44:78:72:7c:af:c3:
ab:a6:ec:bc:c8:28:49:06:f6:8b:c5:b3:0c:32:dd:29:50:a3:
12:05:42:1f:07:61:1e:d6:80:80:16:81:aa:11:e3:d8:da:60:
72:7c:87:2e:bc:88:09:07:33:26:53:18:fa:57:19:1d:30:45:
76:21:20:48:39:29:bb:7c:12:ea:a5:b4:70:89:07:6a:92:d3:
07:3f:2d:5c:8b:38:7d:62:80:79:6a:41:78:f7:e6:5c:53:72:
58:f8:91:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org