Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/3dc4127ba8632434e9fb86ec907d73a6a41d55ae.roa
File: 3dc4127ba8632434e9fb86ec907d73a6a41d55ae.roa (raw, json)
Hash identifier: NVTUM0+hkUkoBgJADhGjs6qZyWXXOvcIX0wlRozHhxY=
Subject key identifier: 71:6F:69:EB:E2:A4:3D:4C:56:05:E2:9F:E5:E4:23:9F:33:59:5E:3F
Certificate issuer: /CN=1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3
Certificate serial: 163CFD
Authority key identifier: 58:B5:0D:EB:1A:6D:EC:02:75:B0:A6:6B:AD:AE:10:B2:70:98:2A:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/3dc4127ba8632434e9fb86ec907d73a6a41d55ae.roa
Signing time: Thu 21 Dec 2023 11:30:42 +0000
ROA not before: Thu 21 Dec 2023 11:30:42 +0000
ROA not after: Sun 21 Dec 2025 11:30:42 +0000
asID: 263700
IP address blocks: 170.239.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457405 (0x163cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3
Validity
Not Before: Dec 21 11:30:42 2023 GMT
Not After : Dec 21 11:30:42 2025 GMT
Subject: CN=3dc4127ba8632434e9fb86ec907d73a6a41d55ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e7:fa:09:f1:09:93:fd:ad:86:24:9f:f9:45:
09:f1:16:37:5d:60:84:79:bd:92:4d:ac:ce:64:93:
8a:c9:e9:1c:ce:22:1f:86:1f:66:95:4e:02:54:02:
6c:a3:dc:92:42:58:75:7d:4d:30:5c:a5:2b:4a:f5:
96:80:94:5e:be:25:2e:a1:ab:8b:47:2c:74:3b:7f:
25:64:f3:45:c1:15:35:23:5d:cb:f2:81:0e:33:45:
cd:62:ba:ab:1d:e2:de:6a:2c:17:d6:32:3b:1f:5f:
9f:54:5a:51:59:f3:48:d8:a8:a5:30:24:02:48:ef:
42:37:e3:46:05:f1:fd:06:7e:05:05:d1:a8:68:a9:
cb:e5:c8:9c:b5:5f:c8:f4:d4:a8:0a:bc:7a:a8:0e:
99:b1:94:d1:1c:1f:6b:f6:ea:0a:19:aa:84:3b:55:
be:7e:3f:bb:da:f2:32:dd:c7:83:cb:4c:2c:b4:45:
ea:f2:6d:31:bf:47:f0:fd:76:7f:76:4e:73:2b:04:
a1:34:b7:a7:28:c4:69:87:8b:84:43:43:4e:f5:ff:
41:ea:77:f2:10:1d:5e:35:75:9b:9a:99:88:7f:52:
92:ea:d6:49:ae:44:ba:6b:e8:a6:ba:6d:68:de:d0:
35:81:b2:2c:bf:e1:20:22:9e:e9:00:66:c0:e0:57:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6F:69:EB:E2:A4:3D:4C:56:05:E2:9F:E5:E4:23:9F:33:59:5E:3F
X509v3 Authority Key Identifier:
keyid:58:B5:0D:EB:1A:6D:EC:02:75:B0:A6:6B:AD:AE:10:B2:70:98:2A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/3dc4127ba8632434e9fb86ec907d73a6a41d55ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.152.0/23
Signature Algorithm: sha256WithRSAEncryption
40:cf:9e:6c:6b:bc:ee:c4:f2:d6:b1:96:55:1a:92:f4:f3:28:
49:a1:15:12:ad:89:54:b5:cb:fb:9f:24:50:c0:ff:b5:4e:09:
fa:a5:61:79:58:da:98:8b:a1:d5:b2:82:4d:69:f5:76:fd:66:
6a:c8:62:f1:9e:ec:29:c5:af:dd:3c:8e:4a:03:54:9e:fb:06:
b2:1e:c7:aa:49:b7:ee:f8:37:9a:e6:82:0a:b1:6a:e5:fb:b4:
df:4f:3d:6c:13:37:e3:22:ce:83:b3:f3:c8:e2:e0:dc:47:11:
33:2e:4a:87:36:73:3a:7d:29:8d:85:a2:97:e6:e8:8f:05:cc:
80:19:58:03:69:9e:ff:a9:a1:ef:18:2a:80:7d:a7:f3:28:3f:
64:8f:ac:37:bb:b3:f7:d5:a6:d0:e1:b3:67:d6:5d:ad:cd:9f:
43:34:c6:b5:de:88:05:54:ed:a1:49:d8:e1:5c:03:19:c3:a2:
ac:23:ae:ae:d1:e5:8d:98:74:05:3b:94:eb:7d:75:d0:c7:50:
32:0c:f5:f6:37:cd:ad:24:2d:44:31:fa:b4:5a:df:fd:9e:b3:
b6:ed:07:28:08:bc:2f:e8:79:97:d1:67:0b:2f:a7:db:9f:ec:
50:96:dd:57:e8:57:31:13:f3:37:db:e4:f4:52:70:9e:19:4c:
2a:cb:ff:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org