Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3debaaa4-4b39-43ce-a882-ddd4a463fd46/bafc7c0f2025031047507ebe70339d6e0e9ef9cf.roa
File: bafc7c0f2025031047507ebe70339d6e0e9ef9cf.roa (raw, json)
Hash identifier: tWqinQldlRiSF/WZNaKDhKgdTHSpZMIrX31oWTfbS+A=
Subject key identifier: 06:CC:5F:4E:ED:06:DF:52:2F:E3:94:0E:1F:8B:8B:53:C1:2C:0F:12
Certificate issuer: /CN=2c315cc80c6d19f7d0fc657b3a45f89be01ace4b
Certificate serial: 1FDED8
Authority key identifier: 6C:57:5D:BC:F1:64:7C:B3:D5:A1:5A:93:E6:0D:EB:D3:6D:0E:68:F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c315cc80c6d19f7d0fc657b3a45f89be01ace4b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3debaaa4-4b39-43ce-a882-ddd4a463fd46/bafc7c0f2025031047507ebe70339d6e0e9ef9cf.roa
Signing time: Wed 19 Apr 2023 14:01:52 +0000
ROA not before: Tue 18 Apr 2023 14:01:52 +0000
ROA not after: Sat 19 Apr 2025 14:01:52 +0000
asID: 272981
IP address blocks: 170.247.216.0/22 maxlen: 24
200.35.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088664 (0x1fded8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c315cc80c6d19f7d0fc657b3a45f89be01ace4b
Validity
Not Before: Apr 18 14:01:52 2023 GMT
Not After : Apr 19 14:01:52 2025 GMT
Subject: CN=bafc7c0f2025031047507ebe70339d6e0e9ef9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:ab:4e:aa:0f:f5:1e:e7:c9:b2:39:38:0d:
53:b2:8d:1c:71:54:96:e5:75:8a:84:f4:b7:b5:43:
3e:68:5b:ee:c4:b5:06:59:f1:b8:e0:05:a7:0c:1b:
1c:dc:9a:97:0a:02:55:66:b7:5e:ea:c6:65:5c:55:
d1:ce:f9:b7:d1:5f:10:4b:d2:9e:1f:29:68:4a:22:
cd:b3:4b:83:9a:b1:60:f6:fd:d5:75:13:e3:82:96:
26:cb:da:7e:20:bc:21:fb:15:6d:4c:d1:85:ea:62:
79:c2:d6:f6:70:eb:07:0b:24:45:5c:a6:a7:bf:5a:
3d:bc:98:d8:0a:d5:ca:d1:4e:d5:43:5e:97:a7:73:
16:73:31:5a:f0:da:06:b4:18:a8:94:1f:f7:ec:e9:
83:b2:51:78:8c:ed:4d:41:c0:7a:b9:d9:96:ca:bd:
c2:05:85:27:d6:d6:01:a3:2d:ea:fb:be:5f:17:ab:
4f:e0:c5:06:a0:5a:f6:62:2c:47:6a:19:0b:c6:db:
de:7b:42:38:ac:56:be:41:be:58:87:c0:a1:64:00:
bd:b9:ce:18:f2:90:29:f4:d7:12:a2:63:22:08:f9:
ac:39:a6:4f:4d:ea:26:d1:f7:6e:5e:b5:d4:78:9d:
b1:0a:87:a6:6b:fb:12:1f:e9:3c:51:cb:a7:d8:d8:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CC:5F:4E:ED:06:DF:52:2F:E3:94:0E:1F:8B:8B:53:C1:2C:0F:12
X509v3 Authority Key Identifier:
keyid:6C:57:5D:BC:F1:64:7C:B3:D5:A1:5A:93:E6:0D:EB:D3:6D:0E:68:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c315cc80c6d19f7d0fc657b3a45f89be01ace4b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3debaaa4-4b39-43ce-a882-ddd4a463fd46/bafc7c0f2025031047507ebe70339d6e0e9ef9cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3debaaa4-4b39-43ce-a882-ddd4a463fd46/2c315cc80c6d19f7d0fc657b3a45f89be01ace4b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.216.0/22
200.35.156.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:66:bd:9d:90:5d:01:9b:28:3c:78:4b:3a:22:43:d7:09:7f:
42:5d:cb:da:e2:b3:ad:d3:31:6b:e7:3e:54:fe:a9:fd:24:c6:
64:05:36:7d:2e:a3:ee:d0:50:c8:3b:eb:b3:76:4d:df:ff:93:
8c:13:97:63:fa:44:35:6f:b5:60:78:51:e9:32:b1:dd:aa:e0:
b8:bf:a8:df:60:18:c5:be:03:36:bc:78:ff:2d:b4:82:e4:5d:
e7:9e:4b:42:47:1b:ae:2a:ed:d0:3b:2f:f2:f7:eb:15:97:dd:
c3:92:05:f2:27:d0:53:a7:b3:cd:de:70:b1:f3:b7:cf:65:a7:
5a:8e:86:fe:5e:92:0a:6c:0d:44:e6:7b:c4:09:5b:20:a5:0f:
a2:c2:15:11:05:7f:13:cc:cd:82:b6:2a:ea:5b:74:92:8b:dc:
24:70:cc:8c:91:db:0b:6c:7a:68:c5:11:29:ba:d4:23:46:a0:
88:cc:3a:c4:a8:f3:e1:c7:ab:7d:b8:ce:6d:06:26:b1:4c:8d:
95:c9:3f:ef:8f:c4:21:84:0f:2d:87:5b:0d:d2:00:c8:e4:0b:
a4:bc:02:0f:11:e2:ef:77:0d:6a:36:e8:7c:48:16:85:90:82:
a9:62:58:d9:01:d8:91:d2:dc:8c:fe:93:7b:6e:e5:7a:ac:a8:
d1:27:5e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org