Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f388107-b6ba-49ff-9a94-36018ea66f84/871f494a7c9ae0f3f00ac52566a35049eac497f5.roa
File: 871f494a7c9ae0f3f00ac52566a35049eac497f5.roa (raw, json)
Hash identifier: 9mMQ0js8kMbwBW1JEOt7bYgIGu42bW2+Qpp4PjgXqnw=
Subject key identifier: 11:D4:3E:BB:83:73:9E:46:7F:D8:4C:02:8A:94:3B:F3:45:C7:7A:31
Certificate issuer: /CN=1b8d80ea6f48dbc05e5fac488c60647f4529a76a
Certificate serial: 12413C
Authority key identifier: B4:3D:39:43:C2:84:23:C3:24:B5:1D:72:22:A4:4A:29:09:EB:6A:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b8d80ea6f48dbc05e5fac488c60647f4529a76a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3f388107-b6ba-49ff-9a94-36018ea66f84/871f494a7c9ae0f3f00ac52566a35049eac497f5.roa
Signing time: Thu 28 Sep 2023 08:30:02 +0000
ROA not before: Wed 27 Sep 2023 08:30:02 +0000
ROA not after: Fri 26 Sep 2025 08:30:02 +0000
asID: 263815
IP address blocks: 167.249.192.0/22 maxlen: 22
167.249.192.0/24 maxlen: 24
167.249.193.0/24 maxlen: 24
167.249.194.0/24 maxlen: 24
167.249.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196348 (0x12413c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b8d80ea6f48dbc05e5fac488c60647f4529a76a
Validity
Not Before: Sep 27 08:30:02 2023 GMT
Not After : Sep 26 08:30:02 2025 GMT
Subject: CN=871f494a7c9ae0f3f00ac52566a35049eac497f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:53:60:a9:42:72:14:dc:d9:6a:9a:55:0c:
e3:44:84:52:38:74:68:98:84:1e:5a:40:76:6e:ec:
a9:1a:cf:d4:10:fd:58:47:77:67:d1:14:c2:ea:53:
d5:47:d8:dd:de:22:50:09:bf:1f:2d:62:10:4c:df:
bb:82:9b:e1:bd:44:e1:5a:37:63:a3:3b:b4:5e:4d:
43:fb:0e:58:3a:de:ea:62:d0:6d:1e:99:bc:83:de:
37:41:fe:bd:6d:d9:d4:11:a3:cc:98:36:1c:c8:86:
9c:52:12:f8:c3:51:d1:f8:ca:27:82:7f:ec:2e:b4:
ae:2c:6a:84:97:f3:f6:aa:df:76:53:f4:df:01:33:
2a:2a:1f:9e:31:c9:63:b7:3a:da:39:bf:85:01:48:
55:f8:0b:73:b0:ea:b7:bb:31:82:13:cc:82:b1:72:
ae:e8:d0:b4:7e:47:14:92:cb:ef:21:f8:f4:7a:71:
f0:57:6b:08:b4:97:6c:ed:0d:39:b1:96:67:76:c9:
66:05:8e:51:60:3f:c4:d5:61:04:81:06:d0:e2:85:
60:56:6d:43:77:47:6d:19:87:df:35:f5:a6:7c:0f:
7e:a7:7e:83:be:74:22:b9:ff:7b:ec:97:dd:07:f3:
20:e4:24:56:73:e8:84:d5:44:62:27:96:63:0f:18:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:3E:BB:83:73:9E:46:7F:D8:4C:02:8A:94:3B:F3:45:C7:7A:31
X509v3 Authority Key Identifier:
keyid:B4:3D:39:43:C2:84:23:C3:24:B5:1D:72:22:A4:4A:29:09:EB:6A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b8d80ea6f48dbc05e5fac488c60647f4529a76a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f388107-b6ba-49ff-9a94-36018ea66f84/871f494a7c9ae0f3f00ac52566a35049eac497f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3f388107-b6ba-49ff-9a94-36018ea66f84/1b8d80ea6f48dbc05e5fac488c60647f4529a76a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.192.0/22
Signature Algorithm: sha256WithRSAEncryption
02:41:d3:ef:6b:c8:2d:77:93:31:d2:ed:2c:c2:f6:c9:8b:8a:
3f:c5:19:83:7e:8a:a8:d0:3b:6c:30:9c:7d:75:c3:40:62:a8:
3e:2a:20:b3:be:40:d1:7b:96:e6:2c:42:31:2c:e8:12:bf:23:
44:d1:8b:b3:5b:90:6c:81:5b:d5:cd:f5:f0:65:88:d3:20:1b:
c4:a7:d0:c5:3f:46:f4:34:99:c2:9a:9e:99:8d:96:50:9c:bc:
c2:99:d2:a0:ba:da:97:58:75:4d:b3:0e:df:cd:6c:a0:79:0d:
4c:e7:df:56:a4:5c:94:cd:68:88:80:e3:47:2f:a4:33:0c:55:
80:6d:b7:3b:e6:b1:b4:89:ef:6a:e9:e2:2c:0e:9a:7c:8f:0e:
82:9e:df:1a:01:62:37:f9:b8:7b:7f:a4:d6:e4:50:a5:1d:0b:
e4:f3:af:1c:c2:c2:4a:62:27:a7:ca:0c:e9:28:2c:dd:43:30:
e6:93:2f:33:57:4d:23:dc:64:05:d1:db:de:45:2d:b1:01:2e:
8b:8d:78:ae:c4:9c:02:74:9d:5d:84:3d:27:c2:b8:52:dc:d9:
74:f0:93:6e:10:a4:2b:c7:09:fb:02:35:0a:eb:e2:3f:9a:72:
f7:da:8a:02:0d:97:4d:1d:17:97:13:0d:3b:ee:16:02:76:b1:
51:b0:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org