Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8f38119768d8d02f354e6802a753f92e0aa095e4.roa
File: 8f38119768d8d02f354e6802a753f92e0aa095e4.roa (raw, json)
Hash identifier: JKVxVSWyBb7ERuxpNLorFxx99PTvqnwvjZVmwWy4hg8=
Subject key identifier: 07:01:28:50:39:9E:07:7C:DC:92:94:91:F0:98:5F:15:86:49:20:0C
Certificate issuer: /CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
Certificate serial: 1048
Authority key identifier: 1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8f38119768d8d02f354e6802a753f92e0aa095e4.roa
Signing time: Wed 06 Dec 2023 14:08:34 +0000
ROA not before: Wed 06 Dec 2023 14:08:34 +0000
ROA not after: Sat 06 Dec 2025 14:08:34 +0000
asID: 14795
IP address blocks: 161.131.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4168 (0x1048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
Validity
Not Before: Dec 6 14:08:34 2023 GMT
Not After : Dec 6 14:08:34 2025 GMT
Subject: CN=8f38119768d8d02f354e6802a753f92e0aa095e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:83:eb:d7:ca:6a:16:b9:f3:fe:ff:58:93:
1c:61:da:34:2f:61:db:1a:55:40:db:ba:1e:10:2d:
e0:0c:e3:23:43:93:57:58:38:8e:ac:fa:5a:2f:ab:
23:d1:b6:c5:56:4b:cf:86:7b:05:c8:7d:ae:bc:f1:
f9:79:29:88:71:c0:c7:d7:5b:7c:68:58:38:59:6e:
e1:69:11:4c:07:19:7d:1b:62:61:ce:aa:28:9c:06:
b3:62:f3:b5:4e:2b:5e:8d:08:88:42:c4:41:71:11:
98:fa:7e:39:dd:2c:46:39:c0:97:ae:84:e0:9b:6b:
6b:82:6a:95:2c:6a:39:bc:82:e1:f9:7a:0a:54:15:
c0:03:d6:5b:14:9e:f6:14:1a:e2:64:e3:1e:98:bc:
91:58:76:34:ff:27:cf:c1:e2:4d:bd:01:bd:0b:e0:
b5:9e:f0:e9:d9:ce:7e:ca:87:73:f4:1a:98:2a:4d:
54:97:8c:5c:11:29:63:20:21:13:0f:6d:e8:de:64:
27:70:e2:81:c3:52:f6:dd:72:66:40:a7:39:e0:23:
0a:37:fd:ca:d1:f7:59:61:5b:e8:1c:50:76:d7:db:
c4:54:93:3c:30:95:e1:15:c7:a7:af:3d:df:66:d3:
d1:e0:f4:5d:0e:d1:72:c3:b8:8c:95:89:9c:88:a1:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:01:28:50:39:9E:07:7C:DC:92:94:91:F0:98:5F:15:86:49:20:0C
X509v3 Authority Key Identifier:
keyid:1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8f38119768d8d02f354e6802a753f92e0aa095e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8a52488a17bd4e27c842765d04aa1a4a5371aba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.131.149.0/24
Signature Algorithm: sha256WithRSAEncryption
12:db:d0:69:db:2c:36:90:e3:81:de:dc:cc:76:7f:7a:01:fb:
c8:de:bc:f0:22:d2:e2:cf:ac:4a:e0:2f:e7:00:78:3b:57:16:
ee:a4:84:16:2a:09:a6:52:dc:fa:6d:5c:0f:91:e3:5a:b3:59:
34:a3:4d:7d:c1:0c:51:b4:00:f2:73:02:f7:0c:8a:60:23:01:
ce:6b:8f:93:32:c5:54:b1:98:20:eb:c5:15:e6:c8:48:49:97:
3f:cb:61:48:5a:a8:6b:cb:be:56:68:21:33:0a:16:19:f1:ec:
16:59:27:26:20:7f:83:38:33:ea:aa:8a:31:bc:90:98:27:d1:
1c:85:7a:b8:a6:c2:de:22:b1:ee:24:ab:93:9b:9e:c0:f0:f6:
f2:78:ea:e5:e2:02:cc:4d:2e:57:0b:b2:30:e3:e0:1e:06:62:
9a:b2:98:b3:33:98:42:82:31:83:bd:8f:94:31:ea:7a:71:7d:
4c:37:34:97:75:68:be:db:60:ce:79:27:37:d1:fa:ef:b9:26:
cf:84:97:a6:32:fd:75:17:31:9a:e8:09:54:ad:d2:c8:a2:f1:
74:0a:91:45:1c:be:9b:47:75:2f:96:ee:fb:31:16:f6:f3:9d:
1c:8a:35:8b:5a:94:db:15:c3:f1:a3:4e:21:29:20:3f:54:fc:
db:c4:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org