Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/3d9c493511d6c4981202decfa8cdba3ddc59027d.roa
File: 3d9c493511d6c4981202decfa8cdba3ddc59027d.roa (raw, json)
Hash identifier: /sv0GBBDJL1kUucUIGuGcSY6+cdu1F9aM0F1hEdHueI=
Subject key identifier: C0:41:29:55:1F:DC:BF:02:96:B1:A8:50:19:E7:0C:5D:EB:75:FD:F3
Certificate issuer: /CN=a17e16a16dcad72b297e376ab8c89b4770e59c66
Certificate serial: 22DBBB
Authority key identifier: BA:AE:3F:96:99:2F:0F:66:20:A9:CE:74:0C:75:8A:15:95:04:FE:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a17e16a16dcad72b297e376ab8c89b4770e59c66.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/3d9c493511d6c4981202decfa8cdba3ddc59027d.roa
Signing time: Wed 09 Aug 2023 22:05:07 +0000
ROA not before: Tue 08 Aug 2023 22:05:06 +0000
ROA not after: Sat 09 Aug 2025 22:05:06 +0000
asID: 265689
IP address blocks: 160.238.204.0/22 maxlen: 24
2803:35c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284475 (0x22dbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a17e16a16dcad72b297e376ab8c89b4770e59c66
Validity
Not Before: Aug 8 22:05:06 2023 GMT
Not After : Aug 9 22:05:06 2025 GMT
Subject: CN=3d9c493511d6c4981202decfa8cdba3ddc59027d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:1c:65:b9:44:23:ec:20:cb:c6:78:97:6c:
c9:58:ec:fd:f0:4d:b3:09:e5:c9:c2:9c:7c:9b:ce:
b8:cf:f7:d8:af:a8:14:c1:cb:20:62:d0:4e:d4:b8:
cb:7b:df:54:49:40:c0:19:44:a7:60:71:11:df:c4:
56:ae:1f:c6:ce:5a:29:b0:4b:10:62:f0:7b:67:52:
da:b9:66:3b:91:22:0c:d1:ee:24:c8:e9:04:3c:08:
24:28:a0:20:a6:1b:90:8e:a0:61:a6:b4:2d:da:14:
9c:5a:2a:e2:d9:19:29:56:43:df:4f:94:4c:a5:e3:
46:29:ef:cf:0e:a3:12:78:4c:bd:47:3a:df:46:d0:
0e:dd:32:21:cb:55:68:04:8e:be:71:bf:44:fb:13:
5e:bb:20:5a:cf:35:0d:dd:93:b0:fd:05:d3:92:ee:
aa:1b:dd:e7:83:73:a7:fd:fb:77:3c:57:65:39:c5:
a6:db:55:f3:a4:5c:3c:2d:cc:85:8a:a1:7c:44:10:
bf:d1:74:14:76:94:41:d7:79:8d:51:96:0b:e6:2e:
c5:51:f2:93:4e:00:c9:a7:b8:e0:38:e0:f8:dc:20:
bd:79:19:50:fa:a5:f8:56:30:3d:dc:98:99:63:48:
ae:cd:66:b6:7d:56:47:e4:e9:1b:2e:c2:13:79:dd:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:29:55:1F:DC:BF:02:96:B1:A8:50:19:E7:0C:5D:EB:75:FD:F3
X509v3 Authority Key Identifier:
keyid:BA:AE:3F:96:99:2F:0F:66:20:A9:CE:74:0C:75:8A:15:95:04:FE:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a17e16a16dcad72b297e376ab8c89b4770e59c66.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/3d9c493511d6c4981202decfa8cdba3ddc59027d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/a17e16a16dcad72b297e376ab8c89b4770e59c66.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.204.0/22
IPv6:
2803:35c0::/32
Signature Algorithm: sha256WithRSAEncryption
87:2c:a4:4c:9b:70:05:1f:dc:49:0b:f8:d9:2e:12:93:be:58:
d9:68:f4:71:22:36:42:18:2f:d6:e2:96:3a:cc:73:e8:3c:2f:
0f:d1:58:b5:ed:8e:c8:7d:fb:6e:de:ff:7c:b3:86:e8:e4:4b:
71:3f:85:41:07:17:09:a1:d5:f2:f3:e7:b0:0e:cc:d2:0f:99:
58:f9:29:fa:ad:bd:df:f4:f9:34:7f:c4:ce:66:29:ee:7e:f5:
f7:90:b7:44:f9:b5:fb:15:b8:17:c2:01:f7:e2:f1:3a:eb:72:
e4:65:b7:0f:c2:26:61:7b:12:07:69:86:f8:ef:dc:cc:a9:47:
87:76:31:b2:51:30:03:97:1d:29:8f:3e:44:7b:c7:f6:9a:62:
58:de:9f:ac:96:96:3b:c8:0c:a7:c5:4f:36:51:ff:8b:6a:9d:
73:57:04:a2:2d:d4:42:2a:1b:a2:b7:2a:32:7c:96:27:d1:f4:
a2:bf:93:8f:c7:03:af:00:bd:fe:e0:f0:a2:68:91:6f:cc:1d:
10:80:06:b8:5f:a9:41:34:9e:5c:81:f7:34:fc:ed:d2:f5:89:
c0:b2:62:68:c5:6d:26:9d:e7:e0:32:10:0e:1a:c1:63:5d:17:
53:3e:0d:fd:2f:f2:df:16:8e:ca:33:4b:36:78:24:ec:b0:8b:
19:ba:08:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org