Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/654a439c528cfee4330fd584a77f693aaa268777.roa
File: 654a439c528cfee4330fd584a77f693aaa268777.roa (raw, json)
Hash identifier: 2LzNegP16lISaoW3FERKgJ2dEI1sw/kpv52cR3XalCQ=
Subject key identifier: 61:FA:CC:6A:10:F3:0F:77:D4:C6:13:E0:F6:28:94:08:CC:26:8A:DA
Certificate issuer: /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial: 14C7B5
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/654a439c528cfee4330fd584a77f693aaa268777.roa
Signing time: Fri 08 Mar 2024 16:57:30 +0000
ROA not before: Fri 08 Mar 2024 16:57:26 +0000
ROA not after: Sun 08 Mar 2026 17:57:26 +0000
asID: 28047
IP address blocks: 164.77.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361845 (0x14c7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Validity
Not Before: Mar 8 16:57:26 2024 GMT
Not After : Mar 8 17:57:26 2026 GMT
Subject: CN=654a439c528cfee4330fd584a77f693aaa268777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:43:f7:1b:5b:35:03:fe:dc:a6:e7:45:e3:
b0:fd:be:a7:30:b7:63:b0:26:93:a4:89:98:56:7f:
4a:7e:4e:0e:1d:78:17:c2:37:65:b2:5f:3b:2e:bf:
30:bc:93:45:30:91:02:c8:f8:17:de:cf:73:31:ba:
3a:c8:8a:77:38:2a:9f:e1:81:cc:66:45:61:79:87:
be:a4:5c:01:7f:21:d4:12:65:c1:c7:91:f4:e4:68:
01:f8:88:a2:38:ce:32:49:aa:b9:1f:fc:00:ea:21:
11:4a:b8:a5:79:f5:85:9d:b9:99:c5:0a:f9:31:ec:
d2:fa:79:c3:9f:74:1d:1b:ba:8f:8e:36:22:b1:08:
63:a7:66:d0:ea:22:9f:03:33:fe:14:9d:61:f2:2e:
a1:1f:99:be:81:48:e2:c6:3c:a6:ca:f9:b8:c8:28:
d7:ba:a0:8e:f9:1c:05:a9:b4:dd:75:0b:d8:98:7d:
09:24:ea:53:d5:f5:ff:47:09:01:ea:c4:cb:5f:45:
1d:eb:2d:64:35:5e:44:4d:17:8d:c2:d6:c4:41:28:
9a:e5:39:82:44:58:eb:ad:57:f6:4b:50:38:78:51:
ce:78:a0:f6:d9:97:be:6b:f2:8b:a8:5a:da:36:1e:
4f:f7:d5:18:b2:ed:6c:dd:66:7e:07:e7:ac:0f:c1:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FA:CC:6A:10:F3:0F:77:D4:C6:13:E0:F6:28:94:08:CC:26:8A:DA
X509v3 Authority Key Identifier:
keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/654a439c528cfee4330fd584a77f693aaa268777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.77.35.0/24
Signature Algorithm: sha256WithRSAEncryption
92:df:f5:ce:07:50:a5:5e:b5:aa:cd:13:ee:7e:39:4d:0c:63:
b9:94:26:b4:f6:32:79:87:4f:95:a2:03:b3:9b:30:72:0f:f4:
0f:6c:d2:cf:79:e4:fc:f5:17:24:2c:be:b7:1b:26:19:b2:11:
20:4e:9e:02:b6:0f:41:bd:a1:e1:82:da:c9:53:ba:1d:56:38:
21:3e:08:bc:21:08:98:0d:3f:6a:b6:88:24:07:10:ac:55:2c:
6b:61:60:4d:67:34:77:9c:06:de:1f:1f:9f:f9:81:a9:13:93:
22:58:f4:e0:29:10:ca:81:3d:10:64:fc:a6:d5:56:a9:40:de:
4a:1b:75:e3:8d:66:29:e4:29:fe:19:ed:d6:0d:24:4a:1a:27:
71:fd:ab:a6:6a:02:28:87:ed:3a:66:6a:9d:89:bf:de:67:49:
a6:b2:02:db:8a:75:90:7c:49:44:14:d6:52:88:a5:2d:0a:9f:
21:d7:37:6a:71:01:18:f2:51:db:7a:2d:b2:fa:70:ba:cd:d3:
42:54:67:fe:53:a7:7f:e4:87:c0:69:c0:4c:69:f5:8c:a9:1e:
2a:ee:72:28:64:ae:b2:12:81:99:c3:ba:7a:5b:1d:a7:54:dc:
34:1e:a9:f1:fc:31:af:22:0c:e5:23:53:d9:5e:0a:16:30:f7:
7e:97:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org