Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/370431fe592012168e67ae4b7103c3e94f1dd958.roa
File: 370431fe592012168e67ae4b7103c3e94f1dd958.roa (raw, json)
Hash identifier: 7gm9Ba8+ms4QtXv3+Gz2G+PFYP7sDQ8vuyRcXWpm3TU=
Subject key identifier: 05:15:77:49:84:25:CC:41:F7:3C:98:52:B6:95:A9:6A:DF:CA:58:51
Certificate issuer: /CN=dffb95a77b596556dc922d7d59d7e123c2fec9b7
Certificate serial: 10C934
Authority key identifier: D4:7C:4D:55:EF:31:B5:B6:73:BE:CF:CE:F3:1F:AF:BE:A3:18:37:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dffb95a77b596556dc922d7d59d7e123c2fec9b7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/370431fe592012168e67ae4b7103c3e94f1dd958.roa
Signing time: Sat 06 Aug 2022 03:23:58 +0000
ROA not before: Sat 06 Aug 2022 03:23:38 +0000
ROA not after: Tue 06 Aug 2024 03:23:38 +0000
asID: 270158
IP address blocks: 170.78.208.0/22 maxlen: 24
2806:3c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100084 (0x10c934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffb95a77b596556dc922d7d59d7e123c2fec9b7
Validity
Not Before: Aug 6 03:23:38 2022 GMT
Not After : Aug 6 03:23:38 2024 GMT
Subject: CN=370431fe592012168e67ae4b7103c3e94f1dd958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:2a:21:33:c2:e8:98:32:19:63:50:2e:75:
74:c7:ce:72:c7:96:b8:26:3e:40:8e:de:0e:50:45:
88:bb:98:c7:5c:ab:be:e4:89:6d:4d:13:e7:8b:1f:
9f:27:45:64:ce:e9:8b:bc:71:3b:2d:88:53:3a:14:
5f:ec:53:8d:01:b6:2b:22:34:a3:39:a2:a9:11:66:
f9:ad:63:85:64:fc:ce:9a:60:d3:f7:14:f5:81:22:
44:ea:b8:c8:33:a9:9a:5c:e9:45:d7:55:cd:cb:67:
77:60:7e:cd:6d:16:f4:f9:5e:5f:87:23:2e:9e:4f:
dc:fa:6e:4b:27:a9:25:21:07:3d:79:47:00:4e:d4:
d0:b3:93:4a:c6:0c:47:fe:d4:50:5e:77:a3:6d:c0:
0f:18:3c:66:8b:30:5f:4b:5c:57:68:5f:4c:ff:05:
b5:7b:43:7c:b1:f7:a8:27:39:1c:40:e0:c9:5b:b1:
12:66:a7:f0:40:91:ee:da:20:fd:a2:b9:21:96:7d:
c2:43:c0:7c:d1:75:dd:7c:c1:72:f3:02:c2:99:66:
fb:b0:87:db:24:e1:3a:7e:94:fc:02:84:2d:8f:a4:
00:1c:80:e3:e3:d0:21:8c:e0:2c:bb:30:a2:29:1b:
2b:d8:ff:71:f1:68:1e:ca:c2:9f:4b:73:32:ef:e1:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:15:77:49:84:25:CC:41:F7:3C:98:52:B6:95:A9:6A:DF:CA:58:51
X509v3 Authority Key Identifier:
keyid:D4:7C:4D:55:EF:31:B5:B6:73:BE:CF:CE:F3:1F:AF:BE:A3:18:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dffb95a77b596556dc922d7d59d7e123c2fec9b7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/370431fe592012168e67ae4b7103c3e94f1dd958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/49c18d82-9a62-46a6-8470-be909cac4304/dffb95a77b596556dc922d7d59d7e123c2fec9b7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.208.0/22
IPv6:
2806:3c7::/32
Signature Algorithm: sha256WithRSAEncryption
31:0a:65:2f:4b:e3:29:39:d6:45:c7:82:eb:95:cc:2d:ac:d2:
bf:d0:df:88:69:69:28:87:11:e2:93:13:37:ac:6c:82:7e:12:
5b:64:eb:7b:4e:e7:2c:e8:ca:0c:81:96:1d:09:15:1a:38:b8:
7e:0f:53:97:4d:6a:07:d4:3f:8e:34:a2:20:af:6b:ce:e4:e2:
81:b4:2d:f5:54:63:6b:14:8f:e8:34:94:b7:2c:3b:3e:c2:fb:
35:a6:8f:cc:6c:20:82:45:5c:f3:8a:1d:0c:7c:e8:db:c2:be:
3f:6c:17:34:4c:bf:d6:93:42:c6:86:c1:c3:bd:cf:93:0b:6c:
63:47:e1:b8:fa:34:ac:0d:0d:f4:ea:51:30:a0:1e:4d:27:b6:
2e:dd:ab:1e:ab:73:73:e7:07:6a:01:1d:a6:bf:56:82:6d:d0:
c6:31:22:d4:3d:08:83:a9:ae:f0:43:28:a9:03:19:a4:9a:68:
2c:08:32:50:3a:40:06:0b:1a:20:eb:0a:5e:d6:b0:cd:ab:2d:
20:d5:d4:36:ce:18:24:47:5e:c8:14:d1:5d:2b:1d:db:94:ec:
2e:eb:4c:73:2b:55:69:35:14:53:fa:9f:6d:42:d3:df:ef:14:
6a:50:62:ed:38:37:ce:f2:b5:c6:cb:c2:6e:4a:68:01:2e:6c:
11:36:a7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org