Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/8b982dc89909cae6b387015170ea535e8eac8132.roa
File: 8b982dc89909cae6b387015170ea535e8eac8132.roa (raw, json)
Hash identifier: Wv9aw4mNVaphnWHxdkU7fIhqmi+rXuW+1l4jUOaxP/I=
Subject key identifier: 29:48:DD:B3:D9:8C:A7:5F:D2:19:0E:5F:70:A2:13:03:3A:F3:2F:D8
Certificate issuer: /CN=652b18729db050982b6f745b4c791475c88ba009
Certificate serial: 24846C
Authority key identifier: 0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/8b982dc89909cae6b387015170ea535e8eac8132.roa
Signing time: Thu 16 Nov 2023 17:50:01 +0000
ROA not before: Thu 16 Nov 2023 17:50:00 +0000
ROA not after: Sun 16 Nov 2025 17:50:00 +0000
asID: 267857
IP address blocks: 170.79.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2393196 (0x24846c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652b18729db050982b6f745b4c791475c88ba009
Validity
Not Before: Nov 16 17:50:00 2023 GMT
Not After : Nov 16 17:50:00 2025 GMT
Subject: CN=8b982dc89909cae6b387015170ea535e8eac8132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:60:5d:85:d0:e1:29:58:0b:61:c9:91:0e:
08:b4:bc:11:2f:cf:da:2f:3d:90:0f:e7:ef:74:3b:
00:40:3b:c1:53:76:0f:81:63:97:ee:de:55:e8:95:
18:73:43:ec:ac:37:c7:e6:ef:ea:77:36:b4:95:82:
7d:2d:5b:7a:5d:c1:56:5e:67:9e:85:92:d5:78:67:
a0:4d:85:53:31:7d:d9:5d:a4:4f:74:9b:6c:3c:0c:
30:9b:66:1a:86:56:fb:c8:bc:34:95:f6:f9:ac:09:
00:84:d5:80:dc:bf:2c:07:3a:39:52:58:12:3a:46:
1b:3f:8c:90:15:33:b6:58:93:f9:6c:fb:28:c7:d6:
2e:05:0a:10:42:5a:44:c1:7e:08:a2:12:9c:8e:cb:
cb:39:99:13:a8:f7:7e:53:b7:5f:ae:20:79:87:9f:
fa:f2:d5:31:a0:1c:00:8b:24:43:a8:bf:45:71:29:
5c:91:5a:f6:b0:41:30:b8:b4:26:e3:cf:0e:42:fd:
73:ab:11:b1:4e:61:bc:8a:e0:83:b0:db:a8:15:3d:
c3:1b:e4:1c:5a:47:0a:7e:d2:c9:0b:0f:9f:e9:7b:
a6:0c:70:03:30:3c:5a:3c:6b:25:1e:b2:d9:b0:82:
d6:42:2d:37:47:f3:89:03:fa:d5:24:b0:3f:1a:6c:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:48:DD:B3:D9:8C:A7:5F:D2:19:0E:5F:70:A2:13:03:3A:F3:2F:D8
X509v3 Authority Key Identifier:
keyid:0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/8b982dc89909cae6b387015170ea535e8eac8132.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2a:18:d9:23:25:47:14:a0:d5:d3:4e:84:cc:c0:f6:62:d8:
82:bb:fd:f1:46:ab:3a:73:bd:b1:b1:c8:ac:c8:ed:ea:f1:bd:
a8:f8:b6:be:98:47:e8:10:b7:ed:30:23:e9:d0:b6:0f:b0:ff:
b9:bf:c8:0c:aa:20:4b:2e:a6:0e:df:b8:ac:b9:4c:9f:2a:cb:
ab:eb:51:2c:39:a9:ca:f0:44:46:bd:0b:94:f5:2f:de:70:6c:
93:3f:2f:44:07:43:e3:35:39:27:9d:35:8c:5f:3e:41:d4:fe:
41:33:d9:d8:06:49:3f:f1:6a:06:aa:7b:06:38:9c:fe:74:3b:
67:0f:b9:ca:69:00:1c:fe:83:c8:45:6b:13:b5:d3:c6:8f:9a:
59:21:59:39:c2:85:fe:b1:2f:2c:2b:98:47:06:97:a5:77:12:
80:c8:64:1d:51:db:89:da:1c:03:6f:d3:6d:05:87:3d:4a:c1:
c3:36:85:ec:29:a0:3c:c2:43:95:fd:14:61:fa:37:8b:5d:32:
06:ed:45:46:96:0c:0d:bc:60:77:fa:94:e7:0d:9b:e2:aa:e3:
78:54:01:c3:1d:41:50:89:22:5b:17:b6:90:b8:50:ed:19:34:
4e:42:f8:c2:fb:f5:ed:05:d5:6f:33:06:d9:36:32:57:22:8e:
07:71:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org