Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/4f4b9c60c46de52521caac88df1e105c7823fd20.roa
File: 4f4b9c60c46de52521caac88df1e105c7823fd20.roa (raw, json)
Hash identifier: GdFCzSWmkxCyTOyCyy+Yvnd9LUt6x+xc0x9GRtvCF7U=
Subject key identifier: 2A:1F:9A:6C:9D:5E:D2:57:FC:8F:A2:58:74:B6:17:2A:81:A8:86:CE
Certificate issuer: /CN=1f366347be3551a900ee22a8f8e9e1de8ffa1d31
Certificate serial: 04B927
Authority key identifier: 3A:84:D3:30:17:CD:30:A3:7B:9C:43:B2:87:E2:2F:23:32:B6:26:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/4f4b9c60c46de52521caac88df1e105c7823fd20.roa
Signing time: Wed 31 May 2023 14:39:22 +0000
ROA not before: Tue 30 May 2023 14:39:22 +0000
ROA not after: Sat 31 May 2025 14:39:22 +0000
asID: 270037
IP address blocks: 191.52.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309543 (0x4b927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f366347be3551a900ee22a8f8e9e1de8ffa1d31
Validity
Not Before: May 30 14:39:22 2023 GMT
Not After : May 31 14:39:22 2025 GMT
Subject: CN=4f4b9c60c46de52521caac88df1e105c7823fd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:27:12:bc:ea:34:c3:e0:6f:a9:0d:68:cf:
41:28:45:ae:56:65:e5:57:f7:8a:d5:54:35:fd:d3:
77:a5:8b:57:c0:b9:fb:2c:b8:9b:c5:fe:ec:eb:97:
5b:5d:84:7f:14:9b:59:00:85:20:41:32:e8:97:24:
ac:5f:c0:a5:30:fb:48:c5:41:01:e8:a9:bd:09:25:
e4:68:cf:47:77:45:8f:6e:9c:bc:94:1e:ca:de:d5:
55:16:ea:00:86:a8:ae:7e:f8:c3:5d:75:5b:1f:f9:
29:1c:ea:c6:37:9c:22:d5:0b:57:dd:b4:ab:e7:89:
e7:73:ea:9e:a3:80:1f:40:a4:02:3a:5f:d6:e2:a2:
03:50:d1:f1:ec:d3:cb:49:20:7b:49:1a:92:f7:d7:
ec:da:e8:38:6d:56:e4:e6:3b:57:78:9a:34:26:a2:
ce:8d:eb:63:fe:33:2b:76:b5:5a:34:42:c8:37:d6:
5f:a1:af:74:14:0f:ba:2c:ba:96:d2:0b:6b:d9:cc:
3f:6a:b3:10:fd:9c:e5:97:7a:50:b7:f9:fc:f7:c7:
ac:91:da:d1:32:f6:80:81:6c:3b:b5:cd:c0:db:aa:
23:57:b7:70:22:a3:e0:b4:b8:e0:a5:33:02:8f:e5:
c2:1e:58:45:d4:0f:c5:25:47:eb:d6:85:0c:78:5e:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1F:9A:6C:9D:5E:D2:57:FC:8F:A2:58:74:B6:17:2A:81:A8:86:CE
X509v3 Authority Key Identifier:
keyid:3A:84:D3:30:17:CD:30:A3:7B:9C:43:B2:87:E2:2F:23:32:B6:26:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/4f4b9c60c46de52521caac88df1e105c7823fd20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.52.212.0/22
Signature Algorithm: sha256WithRSAEncryption
99:e1:d6:67:c0:e2:fc:18:3c:b2:95:ca:00:63:c5:dc:71:25:
3f:8a:4d:2c:fd:b1:ab:ba:fc:4d:c1:1f:a7:03:72:65:45:47:
71:5b:70:96:82:2e:3e:db:92:62:ff:4b:8e:00:ce:8e:cd:ae:
93:34:37:5f:6c:a0:2d:19:b4:0f:bc:62:1c:73:b2:4e:ca:4f:
17:d3:d1:ca:25:4f:0c:a0:da:a1:c6:b9:7c:68:9a:4a:71:15:
da:4c:02:a1:58:78:8b:50:f1:89:b5:c1:d5:71:f0:2f:fa:6a:
f1:67:e2:31:6b:a5:9f:3b:83:57:da:93:cf:dc:f9:06:c9:a5:
68:41:7c:df:5e:ce:b0:19:74:5a:41:bc:5f:99:e6:b1:7c:94:
47:81:59:e6:a2:00:d6:13:5e:96:ae:10:17:8c:03:c5:e3:82:
81:e8:39:8a:61:a7:52:0b:cf:49:55:5d:a4:d6:15:92:59:ac:
28:51:a1:cb:f1:4b:05:b7:0b:fa:19:dc:80:49:4a:35:bd:cb:
12:ee:96:10:03:f4:76:89:8c:2f:7a:b4:ef:06:7d:d2:84:2c:
71:6e:37:5f:4f:d9:7d:a8:72:78:af:0a:52:04:d4:c5:a3:65:
17:42:5e:9c:86:51:ec:96:82:a3:88:c8:88:9c:5a:c8:e5:27:
3b:e5:6f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org