Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/1290dca2931592d40fd07cb244cf473cdbe7d94e.roa
File: 1290dca2931592d40fd07cb244cf473cdbe7d94e.roa (raw, json)
Hash identifier: IuSq8VVZX4Wv1JBJQN6sHjN/CvS3z02BzBVaQLrNeNA=
Subject key identifier: 56:87:6D:2E:A3:4D:34:D2:6A:08:B4:E0:C4:30:AC:33:9A:8C:93:71
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2D9D6D
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/1290dca2931592d40fd07cb244cf473cdbe7d94e.roa
Signing time: Thu 07 Dec 2023 12:42:13 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 262229
IP address blocks: 181.111.168.0/24 maxlen: 24
181.111.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2989421 (0x2d9d6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=1290dca2931592d40fd07cb244cf473cdbe7d94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:e4:b5:05:38:21:ab:9e:c5:84:e2:18:01:
48:9f:bf:be:76:e0:21:cb:b2:d4:ac:76:32:03:c5:
7d:55:32:4b:15:53:48:e6:6e:18:63:53:9f:b3:37:
d4:f6:12:2a:4b:09:2e:3e:c8:43:4c:07:f1:cb:b4:
44:31:44:3e:43:15:02:2c:b0:e3:12:10:de:0d:ab:
e7:77:98:aa:d8:c0:12:97:92:a8:25:59:d8:ed:05:
e8:5a:47:02:da:45:a4:1b:85:71:19:53:a8:3b:91:
d3:cd:ac:1d:af:ac:70:3b:02:b7:b0:70:5d:43:82:
eb:0c:81:2b:c3:d8:16:e8:26:10:6c:fe:af:7e:a6:
66:33:d8:d8:52:4c:34:eb:6b:58:39:2a:b7:80:94:
34:f9:08:6d:06:b7:04:1e:92:ea:9d:30:93:39:f6:
5c:cf:d7:4f:88:fa:42:7e:40:6e:61:c5:6f:05:c1:
87:28:4c:f4:9b:fd:4c:13:f9:11:31:32:37:e2:9d:
3e:67:10:27:ce:d0:4a:d5:fc:da:69:0f:ef:2f:e5:
d3:da:b3:bd:ac:4e:84:c6:46:86:d5:9e:f6:b5:22:
5c:52:4b:0b:c4:c3:b5:df:48:e4:e1:53:34:8d:0e:
cd:39:f3:af:36:7d:08:de:e3:85:5a:15:9f:03:e8:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:87:6D:2E:A3:4D:34:D2:6A:08:B4:E0:C4:30:AC:33:9A:8C:93:71
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/1290dca2931592d40fd07cb244cf473cdbe7d94e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.111.168.0/24
181.111.171.0/24
Signature Algorithm: sha256WithRSAEncryption
68:71:ec:9a:46:06:b5:c5:e5:0a:ac:c9:29:96:db:e5:43:9d:
2f:dc:d3:1e:65:31:fe:8b:a1:02:1d:e1:89:4a:36:26:ec:65:
2d:be:d4:91:f3:a2:b2:0f:95:a5:74:7b:9d:b7:dc:a9:7a:7f:
d1:4c:ac:71:67:16:40:fa:0a:83:dc:84:3f:29:f7:52:a5:68:
99:19:11:4f:8d:fd:82:e3:60:3e:88:04:a6:f6:e0:91:6c:aa:
4f:07:4f:67:04:92:80:46:8d:4c:50:d8:9a:b4:c2:16:09:09:
46:32:24:fc:68:94:4d:0e:99:40:41:4f:5f:1e:de:4b:a8:34:
0e:25:50:d3:02:8c:11:b9:de:90:0c:b5:00:36:d9:ad:99:48:
ef:57:07:6d:f5:ce:02:e1:a8:4a:32:e8:bd:14:35:5f:7c:b0:
14:10:81:ec:5f:4b:c4:39:82:e7:72:b2:bf:fc:8a:e4:e0:0d:
ee:2d:e0:d0:2a:ba:30:6b:60:9b:37:a7:00:b4:08:3d:fc:74:
33:b8:2f:26:df:51:ef:58:35:8e:6c:f0:45:9d:a6:9b:95:6a:
5d:2c:e1:33:fa:36:b0:d0:ad:be:f3:1f:55:d9:e0:47:61:66:
cd:3a:40:1b:cb:93:da:28:2f:e5:4e:9e:57:f4:3a:ae:46:f0:
bf:7f:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org