Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9f9c64c1a9309c71e3c3fd81637ddb5f3323a2fb.roa
File: 9f9c64c1a9309c71e3c3fd81637ddb5f3323a2fb.roa (raw, json)
Hash identifier: p67XECrhn24oIDnF6L6TMsTMxiAfMo3pdBi/0WjML90=
Subject key identifier: 9C:79:4D:4B:EF:A7:4E:B5:13:66:FF:D3:4B:3F:A3:DC:19:7A:15:49
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 272937
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9f9c64c1a9309c71e3c3fd81637ddb5f3323a2fb.roa
Signing time: Mon 17 Apr 2023 13:00:34 +0000
ROA not before: Sun 16 Apr 2023 13:00:28 +0000
ROA not after: Thu 17 Apr 2025 13:00:28 +0000
asID: 264715
IP address blocks: 186.153.128.0/22 maxlen: 24
181.81.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2566455 (0x272937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Apr 16 13:00:28 2023 GMT
Not After : Apr 17 13:00:28 2025 GMT
Subject: CN=9f9c64c1a9309c71e3c3fd81637ddb5f3323a2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:db:35:4f:68:ea:45:e5:80:24:bb:ae:7a:
f5:73:5b:88:2e:a3:f1:ee:7f:e5:b7:92:7f:6c:2a:
c6:87:fe:30:fe:d0:8c:3b:94:27:0c:7e:c9:cf:3a:
86:42:22:3b:af:bc:01:ec:0f:e2:38:02:a8:42:5e:
be:31:c8:92:51:54:64:15:18:6b:86:3e:60:4b:f3:
84:48:fd:88:3d:cc:01:60:6f:1b:56:8b:d1:7d:f0:
b7:6d:e8:c7:99:6b:df:81:3c:ad:75:ba:a1:80:0c:
59:8d:a1:f2:07:a8:83:e6:ee:15:8a:b9:46:47:59:
b2:c3:8e:1e:3f:84:a6:98:a7:5e:29:43:4c:a3:b0:
0c:6f:92:27:8b:48:7c:39:f6:f2:a7:a5:c3:9b:f7:
03:a9:dc:e4:d9:43:f9:13:b6:8c:18:e6:d2:bb:a4:
05:fb:8e:80:f1:e6:1c:c0:a6:3b:54:bb:27:85:7c:
f5:0f:c8:e5:e5:9d:ac:5e:1e:8f:33:5f:1b:f7:b1:
a4:83:c8:9e:a0:0e:cf:ab:29:60:8e:dc:85:13:94:
54:db:08:49:7a:75:81:73:6d:7a:81:33:63:6f:a0:
a7:38:a8:11:78:b6:53:37:3c:9a:e0:27:be:14:7f:
99:be:71:9d:d4:1e:1e:7f:1b:ac:39:93:a7:89:9c:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:79:4D:4B:EF:A7:4E:B5:13:66:FF:D3:4B:3F:A3:DC:19:7A:15:49
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9f9c64c1a9309c71e3c3fd81637ddb5f3323a2fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.81.248.0/22
186.153.128.0/22
Signature Algorithm: sha256WithRSAEncryption
23:d1:a4:dd:ee:29:9e:87:95:fa:67:cb:fd:95:1a:81:89:99:
50:54:6f:8d:60:9f:45:92:c5:6a:6c:d0:71:04:ae:e8:e4:5b:
e6:70:c8:ea:03:6b:de:f6:67:68:1c:22:4c:fc:cc:b9:13:47:
27:f9:43:b1:c2:b7:bb:20:89:aa:83:18:55:44:68:a5:32:81:
6a:81:5f:0d:c2:91:f3:11:c0:31:44:0e:f9:f1:f7:cd:43:05:
14:be:a1:a7:fb:84:37:39:9a:12:be:fa:f4:1b:f7:bb:5c:63:
37:fb:a0:59:fd:08:dd:25:ea:10:34:f0:46:67:db:06:94:fe:
d1:b0:6a:a6:d9:81:02:a2:99:df:61:9c:76:09:28:64:e4:df:
1a:78:cd:ab:f2:c4:5d:7d:87:0d:59:c3:8f:91:b9:35:a2:02:
29:5f:9f:21:3f:6e:9e:9d:27:22:c4:76:44:3b:f7:02:07:74:
b8:f6:8e:5e:50:66:b0:ea:e9:d2:e5:a0:df:50:0c:8f:74:08:
80:20:fe:e9:ff:6e:ca:cc:0f:e1:d8:56:26:0b:2b:94:ae:59:
9c:70:48:f0:b5:7d:7a:ed:c4:d8:42:62:ec:97:83:2e:f3:3e:
1a:53:d5:f4:c8:f3:d2:73:f1:89:18:46:77:a7:12:bf:76:e7:
59:73:82:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org