Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b85894787c2bf99e5d27863fc31c5db55e32a090.roa
File: b85894787c2bf99e5d27863fc31c5db55e32a090.roa (raw, json)
Hash identifier: Ohz9q+ogMBjgLgIDFUHeHaTnTnTxu/ykPSDSPEADWBs=
Subject key identifier: AB:D3:EC:A0:AF:1F:2C:CE:1E:60:61:17:4D:A4:35:0A:DF:F9:62:9E
Certificate issuer: /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial: 2E3DF2
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b85894787c2bf99e5d27863fc31c5db55e32a090.roa
Signing time: Thu 07 Dec 2023 13:00:58 +0000
ROA not before: Thu 07 Dec 2023 13:00:46 +0000
ROA not after: Thu 07 Dec 2028 13:00:46 +0000
asID: 264715
IP address blocks: 186.153.128.0/22 maxlen: 24
181.81.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030514 (0x2e3df2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Validity
Not Before: Dec 7 13:00:46 2023 GMT
Not After : Dec 7 13:00:46 2028 GMT
Subject: CN=b85894787c2bf99e5d27863fc31c5db55e32a090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:6c:67:3e:96:57:0f:27:ab:6b:29:aa:58:
5f:8e:2d:95:13:3b:18:e9:93:d8:4d:b3:e7:76:ee:
28:74:01:62:2f:19:da:99:35:8d:a0:84:83:61:8a:
06:48:08:09:aa:9c:f6:46:5c:d3:fd:9f:a1:6c:6f:
93:79:ce:8f:14:a0:9a:1b:45:d0:98:04:a9:ae:f5:
db:48:1a:79:6f:a6:74:be:c0:47:79:60:3b:af:32:
7c:b0:07:b7:0e:aa:6c:00:76:4d:d2:63:a9:4c:4b:
e9:c7:02:30:f8:2e:f6:bd:5e:12:8f:75:3f:f7:eb:
0a:a7:1f:45:69:88:53:59:2f:40:8e:b5:ea:5e:b3:
91:35:23:23:69:ba:7a:7f:bc:d3:7b:41:d1:68:46:
87:56:7d:d5:ac:79:43:f4:3b:8a:55:83:a4:6d:30:
59:d1:e0:9d:bd:23:de:a4:f5:3c:97:11:e5:3b:9b:
0b:94:53:9c:b3:84:d3:f6:d0:2e:07:cd:43:11:57:
16:74:02:6e:8f:95:75:12:3e:67:2c:11:26:ad:40:
f7:d4:37:d5:0d:10:0f:37:07:b3:d7:7f:86:33:2f:
5b:27:71:57:1d:79:37:2e:9b:46:a6:5a:45:c8:92:
bd:27:94:ad:a0:b8:4d:41:f1:27:58:d7:dd:5c:4a:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:EC:A0:AF:1F:2C:CE:1E:60:61:17:4D:A4:35:0A:DF:F9:62:9E
X509v3 Authority Key Identifier:
keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b85894787c2bf99e5d27863fc31c5db55e32a090.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.81.248.0/22
186.153.128.0/22
Signature Algorithm: sha256WithRSAEncryption
75:8e:55:c2:16:cd:6b:9a:f4:af:cb:fe:6d:52:b1:2e:b2:c4:
6a:54:1b:37:e1:45:87:c0:2d:50:e4:bd:44:1e:ab:df:ba:79:
d9:5a:2f:3e:48:23:1f:61:ab:e8:35:c1:d4:f6:13:8a:38:4b:
6c:bd:3e:da:c4:85:e9:fb:2d:96:70:24:23:49:ff:c8:d3:cb:
89:d0:04:2b:ec:5c:c3:62:20:77:54:49:ce:1f:07:02:95:0f:
6c:ac:35:d9:c7:6f:20:ce:43:e3:39:4e:82:90:14:49:40:43:
25:73:ac:6a:7d:52:eb:00:ea:6b:49:0b:62:6c:01:c0:2a:5e:
cc:05:fc:44:fb:f1:2a:07:a3:5f:3b:c6:ee:aa:12:d6:63:22:
86:ee:f1:ee:68:89:fc:d5:9a:d1:96:f2:61:c5:13:25:b7:e7:
51:04:4d:1a:8f:ea:c9:0a:60:19:7c:db:81:bc:d4:ef:fd:89:
1f:44:fb:95:37:17:d0:ba:fd:c7:5d:a1:b0:18:5c:e7:dc:69:
a7:a0:9f:33:80:50:80:08:6d:ed:f3:7c:d6:24:96:99:a9:18:
5a:36:a8:d8:90:b0:bc:ce:d7:e7:28:b7:d8:25:81:7a:2d:a9:
09:09:95:8f:0e:3a:8c:c0:eb:97:70:d3:0a:b8:19:05:a5:cb:
61:31:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org