Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8d90de51c7352a287ce38413e2f1237c74eace79.roa
File: 8d90de51c7352a287ce38413e2f1237c74eace79.roa (raw, json)
Hash identifier: fD0i6hMFe5ZK5GDLOiRCWJoAl4jpC2HVe18S5PQIueY=
Subject key identifier: 6D:89:21:01:F7:0B:AC:E5:25:8F:DF:7F:0E:59:8A:82:BA:F8:86:98
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 1279A8
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8d90de51c7352a287ce38413e2f1237c74eace79.roa
Signing time: Wed 29 Nov 2023 21:16:57 +0000
ROA not before: Wed 29 Nov 2023 21:16:57 +0000
ROA not after: Sat 29 Nov 2025 21:16:57 +0000
asID: 22927
IP address blocks: 186.56.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210792 (0x1279a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 21:16:57 2023 GMT
Not After : Nov 29 21:16:57 2025 GMT
Subject: CN=8d90de51c7352a287ce38413e2f1237c74eace79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:ce:ff:b0:9d:72:71:f8:55:14:39:07:6b:
71:31:4c:a6:40:9f:57:86:a0:4a:46:49:60:6b:c8:
3a:0a:91:67:b7:6b:65:12:62:e1:9d:49:19:15:13:
9c:09:2c:eb:53:86:4a:45:75:5e:48:a5:c7:aa:60:
4f:80:1e:fd:28:b4:22:16:b5:97:4b:9e:b3:2a:ad:
4c:a0:d7:19:16:3a:4c:43:48:d6:b0:f7:9f:27:d4:
a3:f4:18:cf:c3:f7:92:7d:6f:c1:ba:d9:d7:55:19:
1f:93:9c:d9:aa:7a:f2:12:e0:cd:5e:a5:b6:3c:9d:
f2:13:9e:90:4d:a2:29:69:63:42:c6:2a:3b:80:42:
59:b1:2d:40:e0:06:44:74:f5:ff:93:a2:3a:75:ff:
0f:2b:83:e8:27:99:a0:0d:ef:dc:09:02:a1:32:23:
82:7d:79:74:cd:10:a1:ae:a2:9f:23:a1:f7:c3:a4:
c3:0e:14:b0:6f:bc:76:40:52:e3:f1:4a:bd:82:e1:
89:0e:3b:10:97:41:d2:58:bc:78:a1:35:ed:2b:28:
52:4e:19:87:80:b0:bc:34:19:bd:28:23:7f:aa:3e:
b6:c2:a1:8a:a7:cf:f2:73:d7:91:ba:e8:f6:74:3f:
ed:57:5f:43:74:0f:bc:7d:81:03:c4:83:0b:14:9b:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:89:21:01:F7:0B:AC:E5:25:8F:DF:7F:0E:59:8A:82:BA:F8:86:98
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8d90de51c7352a287ce38413e2f1237c74eace79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.56.0.0/17
Signature Algorithm: sha256WithRSAEncryption
54:b4:59:62:4d:ad:ef:40:98:a4:6b:55:f3:5c:2d:87:41:13:
da:a2:0f:40:fd:be:8b:f9:c8:2e:e8:02:ed:a7:51:dc:f9:ae:
b1:c4:10:61:c4:dd:da:47:6d:26:21:29:8f:62:a0:bb:ce:0c:
eb:90:e9:e0:7d:86:7e:f0:5d:70:de:fe:97:55:5b:8b:ea:09:
bc:f0:5e:d9:12:de:b7:49:90:12:1c:df:86:70:89:01:82:2f:
1d:52:c4:83:59:92:3b:30:02:de:69:cc:41:17:65:b8:3e:d7:
97:92:44:ba:c1:fa:e2:2d:93:1e:d3:90:b6:99:23:1e:05:ca:
13:11:1e:f2:18:ba:dd:2d:c2:a9:f5:de:b7:58:30:00:0b:ee:
17:54:7d:05:5f:45:34:8a:26:68:c4:51:72:bf:74:d9:c2:74:
ad:4b:b8:23:2b:85:53:3f:3f:d0:fe:d4:16:0e:cc:c0:b3:34:
a1:9b:96:83:4b:08:49:b7:87:e3:09:81:d1:c7:2a:2c:37:08:
ad:49:05:ea:c7:b0:94:8b:5e:7a:21:3d:36:82:1e:02:34:0a:
c6:2a:1b:a6:89:84:f1:4e:df:98:e8:55:34:2b:97:9d:72:ed:
89:9f:64:13:05:c2:ec:21:e4:b4:85:f5:0b:85:bf:a4:82:39:
e8:75:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org