Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/d612c3f68f40273456db32639d15494a78f90a45.roa
File: d612c3f68f40273456db32639d15494a78f90a45.roa (raw, json)
Hash identifier: JS9ZGh8CW7Z9b+d2Xs7zfaQy+quPDst9RaDsQZH/w8A=
Subject key identifier: 52:BC:84:96:E5:46:F1:3B:D5:7D:E4:17:95:B8:96:B6:C8:BC:CF:B9
Certificate issuer: /CN=df6777c83b4a4a37f042b28ecdd7c8deadefd729
Certificate serial: 039A5C
Authority key identifier: D1:46:18:6D:FD:86:FF:1E:39:B4:EA:7B:D0:8E:B1:C6:14:A3:D4:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df6777c83b4a4a37f042b28ecdd7c8deadefd729.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/d612c3f68f40273456db32639d15494a78f90a45.roa
Signing time: Wed 24 Mar 2021 14:36:11 +0000
ROA not before: Wed 24 Mar 2021 14:36:11 +0000
ROA not after: Tue 24 Mar 2026 14:36:11 +0000
asID: 27817
IP address blocks: 167.249.40.0/22 maxlen: 24
190.15.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236124 (0x39a5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6777c83b4a4a37f042b28ecdd7c8deadefd729
Validity
Not Before: Mar 24 14:36:11 2021 GMT
Not After : Mar 24 14:36:11 2026 GMT
Subject: CN=d612c3f68f40273456db32639d15494a78f90a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:44:b8:7f:8f:ab:d3:5b:03:2e:4d:28:39:
7a:6a:6f:c6:1e:13:29:34:c9:0a:d2:cb:72:cb:45:
0d:b5:a0:67:ac:47:94:4d:72:d2:d7:94:83:67:26:
9f:44:e4:d7:4b:60:ff:13:0f:79:a1:d1:4b:13:cf:
0a:49:72:be:54:63:f3:e1:68:7e:85:59:47:a4:1b:
f6:2a:7e:55:63:4a:bc:9e:6b:40:28:94:ef:67:bb:
e6:d8:c2:a5:3b:8e:f7:f2:c6:12:f7:65:7f:7c:e8:
81:53:5b:57:36:62:57:91:ea:05:7a:c2:12:da:d1:
fc:82:e5:2a:e6:11:a5:96:3c:c7:6b:ca:2b:f8:8d:
f1:1f:20:00:4e:1b:48:6e:13:6c:47:a6:ef:db:1b:
0f:04:e2:3b:ab:0b:06:d5:2e:7a:7e:29:cd:69:20:
56:e6:3d:27:2b:5b:ee:74:a2:a5:b8:ca:c4:aa:e3:
4d:11:df:7a:ac:27:8b:f1:81:ee:1f:55:9a:a3:b7:
3a:7d:e5:7c:b9:c5:41:37:c5:ab:f7:21:dd:07:75:
7f:14:1c:67:91:ec:a1:ba:95:41:29:0c:62:83:22:
83:93:6c:cd:0c:42:be:74:2b:31:a0:8e:9a:20:99:
02:ed:9a:22:3c:3b:39:73:72:19:e0:6e:cb:db:89:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BC:84:96:E5:46:F1:3B:D5:7D:E4:17:95:B8:96:B6:C8:BC:CF:B9
X509v3 Authority Key Identifier:
keyid:D1:46:18:6D:FD:86:FF:1E:39:B4:EA:7B:D0:8E:B1:C6:14:A3:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df6777c83b4a4a37f042b28ecdd7c8deadefd729.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/d612c3f68f40273456db32639d15494a78f90a45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/df6777c83b4a4a37f042b28ecdd7c8deadefd729.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.40.0/22
190.15.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:a1:06:e0:d9:45:bc:a6:17:25:70:a3:49:68:f5:f9:8a:4c:
25:fc:5f:80:aa:b1:c9:bf:bc:20:09:72:b9:bb:0d:02:f4:ed:
79:5f:1e:c1:30:a5:0a:14:52:96:26:b9:38:10:fa:04:6e:8d:
98:29:59:43:74:d6:c9:4f:8d:bc:3f:6d:47:9b:5a:76:55:c1:
fe:f3:f3:9b:07:31:3b:bc:2c:ec:0b:a3:d4:34:6a:15:88:f8:
b7:d9:17:37:99:29:a9:f9:ad:06:6b:1b:3f:15:0d:cc:a2:d6:
4f:7e:12:ee:6e:13:45:f0:95:36:ed:a7:ac:2c:13:35:99:82:
0b:76:17:bc:94:c2:da:2f:88:b4:39:21:cd:6a:5a:8f:a3:0e:
a0:f1:60:f6:15:b8:7f:c6:46:c6:28:15:47:aa:a7:83:a3:3e:
33:db:3c:64:b7:0c:71:29:19:d4:86:35:7e:50:22:04:da:ef:
2b:08:36:1b:8b:14:30:b5:ab:85:f2:1a:c7:a7:dd:54:41:74:
68:a8:89:c0:26:8b:ec:4d:38:0a:14:95:26:50:36:fd:2f:6d:
5e:74:9f:b1:a2:66:e2:54:ff:72:f2:c5:55:c7:52:31:b6:47:
1d:77:44:b9:4c:6b:37:89:b7:96:ae:c0:38:e7:de:21:30:6a:
c5:3a:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org