Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/49bc23b691372dd5dda32fe8cfd26b2dbd248b38.roa
File: 49bc23b691372dd5dda32fe8cfd26b2dbd248b38.roa (raw, json)
Hash identifier: pexVWXit7fG7FTXnHRwjzXO2b8A4N8+Pe1y0++KxwyM=
Subject key identifier: 85:86:EA:70:E7:C2:74:9E:1E:35:B1:57:71:94:02:B5:D5:A8:29:84
Certificate issuer: /CN=73d66d1924e1166622ad12a1caea078bb4879ad0
Certificate serial: 044108
Authority key identifier: B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/49bc23b691372dd5dda32fe8cfd26b2dbd248b38.roa
Signing time: Wed 24 Mar 2021 14:28:54 +0000
ROA not before: Wed 24 Mar 2021 14:28:54 +0000
ROA not after: Tue 24 Mar 2026 14:28:54 +0000
asID: 264771
IP address blocks: 168.196.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278792 (0x44108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d66d1924e1166622ad12a1caea078bb4879ad0
Validity
Not Before: Mar 24 14:28:54 2021 GMT
Not After : Mar 24 14:28:54 2026 GMT
Subject: CN=49bc23b691372dd5dda32fe8cfd26b2dbd248b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:2a:bf:2b:76:c2:54:94:c8:f2:cc:62:09:
f9:a5:cb:48:13:e7:bf:ec:88:92:cb:b8:5d:bd:ee:
bf:d8:bb:5e:18:4e:57:65:ac:26:74:8e:b1:3c:1e:
2b:6d:d7:3c:79:36:f7:1d:d2:98:a9:85:79:ef:f6:
f8:fa:7c:21:aa:eb:98:1f:db:5a:e5:83:8c:fb:09:
13:ca:a7:33:2c:cc:9f:01:90:c7:9c:20:82:fd:2d:
b1:51:5b:53:e2:55:00:18:79:e9:86:1d:fc:c9:47:
58:55:d0:54:8a:c8:17:e1:34:4c:d5:3d:79:d1:e7:
c4:19:b0:cc:2e:f2:da:ef:25:3e:df:e6:13:13:dc:
eb:98:9a:74:2f:c3:4c:94:04:ee:52:4b:64:5b:7f:
f6:85:98:8b:4d:f5:9f:f0:8f:62:8e:f5:fe:b3:7b:
ab:92:15:a1:04:f1:11:e6:8f:00:28:66:03:b5:65:
28:3d:95:93:e9:40:8e:56:13:ce:ba:8d:73:de:05:
33:6a:2b:9a:44:2f:3e:97:e0:39:4c:70:e9:3e:37:
52:f5:35:a5:5c:7c:02:5e:d2:dd:4b:c2:bd:6f:33:
5e:3d:8f:ea:3e:0f:cb:95:87:2b:d6:e7:de:84:d1:
73:a1:9b:71:2b:9b:4e:68:0e:da:af:59:33:d4:b4:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:EA:70:E7:C2:74:9E:1E:35:B1:57:71:94:02:B5:D5:A8:29:84
X509v3 Authority Key Identifier:
keyid:B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/49bc23b691372dd5dda32fe8cfd26b2dbd248b38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/73d66d1924e1166622ad12a1caea078bb4879ad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:42:35:bf:63:4a:eb:5b:3f:9c:e2:1a:1c:36:ab:fc:be:10:
c2:0a:0b:e2:0a:dc:63:1c:07:d9:47:23:a1:ba:cb:82:06:cb:
eb:7f:c1:15:3b:7a:20:93:fc:48:e3:a1:45:6e:ae:0b:fb:b9:
7f:df:e7:78:79:e2:da:88:5e:08:09:fc:bd:a2:ce:db:21:39:
95:2f:fe:d7:47:3a:1b:2a:80:b7:75:2d:41:0b:74:08:44:2f:
98:7d:7d:7f:64:e9:0c:e3:e8:97:9c:de:bc:d5:5f:35:af:d7:
87:59:a5:57:8c:92:7e:66:a6:80:0b:6b:84:3d:16:a4:3e:41:
37:74:d6:c7:65:9f:7b:a8:b4:b9:59:68:5e:04:32:b5:2e:51:
ab:18:44:65:0a:8c:db:8e:ce:a7:da:03:ec:39:14:4d:76:f4:
06:08:f7:cb:cd:b8:68:b4:11:15:01:17:2d:7b:bb:20:f4:a7:
f4:43:ab:e6:de:0e:e0:f5:90:a3:ae:68:a9:a1:dc:ec:fb:1d:
8d:7d:c0:fa:6c:e2:ce:4a:f3:cd:f1:a2:df:76:dd:4f:51:54:
de:1f:fe:aa:aa:f8:a7:59:ac:8d:0d:e0:2f:33:2f:92:1e:73:
0e:d7:b9:24:c5:33:a7:90:76:9c:e9:3b:a6:0f:e2:b8:22:17:
fa:9d:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org