Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/933ede67f451c408498fe9be919e778831f011dc.roa
File: 933ede67f451c408498fe9be919e778831f011dc.roa (raw, json)
Hash identifier: jA2Wsr79lo+OsXYrZHU11++ln4+nSNxaMraEUw38AIo=
Subject key identifier: E3:1D:D8:EC:7C:30:25:3C:D4:75:05:43:9C:0D:8C:1F:85:A5:35:F0
Certificate issuer: /CN=2a234a7b53d24b6272623544bf02f8d638997781
Certificate serial: 16E789
Authority key identifier: 80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/933ede67f451c408498fe9be919e778831f011dc.roa
Signing time: Sat 30 Apr 2022 16:23:27 +0000
ROA not before: Sat 30 Apr 2022 03:00:00 +0000
ROA not after: Tue 30 Apr 2024 03:00:00 +0000
asID: 269960
IP address blocks: 170.82.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501065 (0x16e789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a234a7b53d24b6272623544bf02f8d638997781
Validity
Not Before: Apr 30 03:00:00 2022 GMT
Not After : Apr 30 03:00:00 2024 GMT
Subject: CN=933ede67f451c408498fe9be919e778831f011dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:3c:34:e2:01:f0:08:e9:54:c4:d8:f1:19:
1b:f8:f3:24:22:46:06:85:f9:f5:ca:72:95:ec:61:
1c:1b:eb:67:dd:8a:d3:c5:38:5b:0a:06:98:56:71:
ae:bc:09:21:8c:27:df:80:d9:66:6f:78:6b:e3:11:
7b:2b:fa:bf:8d:5f:be:ce:22:2b:2e:bd:d0:9b:f0:
73:bd:f7:77:6e:84:de:00:a2:a0:ea:18:c5:e7:4f:
a1:cb:74:51:30:59:ec:86:27:9f:c0:7c:80:54:2b:
d3:01:bc:91:80:63:97:e4:2b:97:2d:97:65:3d:ad:
68:88:24:16:6a:48:ad:4b:57:6a:4d:1a:9f:22:47:
a5:6b:ea:23:66:f7:36:bd:d7:74:8f:52:ef:09:26:
54:bc:5a:09:4d:cf:ce:1e:d1:71:56:ec:ff:04:05:
40:bc:74:48:60:e0:e5:29:4d:cf:f8:80:05:b9:69:
6e:52:9f:aa:ae:b0:2c:41:92:1d:93:e0:d0:fa:cd:
99:ba:f0:22:e3:75:bd:e1:ee:f7:95:f5:cd:23:7d:
cc:b9:43:62:71:37:11:eb:71:18:f7:30:4a:6a:da:
2f:24:4d:06:29:95:0c:54:20:a8:7a:ce:89:49:7c:
37:49:cf:d0:0a:80:ee:0a:2f:02:5f:da:c1:df:d2:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1D:D8:EC:7C:30:25:3C:D4:75:05:43:9C:0D:8C:1F:85:A5:35:F0
X509v3 Authority Key Identifier:
keyid:80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/933ede67f451c408498fe9be919e778831f011dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/2a234a7b53d24b6272623544bf02f8d638997781.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.39.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a8:3e:b6:62:f1:b2:11:69:9e:ad:75:e2:9a:67:fb:28:d7:
26:52:f3:21:b0:6d:ae:eb:63:66:6e:3b:84:e3:bf:db:01:db:
e0:db:8c:10:5d:d7:f3:7f:50:98:e8:57:94:14:81:94:0e:c9:
f7:51:58:67:e0:e8:46:5c:ac:ca:e6:e9:a3:be:45:bf:36:97:
76:d9:1d:87:a2:fc:c2:33:73:f8:b2:85:cd:22:1e:c3:13:44:
00:f9:ef:27:a4:3a:fa:bc:4f:e4:a8:da:eb:34:36:a0:bc:18:
ea:c7:5f:d5:8d:06:38:86:e4:a0:50:22:55:1b:51:d0:8e:45:
2f:f9:8a:d9:d1:5b:ba:7e:1a:9b:09:24:69:ba:18:a4:a3:8a:
a8:80:06:cb:df:5f:fb:65:3c:72:91:e2:67:d5:06:76:b9:0a:
4a:0a:38:2b:2c:4f:c0:b2:7e:ee:da:c7:a0:6f:6a:d7:10:1f:
7f:61:ef:dc:60:ef:17:2b:f7:8b:02:90:9e:ff:19:8c:79:69:
90:4d:c4:24:6c:8a:30:9c:96:03:7a:5a:31:a8:ef:87:4f:d3:
e9:6b:63:63:0f:b8:ee:a8:ba:c6:14:4b:37:5c:bc:15:c2:eb:
62:7c:f2:e2:db:12:f4:3d:bc:44:f8:1c:e9:61:db:8e:80:af:
25:a1:83:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org