Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/ca77386e29d27bf8d0ac19430e8d9c8c65d3cc78.roa
File: ca77386e29d27bf8d0ac19430e8d9c8c65d3cc78.roa (raw, json)
Hash identifier: +6qm5BSv4yNaFSEWMcAkQt0vWtLDvaZ4nMfLGogq0q0=
Subject key identifier: 06:48:6A:3C:45:3C:A3:B3:A6:CC:82:25:C2:9C:CB:2A:A1:29:E8:2D
Certificate issuer: /CN=2a234a7b53d24b6272623544bf02f8d638997781
Certificate serial: 16E0ED
Authority key identifier: 80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/ca77386e29d27bf8d0ac19430e8d9c8c65d3cc78.roa
Signing time: Sat 30 Apr 2022 16:14:38 +0000
ROA not before: Tue 26 Apr 2022 03:00:00 +0000
ROA not after: Fri 26 Apr 2024 03:00:00 +0000
asID: 269960
IP address blocks: 170.82.36.0/24 maxlen: 24
170.82.37.0/24 maxlen: 24
170.82.38.0/24 maxlen: 24
170.82.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1499373 (0x16e0ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a234a7b53d24b6272623544bf02f8d638997781
Validity
Not Before: Apr 26 03:00:00 2022 GMT
Not After : Apr 26 03:00:00 2024 GMT
Subject: CN=ca77386e29d27bf8d0ac19430e8d9c8c65d3cc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:e9:18:bb:1f:69:02:56:4c:42:b7:57:dc:
34:57:56:3d:84:8e:86:6d:40:1f:37:a2:2e:69:b9:
40:9b:1b:2f:57:6b:94:46:b5:ff:94:7b:26:e3:69:
5f:fe:b4:af:16:97:7f:5b:cc:77:75:e2:03:4e:b6:
4b:5e:8f:44:5c:33:14:35:f0:0d:38:ce:6d:ea:3f:
6f:33:09:f4:87:42:71:d3:cc:d1:3a:43:1a:ef:42:
04:c8:07:43:bd:e8:76:a7:e4:24:e0:64:c8:dc:f8:
9b:ce:c2:81:0f:cb:b8:08:c2:1c:cf:f7:9e:af:7d:
5a:67:e3:79:7b:44:a6:c2:33:43:42:ec:07:41:f5:
a4:84:22:4e:03:3b:f1:1a:49:20:3a:66:6d:c7:24:
c9:e6:3b:3e:72:b0:f1:8c:88:68:fd:4e:fb:9f:e2:
00:05:d7:61:e8:cc:7f:a5:f6:6a:b4:1e:86:4e:8f:
a6:27:ef:1e:fa:03:ac:a0:bb:96:c7:b6:f7:5f:d2:
65:1e:dd:83:1f:26:58:9c:48:1c:4f:c9:cf:ec:b7:
bb:f1:7c:61:15:36:0f:75:23:a3:66:1f:6e:be:d0:
43:f1:3e:56:f4:9f:48:ec:47:63:ff:8c:9f:47:b2:
24:3c:02:0f:0d:6e:da:61:b1:33:1e:1a:1a:39:29:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:48:6A:3C:45:3C:A3:B3:A6:CC:82:25:C2:9C:CB:2A:A1:29:E8:2D
X509v3 Authority Key Identifier:
keyid:80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/ca77386e29d27bf8d0ac19430e8d9c8c65d3cc78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/2a234a7b53d24b6272623544bf02f8d638997781.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:93:e1:a2:fd:c9:59:2d:ac:d3:23:a0:7c:f7:90:95:b1:2d:
ab:4f:19:59:2f:73:9c:dd:73:12:c3:d3:61:a5:fc:50:12:b4:
bf:af:34:67:f9:83:11:4a:d8:c0:bf:68:77:b9:44:03:be:26:
8f:5d:a1:f7:bb:71:67:dd:8e:c8:52:f3:05:6b:08:61:29:c0:
22:16:8d:ba:56:3f:ae:79:d6:e1:99:ee:02:0c:9e:c4:dd:4d:
17:a2:94:4d:f0:95:22:7a:e4:1d:ac:b7:bc:ab:a5:22:32:8c:
d5:a9:32:c9:07:e7:c8:6c:a8:2c:56:ec:18:18:25:98:12:9e:
3d:3c:1f:6f:61:e0:d5:b3:b9:a0:01:9f:62:e2:3d:b1:5c:7c:
f9:36:9d:b7:a2:7d:b5:59:b8:2f:ec:90:08:45:9b:94:07:59:
75:f7:86:a1:6f:ec:26:c1:ec:0b:1f:5c:51:e1:7d:27:f9:d0:
11:dc:95:56:e9:a2:b3:dc:93:b8:93:5f:b9:82:8c:f4:38:94:
e8:a5:a1:d4:8f:7a:56:38:53:6b:49:48:e4:06:1c:70:7d:f3:
d3:81:94:6d:54:fa:80:9c:80:b5:0f:96:5b:d6:6b:54:5e:33:
8f:ee:c3:0d:7a:19:87:f1:fb:56:c2:64:1c:87:e8:8c:34:80:
8d:f6:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org