Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/ac3e34ccad1eed457d891aabfd7028190014857d.roa
File: ac3e34ccad1eed457d891aabfd7028190014857d.roa (raw, json)
Hash identifier: OaJKpr0l8dOQleB+MezIgBt1efvExzcT9AF7a/XSDfg=
Subject key identifier: 31:B9:70:07:B0:4E:0E:4C:93:AF:18:89:13:87:DB:64:69:33:BC:D5
Certificate issuer: /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial: 1EC748
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/ac3e34ccad1eed457d891aabfd7028190014857d.roa
Signing time: Thu 01 Jun 2023 20:03:35 +0000
ROA not before: Wed 31 May 2023 20:03:35 +0000
ROA not after: Sun 01 Jun 2025 20:03:35 +0000
asID: 273006
IP address blocks: 201.131.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2017096 (0x1ec748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Validity
Not Before: May 31 20:03:35 2023 GMT
Not After : Jun 1 20:03:35 2025 GMT
Subject: CN=ac3e34ccad1eed457d891aabfd7028190014857d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:9e:29:b5:ae:9c:66:18:66:86:19:8f:b3:
6f:85:7e:a3:0d:86:7a:9c:ee:bd:fa:5e:10:09:82:
9f:47:80:48:3a:5d:ee:48:69:f2:24:d9:5c:12:87:
1e:73:0a:dc:79:08:4c:59:0f:1e:5c:4c:ae:35:69:
8f:c4:62:58:a6:58:93:43:17:d2:c4:e5:22:47:66:
6c:f5:15:98:90:9e:a4:90:00:1f:f6:97:ca:a4:30:
27:58:77:5b:a9:5e:93:ce:f5:69:d3:b3:21:32:ec:
ea:6e:46:29:e7:31:c6:c3:d2:ef:de:20:5f:1a:ec:
83:95:89:ca:df:80:32:50:6b:f6:11:e2:1e:76:56:
44:59:0d:4e:ca:8c:e8:de:84:a4:1f:aa:7e:27:b4:
92:91:30:8c:da:fd:7a:04:36:4e:4c:d1:15:be:bc:
cf:e6:c2:c8:45:d7:7d:6b:f4:5f:ab:36:42:f7:7b:
f4:21:40:4a:32:77:46:94:e3:69:58:d8:40:fb:b0:
c3:93:b1:c9:d1:8e:ce:11:bd:f3:9a:54:ef:dd:51:
b3:60:a6:d8:95:0c:da:ec:8a:85:35:5f:a6:3a:52:
37:63:98:01:da:da:f2:18:34:6f:48:02:dd:8f:d6:
e5:c4:35:5d:77:c3:d0:48:2b:8a:22:ac:a8:64:89:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B9:70:07:B0:4E:0E:4C:93:AF:18:89:13:87:DB:64:69:33:BC:D5
X509v3 Authority Key Identifier:
keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/ac3e34ccad1eed457d891aabfd7028190014857d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.88.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:f8:88:fa:d1:34:42:20:48:20:50:bd:90:0f:e8:14:07:00:
41:c0:50:71:4f:3b:42:6d:3e:42:94:06:1a:e1:85:3c:4b:5d:
17:e6:6f:1d:b2:a7:64:b6:4b:9d:ad:7e:83:e1:94:08:57:7a:
91:b8:b6:bf:71:0e:25:57:c1:b6:6d:34:37:7d:e9:ab:37:75:
f5:6f:2c:df:23:3d:cd:a9:6b:3e:5d:c6:7b:90:cb:f4:07:6c:
b6:d2:3b:00:be:67:b8:eb:26:07:28:bf:e7:ab:11:de:46:f6:
80:d6:a3:db:d4:f0:76:c3:f6:a2:d3:e9:e6:e1:8a:8d:55:ef:
30:a7:27:1d:0a:ec:f6:cb:0d:2e:38:a8:60:c8:d2:17:de:07:
59:2c:c1:94:ef:cc:fb:7f:4a:60:ec:1d:81:cf:4d:51:98:38:
1f:4f:97:9e:14:53:2e:d0:df:63:0e:6c:51:4e:12:5b:a7:29:
eb:01:1c:83:dc:b1:f6:ab:10:8c:da:80:47:10:5f:a2:7b:f2:
77:35:4c:c5:39:d7:28:5e:07:b3:b2:35:8d:9e:93:0a:14:96:
db:c9:a3:35:2d:73:79:e9:df:73:a2:ff:52:e7:d7:23:2e:36:
e3:84:8e:e9:93:a8:49:95:fb:06:d8:94:2e:a9:23:d3:b3:ed:
cf:0c:6d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org