Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/625b00042a473a1e08c8a4583448f9840188be89.roa
File: 625b00042a473a1e08c8a4583448f9840188be89.roa (raw, json)
Hash identifier: bp7ap5imvCIVFIgn0H2Ps1r46D4QRXX1J/lz6oe8+gI=
Subject key identifier: 4A:98:63:4B:E6:62:1C:FE:09:66:9A:18:5B:5B:15:1B:B3:98:1E:66
Certificate issuer: /CN=b337a534780cb1f89f02f57838f0b895e5da3b0e
Certificate serial: 19D9CE
Authority key identifier: B3:B6:62:F8:E5:E9:53:20:83:9E:CA:06:A4:37:1B:2E:01:2A:9F:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b337a534780cb1f89f02f57838f0b895e5da3b0e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/625b00042a473a1e08c8a4583448f9840188be89.roa
Signing time: Tue 03 Oct 2023 17:11:13 +0000
ROA not before: Mon 02 Oct 2023 17:11:13 +0000
ROA not after: Fri 03 Oct 2025 18:11:13 +0000
asID: 270071
IP address blocks: 186.219.48.0/22 maxlen: 24
2803:e3e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1694158 (0x19d9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b337a534780cb1f89f02f57838f0b895e5da3b0e
Validity
Not Before: Oct 2 17:11:13 2023 GMT
Not After : Oct 3 18:11:13 2025 GMT
Subject: CN=625b00042a473a1e08c8a4583448f9840188be89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:84:9f:e2:1a:9c:99:9f:3f:eb:c2:92:58:
92:3e:b1:05:e7:8a:14:95:f9:2f:3b:88:6b:e2:62:
7f:bf:d2:06:a8:ad:22:80:9d:55:e9:ca:ca:c3:a0:
53:42:22:54:11:63:78:89:af:c0:86:45:d1:00:ae:
71:56:8d:6b:13:7c:3a:16:2d:d2:8f:d1:a3:d1:42:
8e:43:40:bb:4a:c1:c5:88:ee:ee:6a:10:6c:e2:d0:
ed:c7:82:89:75:d0:e2:0e:20:d6:b7:87:c5:45:94:
02:b8:fa:37:6e:86:da:cb:4c:c7:f3:18:cb:a7:2b:
c8:9c:2f:9f:3d:aa:2d:c1:14:22:62:8d:c7:2e:d1:
aa:9e:d8:d9:91:08:b0:53:3a:06:99:ab:6e:53:bf:
28:f8:97:09:ed:95:33:e9:9c:89:6f:72:5a:96:ed:
94:3e:c7:5a:7e:52:a8:f2:7d:0b:e7:57:f0:81:7e:
1c:1b:23:4d:f4:14:70:d2:bc:52:f1:ed:dd:a4:3d:
e2:34:21:4d:40:e3:dd:aa:ba:ce:d6:3d:38:39:d3:
00:79:7e:e9:f5:6a:35:30:4f:ca:5a:ac:a1:b1:09:
ef:f6:b1:42:91:48:9b:5d:4f:34:9f:f3:be:d7:01:
d7:83:8c:21:12:89:a9:e1:23:68:e2:45:2b:08:48:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:98:63:4B:E6:62:1C:FE:09:66:9A:18:5B:5B:15:1B:B3:98:1E:66
X509v3 Authority Key Identifier:
keyid:B3:B6:62:F8:E5:E9:53:20:83:9E:CA:06:A4:37:1B:2E:01:2A:9F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b337a534780cb1f89f02f57838f0b895e5da3b0e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/625b00042a473a1e08c8a4583448f9840188be89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/b337a534780cb1f89f02f57838f0b895e5da3b0e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.219.48.0/22
IPv6:
2803:e3e0::/32
Signature Algorithm: sha256WithRSAEncryption
4e:db:e7:78:af:58:9a:e2:e5:35:0f:d7:95:ba:3f:81:5e:ff:
c2:22:22:33:66:84:16:f0:5f:6e:7a:b9:55:fe:cd:68:f8:a7:
4b:c0:3a:a0:58:80:cc:2e:e7:08:46:2a:c5:13:ab:00:e3:46:
4e:9f:3d:bc:be:f7:49:84:da:4f:b7:aa:97:70:b5:84:ec:72:
3b:8b:8d:e8:37:fe:6f:dd:16:fd:20:83:6a:82:fe:97:a8:de:
df:e5:b9:dc:c3:84:21:9f:45:e4:97:25:c7:35:e6:a3:ab:e6:
58:4e:36:3f:57:90:5a:1b:8c:c8:76:20:f4:e2:cf:e3:4d:f0:
c3:53:89:de:91:af:7f:3b:e0:48:11:1f:f1:f8:61:bb:78:ce:
a6:4a:c6:5d:9f:7c:ba:b4:b5:29:d7:36:52:14:db:ef:ad:77:
9f:f0:7a:a0:29:d7:5b:c4:fa:e2:5e:ea:90:6e:92:a8:53:9b:
c8:75:df:4f:90:6b:ee:a8:9e:83:3c:f6:d0:1d:5b:91:30:e2:
58:15:d0:26:d0:46:70:12:a8:c5:cf:e1:86:1d:f7:a8:c7:63:
d1:e5:a0:68:1f:80:86:02:49:72:16:35:05:dd:09:39:0b:8f:
46:92:8a:63:d2:e4:23:c1:38:b0:f7:ce:76:a0:f0:e9:ee:69:
2c:fa:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org