Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/896f4883cec8f75a4a706ae4ebb46fe1aabc33e5.roa
File: 896f4883cec8f75a4a706ae4ebb46fe1aabc33e5.roa (raw, json)
Hash identifier: Z83xIe7VifjTUvF2foWSoFhfZGqM2Ef4zoknJ9Cdp08=
Subject key identifier: F8:3B:48:28:D8:EB:22:8B:D2:4B:E5:A9:9B:B0:1B:DC:5F:AA:F6:35
Certificate issuer: /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial: 2A47C9
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/896f4883cec8f75a4a706ae4ebb46fe1aabc33e5.roa
Signing time: Thu 18 Jan 2024 14:39:38 +0000
ROA not before: Thu 18 Jan 2024 14:39:31 +0000
ROA not after: Thu 18 Jan 2029 14:39:31 +0000
asID: 394353
IP address blocks: 170.247.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2770889 (0x2a47c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Validity
Not Before: Jan 18 14:39:31 2024 GMT
Not After : Jan 18 14:39:31 2029 GMT
Subject: CN=896f4883cec8f75a4a706ae4ebb46fe1aabc33e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:dd:d9:35:03:f9:e4:f2:cf:eb:44:64:80:
09:20:a1:c0:64:07:a7:f6:6b:0a:54:bf:12:81:7c:
8d:ad:d7:95:e1:e5:4f:29:8d:09:da:42:c8:95:48:
42:be:b9:f2:cf:3b:d2:77:79:4b:69:d3:04:bb:ae:
1c:c7:87:b0:60:d6:2d:ee:68:89:b6:1c:da:7a:81:
84:2a:f9:8d:84:a6:ac:27:49:d2:f9:cd:c8:16:48:
79:a4:64:aa:17:5e:61:87:73:ea:e3:82:1b:8e:61:
e0:50:de:f2:a7:cd:70:b9:05:74:3d:ce:d7:3d:f1:
59:8b:54:64:65:1e:15:59:2a:49:bf:84:80:f5:f6:
85:46:1b:67:9d:71:6c:41:01:41:06:bf:eb:ff:1c:
68:bd:7b:76:e9:37:7d:39:e2:b6:ef:16:9b:49:42:
fe:c0:0f:46:5c:0f:46:62:32:26:97:be:c1:32:11:
0b:26:04:60:92:f2:f0:38:fc:50:36:58:73:ac:ed:
81:e7:86:d7:bf:cc:91:42:9f:bf:50:c3:c8:c1:f4:
11:f4:5b:e2:26:84:ad:97:52:c1:56:21:e2:5b:d8:
c7:78:b8:df:56:26:13:9e:79:b4:bc:f9:13:87:37:
57:08:43:01:6f:7b:f2:07:7b:86:4a:ed:a0:f1:13:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3B:48:28:D8:EB:22:8B:D2:4B:E5:A9:9B:B0:1B:DC:5F:AA:F6:35
X509v3 Authority Key Identifier:
keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/896f4883cec8f75a4a706ae4ebb46fe1aabc33e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.170.0/23
Signature Algorithm: sha256WithRSAEncryption
24:a2:bc:b8:94:a3:dd:e0:ac:d2:ae:82:a1:5c:1e:26:12:ce:
9f:82:b6:38:0a:6c:b0:78:cb:a9:f2:ec:fa:6e:f1:0d:63:94:
41:b2:36:2e:80:d0:70:c3:54:bc:6a:35:48:e1:ac:4f:aa:dd:
17:92:a3:20:30:62:ef:99:f8:2b:dc:66:e1:cc:64:4d:e2:74:
0c:20:c6:70:11:61:4a:25:de:26:2e:c2:47:74:aa:dd:38:df:
08:c2:80:0c:6b:04:93:a6:c4:7b:4a:2c:99:5c:b6:96:94:b9:
ca:b5:80:a5:19:d0:8a:8f:e5:e4:d4:cd:7d:44:ad:9e:d0:29:
b1:a7:58:18:29:76:11:5d:c3:ca:23:56:72:b1:8a:4d:03:2f:
52:ab:42:99:61:15:48:99:30:42:25:00:09:35:e3:08:09:b7:
08:53:86:af:83:66:79:c7:8c:3a:58:40:20:8a:f2:1e:6f:72:
75:32:e0:f6:f0:85:5d:87:2c:1d:12:8d:2e:ee:ee:2a:a3:3b:
12:c7:63:d5:9a:bb:5b:82:40:bc:5e:64:b9:3c:96:e4:31:83:
1d:13:6c:7a:7e:e3:ff:b2:14:1c:25:5c:dc:fd:5b:3a:6e:11:
aa:1b:1c:53:8d:0f:96:8f:9b:de:36:58:c3:45:d7:91:e9:2b:
c6:df:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 02:55:53 2024 by rpki-client on console-fra.rpki-client.org