Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f85b39dce1eb9dc0ad688c6386ca571866f51c67.roa
File: f85b39dce1eb9dc0ad688c6386ca571866f51c67.roa (raw, json)
Hash identifier: bhmcIK2JNXbr/ZPUiQsQdGWdhlPM3kV641wrdwB30X0=
Subject key identifier: 9E:BF:53:25:8C:7E:18:E3:AD:EB:18:C5:64:13:20:97:4B:D1:67:0C
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 038266
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f85b39dce1eb9dc0ad688c6386ca571866f51c67.roa
Signing time: Tue 11 Jul 2023 12:56:56 +0000
ROA not before: Mon 10 Jul 2023 12:56:56 +0000
ROA not after: Fri 11 Jul 2025 12:56:56 +0000
asID: 16629
IP address blocks: 186.78.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229990 (0x38266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 12:56:56 2023 GMT
Not After : Jul 11 12:56:56 2025 GMT
Subject: CN=f85b39dce1eb9dc0ad688c6386ca571866f51c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:8c:a9:72:09:b7:d2:1d:3a:dd:fc:a8:18:
a2:2f:3d:61:53:13:8d:a6:f9:2d:21:bb:57:bb:b6:
de:77:1a:c4:8c:08:c3:76:30:53:40:fa:b9:51:7d:
ad:ff:4b:63:70:9c:a8:e3:49:82:7d:19:7e:51:5a:
38:03:77:bc:5a:46:9d:f1:e6:c9:8f:37:17:3e:e1:
ec:d8:fb:51:89:d0:25:9f:a5:e8:d0:fa:fb:ff:b3:
34:2e:af:4d:ad:26:8c:f6:a7:56:25:81:98:75:2e:
8a:84:15:dd:e0:5e:d8:69:fa:12:50:e5:43:cf:7e:
27:f0:00:55:dc:8c:d7:24:2c:99:f9:3b:85:2b:aa:
b8:0b:ed:e6:07:4f:30:a8:ec:43:35:9a:6c:89:f4:
6d:19:24:af:d6:6e:35:0e:9a:14:ba:8d:d8:d7:22:
e3:3d:89:a5:6b:99:09:e5:42:cd:27:aa:e2:39:78:
c0:ea:53:34:c8:83:97:52:a2:c9:43:de:94:e0:61:
3f:45:58:91:70:d4:21:88:91:e3:ae:58:f3:47:e8:
5c:a7:fa:46:b0:87:fa:03:13:29:f3:9f:60:5d:20:
7d:40:01:13:55:7e:bb:6f:2d:a3:18:be:f5:da:98:
ec:b3:ce:67:cd:87:a3:0d:cb:a7:4e:f8:8d:69:f0:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BF:53:25:8C:7E:18:E3:AD:EB:18:C5:64:13:20:97:4B:D1:67:0C
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f85b39dce1eb9dc0ad688c6386ca571866f51c67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.78.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2d:17:d3:70:b6:ab:27:45:38:1d:1c:a7:93:1d:27:fd:40:43:
f2:a6:2e:0a:fb:ab:88:55:7c:9f:28:c5:16:8b:6d:bb:84:55:
77:23:32:fc:4c:c6:41:d0:8a:c3:d9:b9:b2:20:ab:9e:02:3f:
64:8b:9d:32:b9:d9:30:54:8f:61:38:35:1d:ff:49:e6:01:7f:
12:f2:70:8a:b2:3c:75:19:e8:be:86:ef:17:2b:40:96:4e:75:
99:dc:56:8c:06:84:58:a2:fb:96:74:c7:24:c1:f0:96:81:e3:
f7:39:ef:31:b2:fb:74:9b:65:78:c9:a2:1b:29:04:bd:5e:5d:
16:3b:40:af:c6:c8:95:7d:ed:6c:fa:97:9c:c7:8d:d9:24:4c:
92:55:35:88:87:7d:55:cb:5c:ea:44:3e:47:0a:69:eb:75:f4:
39:5c:48:6f:cd:92:25:aa:3a:9f:0f:83:47:4b:b7:5a:95:ac:
8a:57:67:42:07:00:ed:68:81:f5:9b:87:b2:be:14:a5:41:f9:
7f:e1:1f:1b:b2:ce:75:e2:66:8f:23:17:dd:e2:92:da:47:11:
83:de:69:de:ca:c6:70:44:fd:e5:05:d7:16:3c:7c:c5:5f:ad:
12:5e:37:08:bf:fe:48:7c:37:94:80:48:a3:42:9d:e7:6f:94:
f5:07:3e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org