Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/3dbacc626b07fa381386a20a8fb33de2a3e1e459.roa
File: 3dbacc626b07fa381386a20a8fb33de2a3e1e459.roa (raw, json)
Hash identifier: SbivST8gcXgSqlZyjY+x+XKckwZF2/gatzY7OflWH7U=
Subject key identifier: F3:70:11:CF:FF:06:2F:D0:7D:84:BA:52:7C:DC:DB:FF:05:3A:F8:D2
Certificate issuer: /CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
Certificate serial: 152BC7
Authority key identifier: 57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/3dbacc626b07fa381386a20a8fb33de2a3e1e459.roa
Signing time: Thu 03 Feb 2022 23:42:32 +0000
ROA not before: Thu 03 Feb 2022 03:00:00 +0000
ROA not after: Tue 03 Feb 2026 03:00:00 +0000
asID: 272056
IP address blocks: 192.141.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387463 (0x152bc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
Validity
Not Before: Feb 3 03:00:00 2022 GMT
Not After : Feb 3 03:00:00 2026 GMT
Subject: CN=3dbacc626b07fa381386a20a8fb33de2a3e1e459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:92:85:f0:3f:47:0b:b2:f8:4a:82:ca:eb:9a:
dc:dd:0c:cc:5f:23:5e:71:de:bd:88:13:1d:70:e9:
a1:ba:bd:85:0e:02:55:b8:96:bf:7f:b1:a3:9b:6b:
31:39:0e:54:f5:f6:36:64:db:1c:8f:e2:ba:ef:bf:
f4:e5:d5:4e:fb:2d:d7:8e:5f:66:7a:bf:41:71:7d:
58:d1:70:08:5f:10:7f:c7:22:05:6e:4b:fa:55:0d:
46:c4:08:7b:6c:8f:59:b9:62:67:3a:69:db:fe:92:
d1:27:7e:fc:37:d2:92:ab:a6:b5:3d:5d:71:54:75:
8a:28:ca:c4:12:c8:dc:4d:3a:03:09:56:37:28:c6:
a9:99:14:b6:bd:fa:ac:8a:ad:63:da:e4:2d:91:4f:
f0:6c:ab:a4:76:81:ea:34:78:cb:fc:a9:a3:1b:c3:
92:99:9d:27:28:93:0a:8b:20:19:d4:ab:4a:e4:18:
e1:56:0d:9a:d2:c1:39:5f:48:1c:5a:68:1d:a2:0d:
e1:65:8f:db:70:0d:d5:0e:10:6e:ca:38:95:b5:8b:
82:43:47:5e:90:e7:92:38:c4:ff:30:6a:42:05:4e:
a2:12:51:a7:61:96:f0:54:b6:d3:a0:6c:8c:41:8e:
3e:5c:45:b0:4d:d9:1b:07:35:49:e5:01:8d:f1:50:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:70:11:CF:FF:06:2F:D0:7D:84:BA:52:7C:DC:DB:FF:05:3A:F8:D2
X509v3 Authority Key Identifier:
keyid:57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/3dbacc626b07fa381386a20a8fb33de2a3e1e459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/9e7510573b4e2f6f118e04dc9188c5f3ef257302.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.167.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fa:5f:32:eb:f1:b7:c6:d4:34:08:65:92:58:e0:c4:c1:e0:
94:f1:cc:95:68:5d:eb:75:b2:a3:09:8a:c2:ae:9d:10:d1:8e:
79:0a:45:ca:31:20:f1:69:32:bd:d0:6d:96:1f:bd:9d:cb:77:
93:d6:a8:82:10:75:a7:68:7c:79:b0:21:94:66:57:5d:05:9d:
b0:a0:d9:34:a4:ee:cf:3e:39:9f:ed:ab:29:cb:07:33:76:22:
ae:9d:a8:5f:f5:39:5f:cb:4c:ea:13:a0:6a:c7:77:3b:54:b7:
00:aa:cf:2a:6a:88:04:8d:32:98:20:39:33:9a:82:b2:6e:93:
39:2d:64:5b:d5:c3:b6:79:68:3e:a2:2a:81:56:bd:42:33:09:
5b:bd:9b:3b:a4:33:50:10:b3:0a:2a:24:6b:d1:52:15:2d:77:
5a:28:05:a5:78:ee:e1:02:3b:7d:c3:9e:a4:e4:49:df:d4:0d:
a5:26:32:1a:b4:96:31:1b:65:46:bf:eb:8b:1b:25:1f:81:98:
63:4e:e6:83:0d:2b:4e:5f:f5:b2:18:12:14:66:9e:41:9d:6b:
78:9c:58:77:95:61:d7:58:0c:de:dc:72:67:24:ed:b4:a9:93:
d0:9d:77:df:72:24:a6:38:12:48:bd:6d:2b:6b:8d:c1:ce:82:
93:b8:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org