Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a692f3cc31529d4f55cb744f80b51990f548232c.roa
File: a692f3cc31529d4f55cb744f80b51990f548232c.roa (raw, json)
Hash identifier: ziYeQkUhcDal8HDvOA7u0VwKPUqhiJ8vauvPNcdsICA=
Subject key identifier: A8:A1:38:EA:6E:27:C8:BD:38:FB:63:57:D6:EE:40:5F:D0:A6:9C:35
Certificate issuer: /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial: 1A9D23
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a692f3cc31529d4f55cb744f80b51990f548232c.roa
Signing time: Thu 22 Sep 2022 20:54:49 +0000
ROA not before: Thu 22 Sep 2022 20:54:09 +0000
ROA not after: Sun 22 Sep 2024 20:54:09 +0000
asID: 3790
IP address blocks: 196.40.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744163 (0x1a9d23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Validity
Not Before: Sep 22 20:54:09 2022 GMT
Not After : Sep 22 20:54:09 2024 GMT
Subject: CN=a692f3cc31529d4f55cb744f80b51990f548232c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:86:80:05:7a:f1:ac:f5:9c:ac:32:f9:ff:
cd:0a:0b:e0:fc:95:37:af:d9:17:10:76:c6:3c:95:
d5:b2:de:73:6b:fe:bf:e1:61:49:b7:2c:ba:cf:c7:
bb:f8:4e:d4:64:cd:d9:2c:aa:f0:f4:fa:07:0d:a2:
73:42:75:66:22:93:db:bc:fc:80:01:ef:f5:f0:12:
55:d9:15:ce:89:65:a9:f9:b7:24:7a:51:a1:4d:ff:
76:c2:8f:28:d7:91:42:7f:78:69:2b:02:6a:28:49:
01:c9:f5:3c:ae:50:c6:e1:38:78:cc:8e:17:5c:a5:
23:d1:f8:79:c2:2e:2f:ac:1a:c8:81:59:9c:c2:e4:
2b:63:b0:78:3c:38:8e:61:08:41:3b:82:98:19:de:
75:5d:41:63:66:3b:c0:19:77:9f:d0:54:b7:4b:41:
f1:4f:b6:05:26:16:59:0d:b9:f4:51:34:48:5a:70:
81:6d:7f:b1:5c:78:d0:8c:a6:21:1b:4d:44:7f:21:
6b:9e:3e:bc:f5:6f:2f:2f:11:23:ac:d5:de:a3:b9:
4d:f1:18:f8:11:eb:46:b6:cc:22:06:af:eb:ec:c5:
38:fc:37:0e:fd:d3:d9:84:78:65:54:81:9a:56:0c:
be:71:69:02:43:7e:3e:f0:5d:10:1e:4b:ff:99:23:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:38:EA:6E:27:C8:BD:38:FB:63:57:D6:EE:40:5F:D0:A6:9C:35
X509v3 Authority Key Identifier:
keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a692f3cc31529d4f55cb744f80b51990f548232c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
196.40.72.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4f:4e:b7:7b:cd:cb:07:bd:67:1a:d0:6e:cb:6b:23:bd:44:
a1:c5:a6:46:19:f2:db:2a:ed:3b:21:00:eb:57:2d:10:d9:f3:
77:8d:62:85:59:b0:92:a7:9b:1d:b8:09:e3:ed:45:e3:06:6e:
f0:a7:4a:0d:06:b7:5b:99:8c:54:3d:1f:24:aa:f4:91:e9:5d:
72:6d:c5:43:66:b0:9a:09:a2:b1:e6:46:a3:9c:6b:5d:7b:ec:
0a:f8:0e:7b:4a:90:d6:bc:15:e7:ba:29:a7:86:98:01:e8:e1:
91:08:83:32:fd:df:0f:2c:bc:b5:29:f0:19:d5:07:86:d6:6f:
e2:82:ca:59:62:84:e1:11:d9:f8:9e:21:41:cb:fd:5c:37:d9:
09:74:75:f0:5c:cc:62:04:9f:ce:61:59:07:26:00:dd:d6:e7:
4b:51:64:56:3c:fb:e7:ad:48:70:8d:7b:2c:de:e7:0c:61:b9:
7f:d0:bb:a0:70:45:46:59:c7:72:ec:ea:a2:40:f2:8a:66:54:
e5:a7:ad:cd:69:a3:ac:8e:2c:08:32:46:07:fb:8e:84:4a:e6:
57:dd:72:88:da:62:c8:3e:d7:fa:36:4f:7a:d8:53:c9:d6:6b:
6e:2b:91:ab:28:b3:cd:ab:1f:57:8b:a2:8c:d8:bb:b0:29:3f:
5c:c2:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org