Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/2433b027f6a7274d8d1ccc01904550cb6b5413d2.roa
File: 2433b027f6a7274d8d1ccc01904550cb6b5413d2.roa (raw, json)
Hash identifier: GzIIeTtt9E8QyVp9d7kMJr5TFRVcnhczRybrO1xWBlE=
Subject key identifier: AA:0A:4D:28:AC:69:D3:9E:56:71:C2:E3:90:7C:B4:75:C9:E7:B2:44
Certificate issuer: /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial: 1FD30D
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/2433b027f6a7274d8d1ccc01904550cb6b5413d2.roa
Signing time: Tue 25 Apr 2023 22:04:22 +0000
ROA not before: Mon 24 Apr 2023 22:04:20 +0000
ROA not after: Fri 25 Apr 2025 22:04:20 +0000
asID: 262913
IP address blocks: 201.174.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085645 (0x1fd30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Validity
Not Before: Apr 24 22:04:20 2023 GMT
Not After : Apr 25 22:04:20 2025 GMT
Subject: CN=2433b027f6a7274d8d1ccc01904550cb6b5413d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:0f:b3:0f:f2:be:28:99:ac:df:1f:04:c1:
45:a4:5b:aa:0b:78:73:a8:d0:0d:72:a6:d6:18:ff:
c4:2a:d7:44:c5:f4:58:a3:ae:5c:d3:0f:30:d3:3d:
c3:cf:a8:ab:e8:64:7d:b9:6a:4b:f5:9e:f1:c2:a2:
12:ce:67:96:79:a7:2f:f3:36:2d:6b:4b:15:09:de:
f7:d5:de:23:89:fa:07:f4:dc:c1:46:af:98:57:20:
98:6d:05:c8:88:7a:7e:89:d3:ad:99:4c:e4:d3:f4:
c3:9d:bc:ca:84:eb:93:9c:2c:92:cc:45:7d:28:ac:
1c:ce:89:3e:9c:b6:38:12:de:01:37:04:78:ea:d5:
a6:24:84:d6:6b:a2:77:7a:3a:4a:74:73:5c:8a:fb:
e9:03:a5:ec:2e:7d:f0:f7:b3:65:35:be:ac:a4:6d:
88:b2:19:98:66:d8:47:0b:c7:0b:d8:4c:bc:ed:97:
d1:c3:78:49:6d:91:6a:5c:64:f6:3b:ba:98:49:f6:
b7:5e:12:72:ba:73:76:fa:fe:98:56:31:6e:7a:c6:
aa:66:ae:c0:3a:b7:70:e5:ce:2a:47:f5:5a:c4:e3:
7c:3d:46:ff:75:87:b0:56:ea:8d:bd:dd:9e:29:31:
06:62:bb:11:ab:9e:f9:2b:c8:d6:46:87:f1:15:4f:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0A:4D:28:AC:69:D3:9E:56:71:C2:E3:90:7C:B4:75:C9:E7:B2:44
X509v3 Authority Key Identifier:
keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/2433b027f6a7274d8d1ccc01904550cb6b5413d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.60.0/24
Signature Algorithm: sha256WithRSAEncryption
20:70:cb:8a:d0:17:62:d5:69:8b:76:40:05:95:c2:52:81:a5:
be:84:8d:c2:26:3c:fb:06:9b:e6:9c:a7:e7:b3:f5:43:ae:3e:
80:e8:a7:16:53:b6:d9:62:20:98:6b:de:fe:2f:24:e9:c3:a2:
4d:bd:84:e0:35:f6:6c:a8:8d:c1:47:08:39:b7:34:b2:c9:57:
4f:4e:9d:8e:53:a4:e8:33:e6:64:4f:f4:4b:1c:f9:a5:2f:d9:
bc:48:b2:a1:5d:86:b5:59:78:fa:5f:8e:f3:24:f9:76:64:49:
94:31:c2:86:93:d6:ed:02:c1:c3:8c:b7:8d:6e:cf:88:8c:b9:
26:a0:de:5e:87:7f:f7:1f:03:9b:6c:65:38:97:0f:1c:ca:0d:
82:94:02:e8:9a:e2:b2:52:51:4b:22:54:d9:39:a5:49:d9:ba:
0c:59:20:6c:e0:e7:6e:1e:79:cc:8d:39:3f:ff:d1:06:67:7f:
33:58:de:bf:b5:13:46:26:a9:5b:bc:80:d9:a3:8a:5f:24:36:
42:1d:99:cb:52:6d:be:6a:3a:36:a9:ea:85:c5:ec:ed:f7:be:
92:c8:b1:39:47:c5:57:ce:01:36:3a:49:a1:7b:67:ea:06:b4:
51:6d:12:4a:cf:a3:37:61:db:65:65:f3:d4:cc:d5:31:34:73:
c7:d2:f2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org