Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/2b68d8f9d0454ce5d2113b74ff5171f2b4590452.roa
File: 2b68d8f9d0454ce5d2113b74ff5171f2b4590452.roa (raw, json)
Hash identifier: n4FC3iYj2aWnY0eDtExh6RlPEMQidevuGCcJ/Ki7LZs=
Subject key identifier: AD:37:23:8A:C4:AB:B0:77:0F:07:0B:9B:47:27:38:F4:D5:3C:C9:EC
Certificate issuer: /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial: 0AD6CF
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/2b68d8f9d0454ce5d2113b74ff5171f2b4590452.roa
Signing time: Thu 14 Jul 2022 23:12:17 +0000
ROA not before: Fri 01 Apr 2022 03:00:00 +0000
ROA not after: Mon 01 Apr 2024 03:00:00 +0000
asID: 265817
IP address blocks: 131.196.82.0/24 maxlen: 24
131.196.83.0/24 maxlen: 24
131.196.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710351 (0xad6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Validity
Not Before: Apr 1 03:00:00 2022 GMT
Not After : Apr 1 03:00:00 2024 GMT
Subject: CN=2b68d8f9d0454ce5d2113b74ff5171f2b4590452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:62:35:1b:cc:73:c3:fb:1f:53:c7:6c:f1:
a8:f6:8d:82:33:ac:06:36:7a:92:a4:09:c7:94:a6:
f3:f5:93:77:8e:ba:3f:d9:4b:38:4b:e0:cc:e7:c0:
b0:cb:e5:be:55:19:69:74:92:3c:20:a1:93:e4:ed:
9d:8d:15:c3:1d:77:98:7b:0d:c3:a9:99:41:06:9a:
d4:c8:ed:bb:ab:9f:24:78:47:32:06:3b:ea:aa:aa:
76:ee:f8:fa:6d:4e:fd:1c:14:cd:4f:b7:d1:da:e2:
5c:d9:61:f7:0d:96:45:c1:d9:cd:01:0f:50:25:38:
b6:27:1a:b5:be:61:0a:c3:0c:dd:6b:80:74:22:26:
6d:01:e0:ca:50:6f:a2:c7:a5:77:a3:72:57:da:f9:
b8:aa:e3:b0:6b:8b:f1:e6:04:57:4d:59:a7:cd:e4:
8a:fb:fe:f5:98:b7:bc:0c:8e:93:22:31:f9:f0:df:
42:56:10:5a:72:8b:38:21:6b:bc:b4:08:44:6f:a6:
9f:08:2a:46:e8:83:59:4f:25:33:8b:40:f4:16:e1:
ca:6b:6d:ce:09:18:57:ad:b9:fe:21:8d:23:92:26:
b6:3f:91:a6:f1:14:3e:e4:6e:a7:21:16:0b:17:38:
2b:eb:2c:e4:7f:42:46:5e:35:57:92:0e:17:0e:bb:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:37:23:8A:C4:AB:B0:77:0F:07:0B:9B:47:27:38:F4:D5:3C:C9:EC
X509v3 Authority Key Identifier:
keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/2b68d8f9d0454ce5d2113b74ff5171f2b4590452.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.82.0/23
Signature Algorithm: sha256WithRSAEncryption
10:82:bc:11:19:f7:1d:f3:6b:7b:ca:90:83:ff:91:e3:af:fa:
04:03:8b:92:f7:07:4b:f7:d9:bd:0e:7a:98:6f:a2:ce:68:07:
a5:bb:92:51:4f:d9:94:9c:5d:72:81:ab:f9:2e:a0:a4:47:00:
0c:6e:53:6d:7b:19:62:21:ce:e5:d2:97:44:a9:6e:7b:dc:79:
f0:35:95:47:ec:19:7f:6c:d7:68:33:fe:e0:73:12:01:58:ec:
75:33:2e:0b:fb:f7:f0:e3:5c:24:c9:0e:72:3e:eb:53:05:dd:
c3:b9:a3:f0:74:32:27:cb:1c:cf:60:e2:ad:65:08:8f:87:09:
4d:5f:34:b3:48:c2:15:91:ff:7e:75:27:36:9e:17:99:72:13:
46:16:39:26:3f:d8:25:46:a1:d2:c3:20:f0:0b:30:f5:df:ce:
68:94:3d:70:20:e2:df:9b:e7:68:bf:bd:d4:f0:17:1d:3e:38:
8f:97:2e:77:99:3e:83:ee:c8:70:e0:27:2e:75:67:92:63:8d:
66:6e:5f:96:5f:0b:9c:38:e0:51:02:06:8b:22:94:12:9e:2c:
57:fb:0a:d3:31:c9:34:0f:c9:b7:54:46:4f:04:04:9f:e6:08:
87:18:9f:38:92:89:c1:41:23:b9:f0:c6:b9:34:85:ec:76:af:
4c:8b:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org