Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/5322bac5643c021413afed5dffe994f4c742a281.roa
File: 5322bac5643c021413afed5dffe994f4c742a281.roa (raw, json)
Hash identifier: awaD1hxuvTbJafSanEB1qlHiGL5RtOvghTvRKlGZhlk=
Subject key identifier: 35:FC:A7:02:DC:CD:C9:8B:E8:0C:93:B6:EE:2C:E3:77:AF:CC:CA:35
Certificate issuer: /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial: 0D4774
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/5322bac5643c021413afed5dffe994f4c742a281.roa
Signing time: Wed 24 Mar 2021 14:34:08 +0000
ROA not before: Wed 24 Mar 2021 14:34:07 +0000
ROA not after: Tue 24 Mar 2026 14:34:07 +0000
asID: 27901
IP address blocks: 131.221.164.0/22 maxlen: 22
138.99.224.0/22 maxlen: 22
167.250.52.0/22 maxlen: 22
170.82.188.0/22 maxlen: 22
170.150.156.0/22 maxlen: 22
207.248.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870260 (0xd4774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Validity
Not Before: Mar 24 14:34:07 2021 GMT
Not After : Mar 24 14:34:07 2026 GMT
Subject: CN=5322bac5643c021413afed5dffe994f4c742a281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:33:3d:a6:11:b6:78:a6:b6:9e:09:63:c4:
af:6b:17:fc:6b:d9:59:6a:b9:fe:8e:d9:7d:a3:be:
c3:20:06:82:18:24:cd:c7:97:95:33:8e:7e:81:6b:
ea:b0:1e:4d:c0:8d:40:44:64:e6:f8:b6:69:93:ad:
9e:82:29:c8:0c:24:e7:55:67:dc:6e:55:aa:0b:92:
59:84:00:fe:4d:47:ff:78:a9:eb:1e:38:2a:78:23:
32:7c:c4:e0:53:e7:59:3a:fd:50:d1:82:65:fc:e0:
bd:72:e3:bd:0c:1c:54:8b:96:5b:30:44:e7:83:07:
e7:9b:57:93:27:74:2d:c9:73:26:23:ac:9b:d4:8e:
8c:4e:af:b5:dd:89:dc:85:c3:e4:2a:af:9d:0f:04:
e7:ea:81:ad:2c:fb:36:b0:e9:54:70:d6:6b:77:91:
15:e4:48:3f:1a:6c:8e:96:02:f8:63:20:61:20:47:
33:69:48:21:dc:ea:9f:3e:6c:69:d8:2b:a6:5e:8a:
52:2f:0e:8f:56:1c:52:19:e3:62:f5:6e:38:c3:2c:
85:68:a4:52:bb:7f:85:48:3b:9f:0e:ea:ec:ba:fb:
4f:ad:a8:06:9a:69:87:13:a9:e4:73:85:fd:7a:c6:
7d:63:de:08:77:7d:1c:e7:73:94:a3:ae:44:3d:5a:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:A7:02:DC:CD:C9:8B:E8:0C:93:B6:EE:2C:E3:77:AF:CC:CA:35
X509v3 Authority Key Identifier:
keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/5322bac5643c021413afed5dffe994f4c742a281.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.164.0/22
138.99.224.0/22
167.250.52.0/22
170.82.188.0/22
170.150.156.0/22
207.248.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:90:c5:6c:17:1f:44:85:b2:55:9b:b3:b8:3e:3d:58:a1:ee:
7c:ca:ae:b0:fe:24:69:b8:b2:89:91:86:0b:c9:27:04:0a:c9:
61:4c:be:14:4c:ca:d2:12:73:f6:5f:69:26:88:59:a4:fe:5f:
3e:08:af:5a:cb:fa:7d:be:b3:45:ee:57:af:0d:0b:ea:52:17:
17:da:ba:e8:10:62:71:87:f2:95:40:77:9a:a3:ac:6e:87:b8:
b6:7f:0e:72:2b:d5:e3:41:f4:c4:6c:f5:51:df:ae:b3:d3:a2:
65:c2:a2:df:d9:88:2e:02:42:45:a2:83:72:d9:5c:14:fe:31:
dd:90:b8:21:13:0b:e1:82:e5:a3:f5:28:e0:27:d9:13:d1:bd:
48:c8:81:27:01:ac:e2:b3:e1:28:c3:54:1d:c9:81:85:ed:a3:
4b:d6:45:a3:f7:0a:6a:7b:c9:70:65:fa:ca:58:68:aa:d2:cb:
6b:97:00:ed:de:ba:2a:51:cc:8a:c8:55:56:43:61:cb:ff:53:
99:00:1a:b4:42:a9:87:2f:15:f4:ec:a3:ff:8f:84:74:a8:99:
48:56:6e:64:4a:2a:6d:c8:4c:f1:6f:af:cb:50:7e:d9:e8:08:
f8:cd:a2:8a:7c:d9:d4:15:a7:e7:ae:08:0c:eb:43:15:d4:9a:
3b:e4:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org