Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/c131bf8c395a8a93d543084da8dc5e10117a769e.roa
File: c131bf8c395a8a93d543084da8dc5e10117a769e.roa (raw, json)
Hash identifier: qV5bMqo75GfSWhbfFx1PGDYHWHX/M8fBXWmSKjCZfnE=
Subject key identifier: 2A:31:D2:A5:ED:CD:36:95:33:C6:A9:D6:30:FA:6F:48:DB:0B:E8:D4
Certificate issuer: /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial: 0D432D
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/c131bf8c395a8a93d543084da8dc5e10117a769e.roa
Signing time: Wed 24 Mar 2021 14:34:08 +0000
ROA not before: Wed 24 Mar 2021 14:34:07 +0000
ROA not after: Tue 24 Mar 2026 14:34:07 +0000
asID: 27901
IP address blocks: 131.221.164.0/22 maxlen: 24
138.99.224.0/22 maxlen: 24
167.250.52.0/22 maxlen: 24
207.248.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869165 (0xd432d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Validity
Not Before: Mar 24 14:34:07 2021 GMT
Not After : Mar 24 14:34:07 2026 GMT
Subject: CN=c131bf8c395a8a93d543084da8dc5e10117a769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:43:39:70:81:f0:8c:7d:55:7b:65:e7:92:
c8:82:af:2c:5f:7f:47:9c:86:f7:6f:96:ca:a2:c9:
b1:0e:95:f0:00:ec:70:c9:72:c4:73:b9:cd:bf:07:
ec:d1:9e:0a:42:19:9e:34:fe:d2:ab:73:c1:1b:b5:
83:1a:87:74:b0:07:93:1c:67:0f:e9:d2:69:fb:48:
54:7a:80:fa:7e:b8:20:3b:37:f7:f4:87:e8:0c:0d:
3b:e3:8a:61:7c:50:ac:5a:3f:42:ca:62:1e:39:7c:
79:30:97:48:2d:fc:0b:38:63:bb:42:e1:74:40:14:
1e:b5:c7:61:29:59:d1:34:ad:5a:60:70:21:71:c2:
db:5e:29:01:a6:a5:88:ec:ea:6d:fe:93:45:8b:33:
9c:a3:7c:11:13:33:11:01:cd:78:4c:cc:15:0b:4a:
18:23:d7:19:c4:29:b9:de:f6:d0:2a:5c:49:e3:e5:
83:f5:06:12:cb:3f:23:81:83:ad:92:c9:5d:99:0d:
96:6c:a3:7b:f1:3e:d8:0d:37:dd:58:2e:9c:03:b7:
32:43:80:65:a6:97:55:fa:0a:81:dd:38:4f:23:17:
e8:9b:0e:fa:d2:fc:79:12:ba:79:9d:46:2c:07:0e:
56:2f:6b:34:53:94:46:ed:57:4f:78:39:7a:78:5a:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:31:D2:A5:ED:CD:36:95:33:C6:A9:D6:30:FA:6F:48:DB:0B:E8:D4
X509v3 Authority Key Identifier:
keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/c131bf8c395a8a93d543084da8dc5e10117a769e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.164.0/22
138.99.224.0/22
167.250.52.0/22
207.248.192.0/19
Signature Algorithm: sha256WithRSAEncryption
07:7c:98:b2:c3:cf:4c:31:82:16:1c:07:78:d5:7a:79:03:61:
6e:20:e0:02:8e:4a:47:81:26:94:65:c9:45:9c:a3:28:ad:a9:
29:b1:a3:1b:00:5a:70:f5:57:37:c8:24:cc:b5:b4:6f:02:4c:
ba:2a:82:94:b9:ad:b9:62:e8:89:52:bc:94:31:cf:89:3b:a8:
98:f0:c9:87:72:35:80:6c:3c:41:92:f8:b8:37:ed:db:95:47:
cb:b3:e6:c7:9c:e4:5e:b6:48:51:15:40:58:14:0f:37:13:62:
cf:e7:64:f6:af:a5:65:80:da:85:41:96:51:f2:4e:33:34:f6:
75:3f:30:62:bb:98:3a:cf:9a:d0:54:67:87:a7:3c:6b:c3:68:
d6:ab:b5:b0:41:87:4d:1d:f8:44:67:60:54:e4:72:10:2a:7f:
09:0d:01:45:02:65:33:4f:b1:00:ed:a3:3c:17:f0:dd:71:7e:
83:a1:45:de:22:62:32:95:0e:d4:01:21:cc:6a:26:04:aa:53:
43:2b:5b:cb:d6:09:46:da:a7:74:a1:1d:99:84:41:3d:4e:a7:
2e:0f:1e:da:70:6a:ba:9c:56:43:cd:cd:77:c3:3c:86:51:b5:
74:59:d2:b5:fa:b8:6c:4e:91:74:ce:40:69:02:d9:da:81:a6:
56:28:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org