Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/e9e99d17b0cd7c5bc4829405a4120203216e8f8d.roa
File: e9e99d17b0cd7c5bc4829405a4120203216e8f8d.roa (raw, json)
Hash identifier: MBfpToa5EOUohHWhzNNez19ssJ5drjfJ4YfvCoNex40=
Subject key identifier: D2:F8:B5:39:1C:72:61:2A:21:7F:30:5E:E5:46:44:CC:EB:19:10:23
Certificate issuer: /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial: 0D589B
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/e9e99d17b0cd7c5bc4829405a4120203216e8f8d.roa
Signing time: Wed 24 Mar 2021 14:34:09 +0000
ROA not before: Wed 24 Mar 2021 14:34:07 +0000
ROA not after: Tue 24 Mar 2026 14:34:07 +0000
asID: 27901
IP address blocks: 131.221.164.0/22 maxlen: 22
138.99.224.0/22 maxlen: 22
167.250.52.0/22 maxlen: 22
207.248.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874651 (0xd589b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Validity
Not Before: Mar 24 14:34:07 2021 GMT
Not After : Mar 24 14:34:07 2026 GMT
Subject: CN=e9e99d17b0cd7c5bc4829405a4120203216e8f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:23:56:6c:29:a1:48:d6:7a:38:2c:64:a9:
00:d6:92:b8:5f:ee:1a:e6:89:91:25:32:b2:b2:20:
9d:e4:16:75:c6:f1:ff:8a:50:d6:ea:6d:70:c6:b5:
13:af:7d:0a:ac:63:21:ad:c0:7b:61:12:f1:00:9f:
34:84:03:32:74:29:e3:81:f1:d4:49:8c:91:4a:f2:
c4:ad:2e:a6:26:ce:03:58:92:9d:11:96:01:be:15:
f7:0c:03:15:7f:4e:92:2e:71:44:6d:f6:ef:73:15:
4a:a7:49:26:1d:1c:28:9a:a5:e4:64:7c:53:5a:b7:
d3:07:40:18:7e:93:d0:0e:b8:c8:69:67:ed:29:16:
b4:15:e7:31:c4:1a:04:a2:00:0f:6b:f6:57:98:f4:
4b:43:46:c1:6e:21:f6:91:4f:bd:63:a3:00:2e:26:
63:5f:99:a0:5b:c2:f2:bc:88:a4:1b:bf:cb:83:9b:
79:d2:d8:cf:81:e1:28:a2:c9:cf:f2:32:c2:81:8a:
f8:65:76:ba:1d:11:3a:50:8d:01:53:61:88:89:7f:
f4:c6:b5:77:e9:9d:2f:32:d3:e6:58:f0:c3:71:ea:
4e:83:18:00:12:33:15:c1:a0:b9:20:63:60:96:9f:
32:28:58:d9:5f:3e:01:88:29:18:7f:13:3b:a4:2a:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F8:B5:39:1C:72:61:2A:21:7F:30:5E:E5:46:44:CC:EB:19:10:23
X509v3 Authority Key Identifier:
keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/e9e99d17b0cd7c5bc4829405a4120203216e8f8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.164.0/22
138.99.224.0/22
167.250.52.0/22
207.248.192.0/19
Signature Algorithm: sha256WithRSAEncryption
27:e3:a3:f6:b4:3c:a9:3b:54:5f:86:51:96:76:20:ed:b9:28:
fa:7c:fd:36:c6:6a:c1:f6:ff:b7:e8:3c:c3:cb:06:f6:d2:d4:
24:17:31:3d:3a:fc:aa:f6:39:32:72:18:96:b4:e6:5c:6a:eb:
ff:8f:78:73:5c:09:92:88:91:02:7d:d0:94:4e:a7:40:8d:2f:
65:09:24:02:ab:20:ad:c5:48:db:0f:a1:5a:73:d5:f0:8a:61:
63:58:e7:6c:23:03:76:b4:6a:50:99:ac:e4:74:a7:8c:6c:16:
71:98:57:28:cb:ec:37:3c:4c:c0:58:59:49:5f:61:b7:4f:b2:
15:35:3e:2c:2e:50:71:41:af:c0:c0:65:8e:ed:1f:31:66:87:
f2:93:06:48:ae:5e:be:01:d0:04:d1:78:3e:3a:0e:6c:ac:f7:
ad:88:87:60:4d:dd:bb:98:98:9a:be:d6:cb:c6:a4:c9:74:bb:
e3:3f:1e:6a:c5:bc:d1:07:8d:a0:2a:0e:b0:25:78:f8:47:f2:
fa:5a:a2:7f:5c:b7:f1:06:4e:40:54:02:99:e9:ba:eb:be:30:
84:8b:e6:d2:ba:6b:39:b8:d1:80:5c:9b:90:ba:b1:ae:b5:0f:
bf:ac:a8:c5:9c:ba:04:8a:d2:93:35:0e:60:c9:58:c1:6a:d4:
c2:f7:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org