Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/f2257bd572bd4dfbb30cab83f81ac296c8020144.roa
File: f2257bd572bd4dfbb30cab83f81ac296c8020144.roa (raw, json)
Hash identifier: MqMfaMX1MMyYaG3hXaSCVf5LniXdvQQZQLjbTPGQYks=
Subject key identifier: 27:B8:DC:F3:13:34:F1:AD:75:38:12:92:39:4E:94:6E:63:3A:23:DE
Certificate issuer: /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial: 0D52CA
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/f2257bd572bd4dfbb30cab83f81ac296c8020144.roa
Signing time: Wed 24 Mar 2021 14:34:08 +0000
ROA not before: Wed 24 Mar 2021 14:34:07 +0000
ROA not after: Tue 24 Mar 2026 14:34:07 +0000
asID: 27901
IP address blocks: 131.221.164.0/22 maxlen: 22
138.99.224.0/22 maxlen: 22
167.250.52.0/22 maxlen: 22
170.82.188.0/22 maxlen: 22
170.150.156.0/22 maxlen: 22
207.248.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873162 (0xd52ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Validity
Not Before: Mar 24 14:34:07 2021 GMT
Not After : Mar 24 14:34:07 2026 GMT
Subject: CN=f2257bd572bd4dfbb30cab83f81ac296c8020144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:57:fe:44:6f:6c:33:9d:e1:89:ca:dc:15:
00:66:35:9d:8f:a0:0f:98:b3:fc:f1:b9:be:af:ba:
a1:f1:6d:09:a3:6f:44:b4:08:87:4a:6a:cd:6c:12:
a6:76:d4:31:25:b5:0c:d1:26:e8:9b:66:29:93:64:
20:c4:f9:24:a8:c0:fc:86:08:c1:bc:b8:63:20:52:
8c:f8:09:7e:4c:47:15:18:7c:25:38:30:8b:10:af:
9e:29:c1:9f:0f:85:3c:03:34:5a:63:f5:e4:a8:9b:
d8:50:5c:e0:51:33:4f:40:92:1f:d6:e4:4f:5f:87:
7e:33:03:7d:ec:8b:aa:90:6e:f4:69:bb:63:ab:2d:
1b:63:28:5f:84:75:09:d0:66:44:86:66:49:dc:29:
c4:f1:c7:ee:97:66:07:9e:9d:23:56:66:a6:86:bf:
71:13:55:6b:0d:34:af:06:0c:40:0a:09:93:5a:73:
00:3e:1e:9d:fe:33:fa:52:0d:c6:a9:4b:60:63:36:
5b:b5:e0:b6:47:d3:48:8a:49:13:f7:44:0d:38:f8:
af:ba:33:f5:21:0c:99:22:b3:f4:0c:0f:69:c6:bc:
4c:d1:6d:96:fe:0f:65:6b:3f:3d:f7:30:db:80:aa:
10:61:78:8e:18:cc:0b:87:23:26:b6:9d:7b:53:db:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B8:DC:F3:13:34:F1:AD:75:38:12:92:39:4E:94:6E:63:3A:23:DE
X509v3 Authority Key Identifier:
keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/f2257bd572bd4dfbb30cab83f81ac296c8020144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.164.0/22
138.99.224.0/22
167.250.52.0/22
170.82.188.0/22
170.150.156.0/22
207.248.192.0/19
Signature Algorithm: sha256WithRSAEncryption
53:0b:e0:1d:62:bb:60:84:bf:fc:f0:4e:f2:5a:2b:ae:61:8d:
48:26:bd:8b:5a:13:b7:3f:14:89:73:5f:31:e1:be:a9:33:1d:
16:96:82:af:24:bb:63:f3:f4:59:79:b9:8f:ac:9f:92:f9:4b:
43:7e:be:ea:21:7b:ba:d4:c0:5c:08:d9:87:f0:95:14:8e:cd:
39:39:b0:58:7f:2e:cf:c9:13:15:4f:2b:3d:46:1b:39:0f:26:
bd:8c:08:4b:8f:62:42:c3:a7:7d:a6:38:65:d7:c9:ed:82:c9:
26:51:48:fd:49:6e:fb:39:ac:3e:70:45:a2:3f:0f:ef:58:81:
7a:d7:1d:f5:60:04:09:dd:fc:6c:c6:32:4c:54:fc:7f:7a:12:
b4:58:cd:9b:59:de:c8:fb:64:a8:78:88:58:d8:bd:94:44:83:
b8:37:52:fa:ea:b6:1c:e5:83:f2:69:6f:67:e3:51:81:24:bd:
c9:98:77:d8:0f:85:24:30:2d:c2:1b:9f:71:fa:75:e5:cb:d3:
97:c4:18:b4:30:ac:9c:de:d1:55:39:c1:36:4c:a6:a8:c8:8e:
55:e8:5d:7c:db:d4:dd:a5:9c:c0:f9:b7:6a:1a:13:b0:17:ea:
d0:80:85:d0:63:a9:f5:12:8b:58:6d:8d:00:4f:68:b3:43:7d:
08:8e:86:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org