Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/f5ee8a11715ca35556e06005beada4b06a5937bc.roa
File: f5ee8a11715ca35556e06005beada4b06a5937bc.roa (raw, json)
Hash identifier: yZxzv7EoiDnr14cuC8mjvb1rPw2byUwyK6W//DDkoaY=
Subject key identifier: 45:9A:1F:5A:6E:86:BF:E4:F7:D2:6D:AB:BB:1C:81:6A:3F:12:91:F5
Certificate issuer: /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial: 0D4249
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/f5ee8a11715ca35556e06005beada4b06a5937bc.roa
Signing time: Wed 24 Mar 2021 14:34:08 +0000
ROA not before: Wed 24 Mar 2021 14:34:07 +0000
ROA not after: Tue 24 Mar 2026 14:34:07 +0000
asID: 27901
IP address blocks: 131.221.164.0/22 maxlen: 22
138.99.224.0/22 maxlen: 22
167.250.52.0/22 maxlen: 22
207.248.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 868937 (0xd4249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Validity
Not Before: Mar 24 14:34:07 2021 GMT
Not After : Mar 24 14:34:07 2026 GMT
Subject: CN=f5ee8a11715ca35556e06005beada4b06a5937bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:ac:9e:d4:16:08:10:2d:46:9e:c6:5b:d6:
5b:97:a7:75:bf:a1:65:af:63:93:ad:e5:cd:7e:5a:
85:51:12:2d:f1:10:ba:b6:95:c1:66:3b:d9:f9:78:
3a:e7:f4:15:d6:d7:31:43:36:bd:91:4a:c2:f4:af:
78:a0:48:d2:55:61:d0:4c:d9:f2:45:4a:35:66:7d:
d6:a3:20:96:0e:6c:54:02:6a:37:56:0d:10:8e:c1:
6e:ef:be:ea:78:d0:af:72:be:5c:90:ac:ea:a4:18:
09:13:b0:69:b9:8d:dc:02:ab:57:e9:55:d9:38:fd:
9f:9a:36:f5:5f:36:7a:03:cc:4a:7d:4a:c0:45:84:
67:ab:ea:68:3a:55:1e:57:86:5a:f4:cc:64:28:e7:
ba:c1:d4:9d:08:81:b9:e6:34:d7:34:53:97:b7:45:
f6:60:de:4e:50:bb:e4:4b:a5:9a:fa:8e:f1:98:51:
44:2b:e6:24:9b:8c:9e:2a:0c:71:c7:e4:9d:5c:18:
5a:1c:0c:c2:23:91:a7:b8:76:67:e9:8c:0a:57:81:
9b:bb:84:53:62:6d:da:44:7d:5b:65:3e:c2:5b:95:
63:40:a5:49:de:f2:63:ce:bb:3b:61:d7:61:c5:37:
80:f8:14:57:16:99:77:20:61:ee:78:88:40:5e:ad:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9A:1F:5A:6E:86:BF:E4:F7:D2:6D:AB:BB:1C:81:6A:3F:12:91:F5
X509v3 Authority Key Identifier:
keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/f5ee8a11715ca35556e06005beada4b06a5937bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.164.0/22
138.99.224.0/22
167.250.52.0/22
207.248.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:33:82:17:98:22:42:37:9e:d5:cc:11:6e:e7:24:b1:27:1f:
db:a8:e8:a0:9b:e9:f3:ea:cd:af:4c:b4:19:f3:d7:c8:f2:06:
dc:e6:a7:8a:59:0c:93:9f:4e:ed:d3:f4:96:70:01:c2:28:60:
b3:ac:44:48:23:aa:44:9c:12:bf:1c:8b:b2:b1:d7:d7:77:a0:
e8:96:8b:73:eb:7f:ca:69:c5:f8:e0:d3:9a:0e:6c:d3:39:9a:
6d:a4:79:a4:35:a1:71:2d:2f:fc:44:63:21:c8:bb:36:05:60:
4f:96:6f:d1:fc:3e:90:4a:8b:61:b1:1d:45:eb:14:e7:27:bd:
2f:93:89:7f:ba:eb:cd:2d:ed:e9:33:77:83:c3:cf:a2:86:99:
b7:97:df:d2:73:2a:51:e9:95:ac:55:e2:71:32:53:b7:e3:21:
07:ab:86:1f:64:50:55:80:63:4f:81:f7:30:5f:65:f5:33:e3:
77:74:7c:23:f9:92:da:1c:2a:df:22:ae:c6:bc:bd:5e:a6:c8:
03:ae:13:af:14:c2:7f:bf:bf:6a:d1:73:39:2f:07:49:b0:d2:
d5:a0:d2:d0:02:95:4c:63:b0:9f:16:cf:fd:55:5d:cf:d5:f0:
58:ea:a8:89:09:71:44:a5:c6:8f:1f:d9:79:01:50:18:8c:05:
83:60:16:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org