Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/f9c4c58ac78080093922ff7581c21924174fc149.roa
File: f9c4c58ac78080093922ff7581c21924174fc149.roa (raw, json)
Hash identifier: TL/F2Y4fVlV82t8L70961nKUPfajx7al1+LGI4efATA=
Subject key identifier: F0:0B:8A:32:F3:C9:82:0A:2E:15:C6:7D:AD:A5:D5:21:31:0E:EC:3F
Certificate issuer: /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial: 0D4F50
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/f9c4c58ac78080093922ff7581c21924174fc149.roa
Signing time: Wed 24 Mar 2021 14:34:08 +0000
ROA not before: Wed 24 Mar 2021 14:34:07 +0000
ROA not after: Tue 24 Mar 2026 14:34:07 +0000
asID: 27901
IP address blocks: 131.221.164.0/22 maxlen: 22
138.99.224.0/22 maxlen: 22
167.250.52.0/22 maxlen: 22
170.82.188.0/22 maxlen: 22
170.150.156.0/22 maxlen: 22
207.248.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872272 (0xd4f50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Validity
Not Before: Mar 24 14:34:07 2021 GMT
Not After : Mar 24 14:34:07 2026 GMT
Subject: CN=f9c4c58ac78080093922ff7581c21924174fc149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:55:63:a2:bf:7d:86:fa:c9:d8:4e:b7:84:
b4:3b:b5:74:91:82:20:61:37:d7:26:75:72:fd:50:
c3:d1:c8:da:31:d5:fe:ee:95:a3:6e:87:bd:7e:49:
14:ef:6f:c3:d3:1f:32:6c:4a:9c:56:bf:1f:51:a2:
96:59:8b:c3:54:45:f9:12:6c:9f:7c:3a:af:4c:6e:
01:74:df:75:b9:02:72:d8:93:6f:00:d7:79:c1:e9:
28:60:60:01:a6:16:65:67:54:ec:7b:b7:13:32:b4:
12:c0:9a:cc:47:9e:70:72:fa:0e:90:fc:21:6a:4c:
f1:a7:29:e3:32:15:a0:7d:75:ff:86:21:22:16:0a:
8b:9d:c7:b3:af:df:4f:df:f9:c7:29:0a:b0:ca:75:
8f:3d:46:cb:b3:da:2e:48:98:ff:8a:e6:be:83:e2:
4b:4d:64:0d:b4:08:93:b6:1e:5b:da:55:fc:3a:7e:
1a:9f:e1:95:d9:06:6f:af:8b:60:3a:d7:3e:d8:7d:
15:ee:6e:a1:e5:a0:57:1f:c8:31:a0:c0:59:8e:6d:
e7:cb:35:d6:56:cf:9f:aa:3f:0d:7f:cc:e6:e6:66:
8a:b8:50:f6:96:ee:46:c3:47:2f:bd:50:08:fe:8d:
f6:af:fc:a7:b5:e1:eb:50:ea:9d:f0:22:ea:73:30:
b5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0B:8A:32:F3:C9:82:0A:2E:15:C6:7D:AD:A5:D5:21:31:0E:EC:3F
X509v3 Authority Key Identifier:
keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/f9c4c58ac78080093922ff7581c21924174fc149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.164.0/22
138.99.224.0/22
167.250.52.0/22
170.82.188.0/22
170.150.156.0/22
207.248.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:a1:2d:4f:58:22:f3:0a:2e:37:fe:1a:73:69:aa:15:9f:51:
10:26:b2:6e:2e:72:d7:1e:a3:99:e7:84:ce:c2:15:9e:af:1b:
a1:c5:30:cf:5d:b9:56:bf:69:04:29:ae:85:af:d0:9f:68:e1:
b7:8b:b7:03:1e:f9:11:00:c3:0d:0d:13:2d:c5:35:22:83:fa:
b8:1b:ec:c4:79:6d:bb:1e:5f:1d:b2:b0:20:75:74:0d:5d:60:
17:26:98:97:96:6c:8b:7e:b9:8a:c5:af:48:cb:ca:c2:22:48:
d0:b1:a1:3f:ba:46:9c:33:72:de:91:f1:5f:c0:9b:ed:37:b6:
5d:16:eb:07:e2:72:e5:1f:7e:5d:15:91:b1:f2:d4:1a:ec:3f:
85:11:81:a5:17:ea:16:7f:dc:ae:98:9f:72:c0:f2:ba:5d:ea:
62:ca:16:d0:3d:d0:e8:f3:01:40:22:0f:d9:7e:bc:87:f1:b9:
5e:e0:23:f4:52:dd:04:92:fc:9f:b0:df:c9:90:3c:f0:47:34:
78:f8:26:d8:5c:89:b0:a1:6a:2e:2a:eb:83:fd:a7:da:3d:83:
33:b1:fb:3e:be:ba:ab:19:be:8e:63:d7:6f:40:94:e5:d2:d5:
69:98:0c:39:c2:0e:9a:11:13:c8:41:30:60:ce:02:1d:4f:58:
9f:6f:ed:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org