Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/819c07caa193384a5088b7c49569da7e1b06c52c.roa
File: 819c07caa193384a5088b7c49569da7e1b06c52c.roa (raw, json)
Hash identifier: MpEUm8Fd+8sC201N1LnhVAdGFTW3Xdh83GednQaJdIM=
Subject key identifier: 0E:DE:EB:85:A3:D2:96:FB:E4:E3:0C:23:0C:3F:67:92:BA:24:CB:64
Certificate issuer: /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial: 05D1ED
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/819c07caa193384a5088b7c49569da7e1b06c52c.roa
Signing time: Tue 11 Jul 2023 12:42:16 +0000
ROA not before: Mon 10 Jul 2023 12:42:16 +0000
ROA not after: Fri 11 Jul 2025 12:42:16 +0000
asID: 7418
IP address blocks: 152.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381421 (0x5d1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Validity
Not Before: Jul 10 12:42:16 2023 GMT
Not After : Jul 11 12:42:16 2025 GMT
Subject: CN=819c07caa193384a5088b7c49569da7e1b06c52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:08:d3:cd:25:18:a0:75:91:4c:a9:a1:22:
6b:44:04:99:99:b3:5a:21:40:a6:bf:05:0e:00:f5:
96:e8:98:98:50:33:d6:27:a7:ee:3f:e4:c9:8b:fa:
95:bb:b4:23:84:58:da:cc:dd:65:79:14:d7:e3:aa:
ef:6f:5a:83:a4:1a:eb:13:da:49:80:52:3b:da:86:
ec:d0:00:71:e9:bc:18:6b:98:d1:b6:ac:51:f5:d3:
06:78:71:70:32:23:ad:d0:c3:23:14:dd:05:1b:1f:
d1:ea:ad:a6:54:17:6b:91:8b:fd:ae:c7:5d:b7:8c:
36:fe:74:c4:ce:ac:3e:60:09:54:0d:a4:8e:97:81:
64:f0:3d:29:61:31:28:b3:26:b2:7f:7d:1e:66:00:
45:05:1d:4c:19:d2:9b:d6:39:da:5a:72:d0:9d:7d:
05:80:2f:ae:69:fd:40:6d:fc:fb:f7:28:4d:5b:27:
be:3d:02:cc:39:7a:fb:db:be:1d:12:f3:1a:57:f7:
bc:fa:30:50:96:a4:8c:41:a5:49:2d:15:c7:f5:45:
49:ba:42:9b:81:5b:14:bc:c4:92:b4:71:2e:1f:7d:
2e:04:50:94:db:56:30:67:fb:3d:81:af:22:48:4c:
85:67:b4:ba:bf:a0:be:19:ee:fc:2c:3e:a0:ef:2f:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DE:EB:85:A3:D2:96:FB:E4:E3:0C:23:0C:3F:67:92:BA:24:CB:64
X509v3 Authority Key Identifier:
keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/819c07caa193384a5088b7c49569da7e1b06c52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:93:8a:08:fa:5a:c5:86:dc:1b:8c:a2:95:56:10:af:9b:6e:
95:7e:ab:bd:19:fb:4c:fe:69:40:15:b7:b6:07:da:ce:01:b6:
27:64:94:82:33:4e:ef:15:0e:f0:fc:e8:b0:07:31:7e:f7:2e:
cb:12:c5:b2:00:36:83:04:19:8c:f8:1d:8e:80:89:51:e6:b8:
5b:60:ef:b4:73:76:e0:8c:41:82:31:86:28:4a:56:3b:54:7b:
df:62:b8:1d:71:52:17:95:30:55:14:41:a3:90:c5:28:b0:a0:
16:f7:15:72:e4:2e:d1:31:5a:c4:cf:36:5f:b7:64:91:eb:94:
53:c5:8c:02:e5:b4:2f:d4:3e:38:01:83:db:cd:da:56:26:da:
15:d3:b3:f6:53:0e:81:ae:a7:49:3b:7e:0d:fb:c8:0f:a4:6c:
cf:c3:08:d5:34:ac:d5:95:10:c0:be:39:b4:4b:b4:ab:53:8e:
e8:7c:2b:44:c0:7c:c1:7b:4a:19:97:42:38:39:79:6a:3a:36:
9a:29:29:47:98:2d:55:07:54:80:94:cf:0f:9b:81:0e:83:b0:
1c:62:ea:71:90:ee:eb:b5:f1:5b:49:60:46:40:98:f8:78:47:
18:b7:30:37:c9:7d:ad:7c:2a:90:90:9a:e7:c4:e1:4c:26:05:
62:90:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org