Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/a0fcd1635db82edc66844365607265e47ab9799f.roa
File: a0fcd1635db82edc66844365607265e47ab9799f.roa (raw, json)
Hash identifier: +by16bFKz7tHTNwdPe0S7fSNtSOjOFBnwBKswaHV1lE=
Subject key identifier: 3D:3A:F2:10:0A:1C:6C:27:A0:B6:BF:98:7D:58:0D:D6:82:56:CF:8A
Certificate issuer: /CN=f704dcc2bd05f2f811f329995911565e1ff53e09
Certificate serial: 25DC6E
Authority key identifier: 29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f704dcc2bd05f2f811f329995911565e1ff53e09.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/a0fcd1635db82edc66844365607265e47ab9799f.roa
Signing time: Wed 10 Jan 2024 11:38:47 +0000
ROA not before: Wed 10 Jan 2024 11:38:47 +0000
ROA not after: Sat 10 Jan 2026 11:38:47 +0000
asID: 265705
IP address blocks: 201.219.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2481262 (0x25dc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f704dcc2bd05f2f811f329995911565e1ff53e09
Validity
Not Before: Jan 10 11:38:47 2024 GMT
Not After : Jan 10 11:38:47 2026 GMT
Subject: CN=a0fcd1635db82edc66844365607265e47ab9799f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9e:11:c6:cb:a0:96:40:6e:c0:29:ad:02:f4:
23:a2:43:50:8b:cc:b2:89:60:4b:ec:b2:03:07:7c:
d3:30:a8:68:db:06:98:c6:33:b6:67:31:81:19:88:
3a:05:a4:4f:f5:8e:14:43:f2:e2:f6:04:b6:cb:83:
2e:75:d0:15:9f:7c:57:24:06:3c:fa:72:96:98:6a:
1a:9d:60:29:16:6e:90:35:2a:b5:33:3d:be:31:9e:
85:cb:3c:af:71:a2:92:81:dc:86:17:95:7d:ef:c1:
c6:27:ea:d9:c8:bb:9c:ce:03:13:22:a0:66:85:b0:
ae:ec:08:d3:dc:08:ea:4c:f6:e6:ff:ef:6b:4e:76:
d5:ac:f4:97:26:2b:fd:1a:32:a9:e1:fc:67:76:84:
ed:2c:9b:18:7b:4c:47:aa:60:3c:9e:b9:dd:17:99:
73:3a:9a:28:45:7b:70:5e:b4:f3:be:9c:fe:47:16:
18:18:32:e1:61:33:14:f2:28:25:d2:b5:7c:3c:34:
2b:d4:4a:6f:f1:27:9b:63:56:4e:2c:dc:0c:08:82:
fe:75:df:c6:b4:3f:7a:e2:e1:e0:9a:ae:df:a1:dd:
7d:5c:32:78:69:e9:42:bc:aa:b4:0b:91:8e:7d:35:
52:36:b6:7b:a9:26:e5:25:46:5f:46:cc:d6:b1:97:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:F2:10:0A:1C:6C:27:A0:B6:BF:98:7D:58:0D:D6:82:56:CF:8A
X509v3 Authority Key Identifier:
keyid:29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f704dcc2bd05f2f811f329995911565e1ff53e09.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/a0fcd1635db82edc66844365607265e47ab9799f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/f704dcc2bd05f2f811f329995911565e1ff53e09.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.130.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0d:07:86:c7:0d:e4:31:31:5e:18:c8:c1:9e:dc:70:53:4f:
aa:5d:89:01:30:5f:2d:5d:11:55:51:ba:4c:90:41:31:e7:38:
f6:b9:4a:4f:00:90:62:66:ec:ed:42:3a:37:04:f2:04:3e:98:
f4:e7:33:85:1c:6c:ca:0a:0d:e7:8e:9c:53:13:c3:ec:2a:3c:
45:a9:2e:fb:ef:d5:53:52:d0:76:3a:be:51:46:5f:fe:fd:7b:
4d:c5:08:c4:06:bb:c8:e6:fc:41:0d:8e:1f:b3:41:28:0d:8c:
f4:ac:99:59:22:31:60:4d:63:0c:27:fe:1a:86:6d:1a:c2:72:
58:08:64:5b:d1:43:50:57:42:8d:ed:18:e9:fd:aa:5e:ed:2c:
f6:74:9a:58:61:da:5f:d0:c9:b7:b6:02:0c:06:07:e6:f7:dd:
7f:fa:16:87:21:7e:a2:73:52:da:5f:32:21:e4:ec:3a:a0:6d:
35:d7:b1:c1:f9:37:c6:32:7f:a1:0f:85:e3:5e:b6:09:b9:68:
fa:b6:ab:ec:65:e8:ed:11:72:fd:5c:7c:5f:7b:b7:55:d8:8d:
7b:83:e7:41:60:78:55:5c:83:c7:58:47:80:bb:92:ed:32:eb:
3e:2b:8c:ff:db:34:fd:36:5d:fe:9b:aa:0a:7d:85:40:07:fd:
ff:20:d3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org