Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/b6cf469f5246a7c643ea5094149731872eac2c1e.roa
File: b6cf469f5246a7c643ea5094149731872eac2c1e.roa (raw, json)
Hash identifier: Zm/cfybZc9wWIcv6fiEOqhEi0X954YsppDyZ4E+1wDg=
Subject key identifier: 8B:52:84:E1:99:C7:61:64:5A:E1:4B:EF:4A:B2:93:8D:E9:7D:FB:3A
Certificate issuer: /CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Certificate serial: 059C5A
Authority key identifier: 5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/b6cf469f5246a7c643ea5094149731872eac2c1e.roa
Signing time: Fri 23 Feb 2024 08:42:14 +0000
ROA not before: Fri 23 Feb 2024 08:42:14 +0000
ROA not after: Mon 23 Feb 2026 08:42:14 +0000
asID: 13999
IP address blocks: 201.159.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367706 (0x59c5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Validity
Not Before: Feb 23 08:42:14 2024 GMT
Not After : Feb 23 08:42:14 2026 GMT
Subject: CN=b6cf469f5246a7c643ea5094149731872eac2c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:93:d8:aa:cb:fc:9d:78:45:02:9d:a2:48:
fd:3d:27:94:1c:ce:d7:7b:c7:94:49:00:25:b4:7f:
82:ee:b4:88:9b:6e:b4:89:1e:f9:df:a1:2e:2c:d8:
c7:a7:1f:70:be:22:10:ac:e2:54:38:1b:19:64:37:
c1:2f:fd:20:fd:09:65:22:c4:9d:83:b3:aa:0f:cb:
74:fb:4f:40:0f:0a:e3:9f:a5:81:77:18:48:30:86:
d1:9f:10:d1:da:c7:45:2e:2f:0f:97:a2:e0:79:d4:
ff:e1:ea:c7:f1:76:23:16:c1:ac:d3:81:74:a7:7a:
09:35:fb:93:23:0b:6f:92:41:46:10:ee:a9:35:2a:
d5:a8:82:6b:21:81:3e:1b:0d:64:dd:80:42:d4:c3:
c1:78:5e:a6:74:5b:c2:92:0f:40:a7:e1:ca:45:28:
03:9e:c5:27:95:d7:54:91:ff:09:8a:2f:21:6d:d8:
68:ee:1f:b4:05:15:7e:6c:ea:83:5d:65:20:ec:c8:
af:ba:9f:79:dc:5e:c8:bd:c8:6c:f0:d0:16:38:da:
00:c6:51:ed:de:d6:68:5a:07:a6:fe:19:3b:dc:59:
66:0f:fc:fc:82:d7:80:e2:36:3a:55:fd:a6:69:ad:
80:bf:5a:ca:b0:8e:b2:48:83:7e:28:04:1b:f4:fb:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:52:84:E1:99:C7:61:64:5A:E1:4B:EF:4A:B2:93:8D:E9:7D:FB:3A
X509v3 Authority Key Identifier:
keyid:5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/b6cf469f5246a7c643ea5094149731872eac2c1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8d:ed:10:ac:7f:d0:b2:02:3d:84:ad:9d:5d:e5:be:d0:4b:
21:37:44:25:1b:dd:1e:b7:d2:5c:6e:11:fd:74:51:4d:b0:5b:
92:85:2e:ee:aa:49:70:11:85:06:77:18:22:5d:1f:08:bd:fa:
02:88:af:68:4c:5b:bb:a1:9d:d5:b9:26:9d:90:4a:68:ce:6d:
8d:f8:19:7b:54:1a:8c:50:92:c2:8c:eb:a3:23:c4:71:60:eb:
ef:e8:7b:d9:b1:47:e9:9c:f3:77:72:30:e2:29:01:70:68:ae:
f6:95:38:ff:46:d0:84:56:0a:9b:3a:78:75:5f:db:65:e2:7d:
da:6d:df:ce:75:f6:fd:25:d9:a6:ad:99:eb:20:ff:4c:52:bc:
0b:f1:72:d5:f6:00:ea:ee:ab:eb:73:73:9e:a6:a6:06:87:f0:
35:37:21:8c:28:8f:e6:fd:65:38:04:5d:b6:1d:5f:22:d9:22:
ee:6d:ca:53:47:2d:5a:07:45:26:af:24:d2:d1:ee:ed:34:bd:
44:2d:70:cd:dc:e9:29:86:4a:1d:e6:6b:dd:32:36:9b:1f:62:
db:b5:8a:5c:0c:7f:6d:f8:25:44:df:9d:9d:66:a6:17:1b:ae:
4e:f2:1e:ca:46:71:9d:fc:ca:9a:6f:1a:64:e0:1b:a1:c0:6a:
46:24:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org