Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/431d4383e8c4ef2a2889509cc1571ef254054b81.roa
File: 431d4383e8c4ef2a2889509cc1571ef254054b81.roa (raw, json)
Hash identifier: 9u+6HA4Jr+w52MME5aoGCmn6L6r/Sa5Xpert51u3bhU=
Subject key identifier: 4E:43:73:49:A7:94:23:9E:37:6B:30:39:03:E5:41:F5:D2:F2:98:96
Certificate issuer: /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial: 15CE17
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/431d4383e8c4ef2a2889509cc1571ef254054b81.roa
Signing time: Fri 14 Apr 2023 13:56:51 +0000
ROA not before: Thu 13 Apr 2023 13:56:16 +0000
ROA not after: Mon 14 Apr 2025 13:56:16 +0000
asID: 265639
IP address blocks: 170.246.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1429015 (0x15ce17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Validity
Not Before: Apr 13 13:56:16 2023 GMT
Not After : Apr 14 13:56:16 2025 GMT
Subject: CN=431d4383e8c4ef2a2889509cc1571ef254054b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:41:22:6f:f4:26:09:77:b2:ea:01:9e:d5:
f4:d9:39:f0:56:82:25:20:c1:e4:25:33:92:8e:87:
16:87:a2:83:4c:6e:19:ba:e8:18:70:cb:01:27:06:
58:08:8d:bb:5b:48:3e:26:1e:72:7c:27:9f:f9:c0:
1f:4e:42:98:51:41:b3:33:ac:67:db:97:3e:f5:72:
65:95:46:32:e0:9c:a6:27:e7:25:62:cb:ce:ca:cf:
8f:ae:a8:87:c8:8d:43:e5:b7:d3:75:a4:77:78:ea:
81:f7:65:2d:62:41:1e:1d:73:12:0d:af:42:1d:6a:
da:e2:e3:3e:a5:e4:59:96:3e:14:9d:c6:ce:f0:e9:
5f:c8:f6:25:f4:ac:8e:1e:44:fa:ef:48:c7:57:83:
7a:35:31:19:2e:3f:ad:70:1c:f3:f2:68:58:f0:d1:
06:bb:1f:4f:06:6a:d9:3a:60:1a:4f:ae:97:46:78:
2c:d7:8e:06:61:41:be:63:b9:1f:10:ae:99:76:8c:
ac:e0:58:78:3b:94:4c:3f:48:e8:a0:6f:20:e8:9a:
2a:79:7b:18:64:cd:4b:7e:08:cb:d6:89:8b:ed:c7:
8e:c2:c0:6d:80:be:65:0e:27:98:96:47:00:4f:50:
37:b0:16:2a:e7:e3:34:26:cd:26:dc:30:12:d3:61:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:73:49:A7:94:23:9E:37:6B:30:39:03:E5:41:F5:D2:F2:98:96
X509v3 Authority Key Identifier:
keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/431d4383e8c4ef2a2889509cc1571ef254054b81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.89.0/24
Signature Algorithm: sha256WithRSAEncryption
63:37:90:84:97:d3:f9:80:c0:63:29:38:38:4b:02:35:64:73:
20:a1:e5:09:36:fe:21:95:af:b1:af:ea:df:9d:37:ee:81:da:
f4:18:e8:b9:33:b6:06:3d:d9:a6:15:e5:e7:2c:25:b9:c9:32:
ee:5d:36:eb:f7:23:df:c6:d6:ca:7b:4c:8b:c1:fb:66:47:5c:
c4:d5:a0:de:83:31:0d:0d:46:5e:67:bc:ae:6b:72:e1:b3:d5:
86:57:ee:a8:c7:5b:7c:b3:76:ff:fb:9c:12:fe:2d:d6:74:c5:
99:b8:2f:51:e4:3c:27:42:cd:f6:b1:02:ef:01:9e:cd:51:f2:
07:8b:fd:cc:3f:ee:96:51:eb:13:ce:bf:3f:8e:6c:0e:d7:16:
9a:44:a6:a9:46:57:9a:f6:0f:ab:fd:d8:06:9c:e2:83:e8:40:
6b:52:f3:67:56:4b:59:3c:57:83:77:30:dc:96:cc:11:00:91:
ea:22:0a:d4:1b:27:60:21:ac:09:97:aa:69:90:f4:4a:53:34:
60:fe:1a:5d:23:1c:da:b3:c2:9c:80:36:3d:f3:60:b2:57:15:
2b:62:e4:16:42:c4:cf:06:03:e5:5e:dd:f7:9e:0a:17:d3:6d:
90:94:d7:8d:d5:85:50:d2:47:76:a4:cc:cc:b6:60:1d:b0:04:
d4:8f:1f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org