Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/67bb2fe18e38d02744d444c54df77a6ff347cba1.roa
File: 67bb2fe18e38d02744d444c54df77a6ff347cba1.roa (raw, json)
Hash identifier: Rip3BUQI4OOzI7nTuKAYgKoQqZTqWuJgZjXZ8lRZync=
Subject key identifier: 60:14:24:BB:06:51:6B:4B:2B:F1:58:38:40:0F:A6:95:F8:94:E0:2E
Certificate issuer: /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial: 15D30F
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/67bb2fe18e38d02744d444c54df77a6ff347cba1.roa
Signing time: Fri 14 Apr 2023 13:57:24 +0000
ROA not before: Thu 13 Apr 2023 13:56:53 +0000
ROA not after: Mon 14 Apr 2025 13:56:53 +0000
asID: 265639
IP address blocks: 170.246.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1430287 (0x15d30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Validity
Not Before: Apr 13 13:56:53 2023 GMT
Not After : Apr 14 13:56:53 2025 GMT
Subject: CN=67bb2fe18e38d02744d444c54df77a6ff347cba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a5:5f:ea:d0:cd:ca:33:56:be:0d:64:48:2a:
42:2f:a6:b6:c5:ec:73:6a:14:f1:0e:b7:2e:b3:b2:
42:a0:d0:30:59:f0:64:55:de:47:6f:c3:a3:3c:f5:
36:4f:61:9e:61:db:50:62:76:55:53:0c:0b:98:fd:
24:f2:39:b2:c9:77:0b:d5:67:51:31:76:cb:1a:db:
4d:c0:aa:05:10:31:50:3d:c7:f7:68:76:0d:31:24:
33:85:b0:7e:f0:e8:cd:79:9d:6b:91:dc:48:7a:04:
74:4e:ea:90:56:3e:3d:b3:b3:87:8f:29:ee:20:09:
83:9b:61:bc:f5:95:89:ba:86:b1:bc:15:3b:29:f0:
fe:a6:34:aa:a0:f0:54:f6:b8:57:2a:d9:e4:42:c8:
68:f0:cc:7a:86:91:91:7e:14:4d:f0:1d:3d:b4:93:
35:75:bb:2a:82:fb:2e:d5:11:c9:82:fc:89:54:b9:
86:f9:69:f0:6d:cc:ac:5e:0e:2a:ce:14:16:61:b3:
79:5c:05:c9:a4:e7:4f:08:06:dc:4d:db:a9:3a:0b:
0b:ae:44:cf:c1:d6:2c:bb:07:1d:36:b0:96:ca:27:
9d:1a:d8:b8:03:14:42:fd:f8:31:62:1e:f0:05:4d:
f3:28:fb:78:3a:f6:6e:78:c5:6b:ae:4f:12:b2:70:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:14:24:BB:06:51:6B:4B:2B:F1:58:38:40:0F:A6:95:F8:94:E0:2E
X509v3 Authority Key Identifier:
keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/67bb2fe18e38d02744d444c54df77a6ff347cba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.90.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:2d:16:51:41:99:2b:f8:8a:77:ec:4f:d3:7f:45:6a:ed:cc:
ff:08:51:47:44:c5:45:b9:d5:f5:16:1a:71:c0:3b:cf:b7:a9:
9a:26:6b:36:ab:df:28:e1:27:b5:24:b0:c2:9f:8d:ce:1b:b5:
4e:a6:44:e2:53:fd:dc:cb:56:ac:ba:bf:e1:ed:6e:cc:9e:6d:
84:8c:52:8f:a6:f4:89:82:1d:df:99:8f:79:dd:4d:05:2e:24:
41:fc:79:61:09:ff:54:b6:b4:b5:56:ba:2a:8b:8a:97:7f:05:
fc:26:31:96:3f:2f:2f:e2:6c:9a:68:0f:fa:af:5a:17:ca:7c:
25:89:48:85:36:51:6d:ea:a0:27:bf:b6:6b:87:93:de:89:03:
d9:43:5c:ac:e1:5e:c1:08:d2:41:f8:9d:17:0f:6e:23:8a:88:
aa:1c:71:dd:7c:11:91:68:81:40:03:e7:48:c1:f3:61:5d:1d:
1a:0b:16:1d:a2:6f:40:04:53:2c:cd:20:85:a8:0c:be:dc:ce:
03:69:70:2f:d5:f1:98:2e:c6:e3:90:d0:33:ba:70:c5:15:2b:
b2:5a:02:03:7e:8b:fa:3d:d6:b2:47:68:4b:b5:09:b5:44:cc:
69:ab:2e:b5:0c:b0:28:7a:7f:96:44:c3:61:33:83:49:a2:d3:
43:63:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org