Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/9a295f2d27d5ca943745cfa4a5ba1340675152bc.roa
File: 9a295f2d27d5ca943745cfa4a5ba1340675152bc.roa (raw, json)
Hash identifier: 0CvifqUjnGNPudYCg6zpV7AGSwmF/4g+vE/cpvMCOt0=
Subject key identifier: 4E:21:7E:CB:86:9E:2F:1E:9C:DC:0E:A8:88:65:2A:E8:33:2D:71:81
Certificate issuer: /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial: 037D4C
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/9a295f2d27d5ca943745cfa4a5ba1340675152bc.roa
Signing time: Wed 24 Mar 2021 14:31:02 +0000
ROA not before: Wed 24 Mar 2021 14:31:02 +0000
ROA not after: Tue 24 Mar 2026 14:31:02 +0000
asID: 265639
IP address blocks: 170.246.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228684 (0x37d4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Validity
Not Before: Mar 24 14:31:02 2021 GMT
Not After : Mar 24 14:31:02 2026 GMT
Subject: CN=9a295f2d27d5ca943745cfa4a5ba1340675152bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:39:dc:2c:33:9b:89:95:cf:e6:e2:30:c6:
ea:2a:0f:61:3d:68:d7:e7:18:df:5b:1d:a3:ce:56:
f1:97:90:0f:a8:b1:6e:5c:38:23:b5:2e:40:66:bc:
ce:09:c5:42:39:6b:69:68:a7:58:a0:6c:28:e8:b1:
29:ae:69:ad:78:f0:f2:ff:0f:a7:e9:e8:8c:25:63:
12:99:f2:d8:79:6f:9b:f2:c2:18:15:e8:b0:82:55:
1b:cc:0b:c6:2c:8a:7e:04:89:ef:c4:70:a9:6b:36:
c5:25:64:f6:04:c2:b3:76:93:2c:4c:c5:a2:79:79:
03:f0:8f:6d:6c:b8:8e:5b:17:6a:16:49:3c:a6:f0:
f7:66:b2:01:0c:c9:cc:d1:ce:a7:da:c0:bd:71:5d:
e0:96:5f:40:53:1f:13:eb:c0:82:0e:5f:ca:e6:b9:
95:83:de:b1:60:5b:89:af:e6:0c:e9:d5:7c:86:f1:
1f:37:20:51:ee:dc:fe:af:ce:14:21:94:ff:01:6d:
da:25:fc:f1:e6:d3:bb:d8:fb:cc:32:48:ea:4c:95:
28:e1:d2:aa:e3:00:bb:81:b7:59:fe:e9:46:9d:6e:
e6:45:44:91:06:28:24:44:9b:90:56:b8:61:c8:eb:
07:eb:21:fe:17:93:a8:a7:e8:d2:72:60:f2:0d:c1:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:21:7E:CB:86:9E:2F:1E:9C:DC:0E:A8:88:65:2A:E8:33:2D:71:81
X509v3 Authority Key Identifier:
keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/9a295f2d27d5ca943745cfa4a5ba1340675152bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.88.0/22
Signature Algorithm: sha256WithRSAEncryption
56:2e:e3:a8:cf:0c:6b:d6:38:4c:68:3d:8e:4d:88:0b:87:d8:
61:a8:85:87:59:39:e9:94:ec:02:3d:e3:d6:43:b7:1c:d6:16:
d4:23:2d:fe:4e:d2:b6:6f:89:6b:8d:93:54:ad:d0:3c:b4:67:
8b:c9:28:0e:e5:eb:9c:f7:4c:59:c1:02:0f:26:c3:4f:9c:1e:
cd:68:db:e6:ec:76:19:b0:60:50:1d:2e:87:79:79:cd:07:84:
b2:de:9e:0d:04:ba:be:7a:05:55:dc:44:7b:1b:17:2c:30:3b:
3a:f9:c3:8d:ef:2b:91:a8:49:d2:f0:da:c3:84:2c:75:ea:a9:
8f:16:ab:1a:52:ad:3f:df:e7:94:22:66:82:5d:77:3a:03:08:
e8:7a:db:ef:03:af:23:0f:fb:9a:a8:ca:f5:6a:2f:1a:31:76:
d4:c0:f3:b4:9c:eb:30:ae:cf:4a:43:bb:0c:5f:9d:19:59:47:
93:02:16:30:bb:35:34:21:08:97:16:7e:ed:ba:09:1f:e7:6c:
7f:bf:98:6a:07:fc:39:ac:3b:32:f3:8d:de:cc:65:a1:fd:f1:
bb:17:62:63:09:a3:34:d6:33:c9:e8:66:85:6a:8f:02:13:53:
ac:68:79:17:61:ae:71:ed:2e:0d:54:1c:17:f1:41:a3:bc:28:
b6:48:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org