Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/622ab8cfb770de9f64d4c600a5a1db84d86503e9.roa
File: 622ab8cfb770de9f64d4c600a5a1db84d86503e9.roa (raw, json)
Hash identifier: MNO21fjSH12FISlvnfURLykmIgYcnFG4Hm5WdLzZnKQ=
Subject key identifier: C9:76:A6:85:97:42:54:8C:06:2A:B8:34:53:CA:C9:6B:44:1F:90:D9
Certificate issuer: /CN=6ce6d1bf69eb5ad45d04c6d15358e247afe93e94
Certificate serial: 19B76F
Authority key identifier: 37:4C:48:A5:20:C7:96:45:BB:F3:AE:DD:90:EE:75:95:DE:00:36:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ce6d1bf69eb5ad45d04c6d15358e247afe93e94.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/622ab8cfb770de9f64d4c600a5a1db84d86503e9.roa
Signing time: Fri 24 Mar 2023 08:32:27 +0000
ROA not before: Thu 23 Mar 2023 08:32:27 +0000
ROA not after: Sat 22 Mar 2025 08:32:27 +0000
asID: 265786
IP address blocks: 192.141.148.0/24 maxlen: 24
192.141.149.0/24 maxlen: 24
192.141.150.0/24 maxlen: 24
192.141.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1685359 (0x19b76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce6d1bf69eb5ad45d04c6d15358e247afe93e94
Validity
Not Before: Mar 23 08:32:27 2023 GMT
Not After : Mar 22 08:32:27 2025 GMT
Subject: CN=622ab8cfb770de9f64d4c600a5a1db84d86503e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:7c:5d:b3:29:55:12:fa:93:d3:d5:50:46:
3b:9e:49:b7:1f:4f:88:92:36:cf:95:12:a7:7e:28:
ab:81:63:31:99:bc:90:9e:ca:5a:33:9b:61:9f:49:
c4:22:8b:96:db:b6:49:cf:4e:8c:f7:ab:71:cc:13:
85:ba:07:cd:70:86:f9:b9:7e:2c:1f:e4:a0:67:ce:
f0:e4:5e:9c:b9:96:db:bb:09:f9:3a:ff:e8:b5:54:
9a:ca:ed:65:f4:55:fa:0e:b1:76:90:5f:1b:a6:c2:
72:87:fb:0f:2e:2f:7a:c7:b8:5f:c6:11:e3:1f:a8:
53:d9:0d:f5:58:ea:d3:26:e9:37:d0:45:dd:54:bf:
f3:38:d5:a5:43:7c:18:a4:0c:2b:59:5b:56:cb:b3:
bd:19:69:38:f5:2f:bd:9a:25:eb:0f:7a:51:3f:10:
c9:00:8f:56:e5:60:ad:2a:cb:49:51:5e:e0:ba:11:
ec:19:31:d5:1b:b9:29:28:62:b7:ef:b5:18:c8:fc:
b4:4d:41:49:fb:98:82:a4:54:cd:0b:c5:29:93:e8:
4f:e2:80:22:c4:ed:ea:f5:ac:23:e9:c3:12:be:89:
d5:7d:75:22:46:c8:e1:b7:69:3c:38:8f:58:18:4a:
27:85:c2:ab:bf:cc:54:31:1e:a5:18:dc:f0:e0:04:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:76:A6:85:97:42:54:8C:06:2A:B8:34:53:CA:C9:6B:44:1F:90:D9
X509v3 Authority Key Identifier:
keyid:37:4C:48:A5:20:C7:96:45:BB:F3:AE:DD:90:EE:75:95:DE:00:36:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ce6d1bf69eb5ad45d04c6d15358e247afe93e94.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/622ab8cfb770de9f64d4c600a5a1db84d86503e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/6ce6d1bf69eb5ad45d04c6d15358e247afe93e94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.148.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:7e:80:4e:59:51:be:a9:d6:cf:87:29:61:cb:9d:a1:7c:3d:
ff:4b:9c:40:e0:eb:c2:ff:ce:d1:30:24:f1:9e:68:72:cf:ef:
d1:f5:b7:19:d2:23:cf:56:3d:77:bc:f0:a4:21:fa:f1:fd:22:
ac:a4:a0:6b:0c:6f:8e:64:5a:70:8f:4c:45:0f:a0:5f:9a:3f:
8a:7d:4e:bc:e2:55:89:0d:42:b6:53:08:34:1f:60:49:97:04:
89:1a:bb:47:09:20:f8:8b:4e:59:b9:38:6d:93:8d:1c:1e:9d:
c1:80:6f:7c:5f:eb:47:f6:50:6a:e8:9e:b0:ed:e5:c3:94:e9:
b2:f4:1a:14:21:2e:69:e0:39:c0:e9:4f:dc:fc:d9:56:1d:1f:
09:7b:1a:cc:7e:0e:a6:8f:1f:58:c6:80:a4:fb:55:b9:eb:67:
fc:b2:60:72:67:f3:79:26:93:d1:2e:0c:77:be:bf:1e:d2:2a:
f8:16:87:8c:c2:f6:07:d0:2b:34:42:9f:8d:5f:fc:37:77:2f:
77:4b:e4:08:50:ea:01:45:61:61:3e:b5:39:25:c2:5e:b6:39:
7b:28:d8:34:19:83:70:1b:11:f1:b6:6b:6b:49:ee:6c:d2:9b:
4c:8c:18:72:22:70:2c:a1:f2:94:45:fa:05:cc:2c:33:eb:ef:
ca:6f:29:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org