Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/aa6cac1e4b13f3d365b6134361d3f1502f667b11.roa
File: aa6cac1e4b13f3d365b6134361d3f1502f667b11.roa (raw, json)
Hash identifier: 8y/SRpel4Qfd3QuUOPSV/RhU4ld4hZD1YAIycrYAIYk=
Subject key identifier: 3F:A6:C2:EA:46:DA:42:53:23:6B:BA:39:EB:98:29:8E:20:FD:20:F3
Certificate issuer: /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial: 0DC72F
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/aa6cac1e4b13f3d365b6134361d3f1502f667b11.roa
Signing time: Wed 24 Mar 2021 14:36:27 +0000
ROA not before: Wed 24 Mar 2021 14:36:26 +0000
ROA not after: Tue 24 Mar 2026 14:36:26 +0000
asID: 52468
IP address blocks: 190.61.58.0/24 maxlen: 24
190.61.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902959 (0xdc72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Validity
Not Before: Mar 24 14:36:26 2021 GMT
Not After : Mar 24 14:36:26 2026 GMT
Subject: CN=aa6cac1e4b13f3d365b6134361d3f1502f667b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:ca:74:ca:ff:bc:10:57:51:54:5f:a8:85:
20:7e:7c:80:cf:7a:c4:cc:69:fb:54:53:b3:f6:66:
af:36:00:8c:58:7d:0a:56:de:0f:a5:8e:fb:da:19:
94:5a:3c:0e:7b:b8:1c:c9:26:44:08:75:a0:2a:f5:
94:f8:ef:b2:0e:fd:20:88:03:f4:df:12:dd:34:55:
92:ef:1d:af:4a:35:9c:f5:0a:60:0d:98:13:c1:f8:
40:24:6f:20:49:b2:02:9a:bc:21:bc:a9:62:d3:d3:
5a:96:84:46:fd:dc:8e:ad:d9:ce:1f:29:37:4c:64:
f0:5c:05:18:46:a9:90:56:51:b6:98:8d:db:06:e2:
b5:5b:8a:dc:87:af:53:03:1b:6b:54:18:3e:67:27:
4d:70:97:d8:d4:15:30:a8:a2:06:9e:5c:9c:80:5e:
6e:a8:2e:22:0c:42:af:d5:6c:1c:a9:58:d8:e6:ca:
14:71:f3:e4:96:ba:e5:d3:c1:15:f6:4f:6f:68:ea:
9d:5a:b8:5e:f0:99:17:96:31:81:96:db:f8:26:8b:
71:df:f9:e6:b4:1c:cc:78:ab:d6:16:47:ae:af:99:
1b:9c:5e:97:fc:d4:0d:d6:09:5c:c2:88:a7:1e:ef:
30:0a:f7:a5:b8:da:dc:24:3b:b8:a6:28:54:2e:72:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:C2:EA:46:DA:42:53:23:6B:BA:39:EB:98:29:8E:20:FD:20:F3
X509v3 Authority Key Identifier:
keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/aa6cac1e4b13f3d365b6134361d3f1502f667b11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.61.58.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:14:63:6e:82:db:fa:86:f5:b1:5f:36:14:63:1d:44:4c:bc:
5f:33:d0:b4:2b:06:13:85:47:81:39:d6:ef:84:43:c0:70:43:
7d:74:70:2f:56:38:b3:41:2a:aa:86:0c:ef:5f:6c:dc:1b:fd:
86:05:32:44:36:5b:dc:62:60:de:09:f9:36:44:1d:50:fc:7b:
d2:f5:3c:a8:f2:f2:b8:24:a5:ca:41:30:b5:5b:11:c7:4b:7f:
a2:50:34:07:0d:b0:e3:cd:be:b7:3c:6d:09:74:bc:a7:b8:64:
a9:77:87:41:af:f4:ca:5a:43:99:ea:55:cc:4e:ad:be:ce:80:
48:b3:66:38:f3:ff:b9:3a:9c:84:10:c9:63:42:0f:99:b6:23:
98:04:d5:71:35:0e:3c:fa:7b:77:b2:30:ce:d8:95:7d:17:35:
8c:8f:e0:17:03:ce:64:f7:20:92:d8:ab:8d:b1:23:1e:b0:3a:
86:47:1c:00:7c:29:31:16:00:54:01:b5:cf:72:61:f6:93:57:
4a:91:d2:2a:f8:46:e7:87:48:ac:68:73:9b:dd:b4:af:fc:84:
74:74:ac:59:0b:c8:63:41:a2:c8:a5:ae:a9:2f:da:43:79:f0:
56:e6:3d:46:df:ae:d4:06:bb:f3:ba:d0:15:69:fd:43:d0:05:
c4:7f:29:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org