Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/1d9e8127a4f322d4116edfa6c40b916eb343ef3b.roa
File: 1d9e8127a4f322d4116edfa6c40b916eb343ef3b.roa (raw, json)
Hash identifier: JTFL6YwATi1mmVTjeLGzlHvCCLrP/29GdpwCI+vfutI=
Subject key identifier: C1:23:44:04:F1:87:E3:B7:75:9E:5C:8F:73:90:AD:0D:30:01:59:89
Certificate issuer: /CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
Certificate serial: 28FDEB
Authority key identifier: 7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/1d9e8127a4f322d4116edfa6c40b916eb343ef3b.roa
Signing time: Thu 29 Feb 2024 01:31:50 +0000
ROA not before: Thu 29 Feb 2024 01:31:39 +0000
ROA not after: Thu 01 Mar 2029 01:31:39 +0000
asID: 61468
IP address blocks: 201.159.220.0/22 maxlen: 24
190.15.128.0/20 maxlen: 24
143.255.248.0/22 maxlen: 24
2800:68::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2686443 (0x28fdeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
Validity
Not Before: Feb 29 01:31:39 2024 GMT
Not After : Mar 1 01:31:39 2029 GMT
Subject: CN=1d9e8127a4f322d4116edfa6c40b916eb343ef3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:89:af:4b:fa:ec:b2:54:00:37:5f:cc:92:
5c:f6:37:5f:ca:3b:2b:48:46:bd:f0:1c:6c:b5:2f:
55:70:b7:61:3f:3e:68:76:3c:34:b4:75:12:08:37:
58:c3:42:de:af:8a:07:c4:81:0a:8e:f2:30:87:44:
ad:f4:ee:96:0e:3d:98:dd:a0:17:7d:0e:bf:f6:8f:
53:2a:31:66:40:6e:99:f3:fb:33:06:42:5e:95:a2:
1e:eb:ac:cc:84:3e:aa:51:5a:28:26:2c:60:9d:5d:
28:f9:8d:4c:70:34:61:77:68:61:91:de:d0:96:8e:
cd:c8:3b:3a:4e:44:2a:cf:d4:c5:88:8e:cb:bb:37:
2a:fc:9e:43:bd:78:4a:12:84:af:0d:df:22:b3:3a:
5c:8f:bd:08:ef:13:25:ed:c9:5f:89:27:85:08:f8:
2f:f7:bd:36:e3:4a:4b:53:e6:89:62:a1:47:b2:fc:
b5:49:e0:8e:39:b0:e9:c1:6b:2c:f7:c2:0a:5f:02:
f4:88:92:73:4b:94:97:76:dd:e5:21:cd:ed:3b:6a:
c8:42:11:3a:70:38:c0:d4:c7:ee:64:24:af:45:ec:
41:22:9c:ea:73:53:8d:e0:9d:52:4e:b2:3e:10:89:
e8:70:39:58:7f:43:98:c5:64:94:0e:30:72:6f:07:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:44:04:F1:87:E3:B7:75:9E:5C:8F:73:90:AD:0D:30:01:59:89
X509v3 Authority Key Identifier:
keyid:7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/1d9e8127a4f322d4116edfa6c40b916eb343ef3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.248.0/22
190.15.128.0/20
201.159.220.0/22
IPv6:
2800:68::/32
Signature Algorithm: sha256WithRSAEncryption
81:e8:f7:69:b7:ae:a4:2d:ab:ba:d5:c7:51:27:12:d5:59:15:
ec:b0:8e:0e:24:6c:63:f7:f0:2f:fa:5c:5c:3f:dd:ef:92:dc:
a8:57:da:3e:13:fe:36:92:1c:24:82:40:40:c7:26:84:54:27:
84:7b:9f:92:24:c1:ba:ac:ab:ba:d9:ad:8d:3b:6a:3e:6d:43:
51:82:0f:77:38:76:7a:2d:01:f1:03:8a:0a:4b:76:f8:96:f7:
94:29:f0:ee:42:2d:dc:bc:94:68:c7:f5:03:89:87:3b:e3:00:
d2:45:14:f7:24:3d:81:a1:22:48:bc:b8:c4:86:a3:a4:0c:ba:
19:7a:7e:bc:19:4b:49:74:46:87:dc:04:07:64:e8:5e:79:ba:
44:79:52:ae:a6:68:85:7b:c4:86:20:86:d7:31:a5:e6:cb:a0:
55:1e:62:fc:d2:06:f2:e2:80:c3:b9:73:68:00:40:11:64:10:
f2:66:3b:3d:26:f1:af:b4:e0:69:8b:01:f2:91:26:ce:c2:a1:
f6:1a:82:18:12:19:47:ac:60:dc:46:56:2e:72:c2:83:15:d6:
b4:44:48:4c:8e:fe:e8:31:cb:68:48:c4:e8:4b:ab:c9:3a:89:
d2:92:ac:a3:2c:3b:ac:3f:a6:c8:bc:39:39:d1:bf:85:b3:e6:
00:57:d3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org