Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/8405c70969bb2a43e0b22e5c2a23d1beabd7a528.roa
File: 8405c70969bb2a43e0b22e5c2a23d1beabd7a528.roa (raw, json)
Hash identifier: tBNY2QPXlm0d0RftfL3wl3IuUINPMiDtFFskF0YVhWE=
Subject key identifier: 7D:15:51:8A:DA:55:6A:DB:6E:55:B1:ED:D1:F3:DF:C7:5E:50:9D:F5
Certificate issuer: /CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Certificate serial: 184EE8
Authority key identifier: 7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/8405c70969bb2a43e0b22e5c2a23d1beabd7a528.roa
Signing time: Thu 11 Jan 2024 18:06:07 +0000
ROA not before: Thu 11 Jan 2024 18:06:06 +0000
ROA not after: Sun 11 Jan 2026 18:06:06 +0000
asID: 264658
IP address blocks: 167.250.212.0/22 maxlen: 22
2803:4540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593064 (0x184ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Validity
Not Before: Jan 11 18:06:06 2024 GMT
Not After : Jan 11 18:06:06 2026 GMT
Subject: CN=8405c70969bb2a43e0b22e5c2a23d1beabd7a528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:a6:07:c4:f3:ac:c4:57:12:0d:df:95:f3:
c6:93:63:c1:fe:25:12:55:72:c3:5b:e0:6f:ec:ed:
8f:c9:bb:66:dc:77:20:f8:33:a4:fe:8f:bb:37:a6:
72:f8:57:fe:a1:8d:3c:78:82:cb:35:0e:5a:11:d8:
e5:9a:a7:ea:53:13:8e:53:79:9b:57:51:72:67:b3:
e0:53:db:d3:57:b7:92:7a:d3:18:59:ae:9e:83:c0:
d3:db:60:78:12:88:d6:01:3d:a9:83:61:0a:49:ed:
ef:52:19:18:e4:be:6b:8a:4b:24:f1:22:55:da:4f:
f6:6b:b1:4f:b5:9f:72:bb:b0:01:fa:74:73:3f:f2:
3f:cf:ef:d7:20:ef:f3:91:f2:99:f1:06:e5:f0:0d:
75:70:92:d2:6e:9c:56:1c:83:ad:5c:fe:47:f3:c3:
3a:d5:a7:33:14:7b:df:4a:22:67:5a:37:59:ee:2a:
7a:58:b8:06:1b:35:57:e0:08:3b:b6:83:c2:28:3b:
65:e3:2c:61:0a:a8:12:f0:ca:5f:5d:a7:c7:aa:d2:
26:a2:32:f5:7c:70:57:af:df:76:00:51:66:1a:f3:
4e:4c:ce:5e:4d:d0:e3:69:ea:70:79:ae:77:8c:e0:
41:e5:02:73:8c:4d:05:4b:e3:62:a2:17:ed:1e:c4:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:15:51:8A:DA:55:6A:DB:6E:55:B1:ED:D1:F3:DF:C7:5E:50:9D:F5
X509v3 Authority Key Identifier:
keyid:7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/8405c70969bb2a43e0b22e5c2a23d1beabd7a528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/569d9c53d2d7a2dabbb573b437a4edbd78719117.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.212.0/22
IPv6:
2803:4540::/32
Signature Algorithm: sha256WithRSAEncryption
5a:62:2a:93:f9:00:89:c8:23:cd:4e:af:4e:87:6b:31:db:52:
22:44:41:7b:5c:0c:6a:c7:6c:1a:98:f2:46:c9:a9:26:94:af:
e4:1e:80:23:6b:eb:72:eb:c0:a9:08:3e:7c:b5:a2:a4:de:7f:
d9:85:4e:7d:1c:1b:64:ac:37:25:42:11:86:a5:42:b3:3d:b5:
68:3e:6a:83:35:2e:d0:83:1c:e4:e9:89:bf:c5:14:ab:fe:74:
4b:22:7a:77:62:60:7f:a3:dd:3f:9d:f8:45:27:5e:48:d4:67:
4c:25:72:d8:1c:4b:f6:10:53:c6:08:37:48:af:eb:65:42:c2:
5c:ba:a9:be:2a:52:67:98:57:b7:e8:c3:5a:de:78:56:c2:98:
91:cc:59:41:c4:af:19:84:4b:42:1e:13:7d:bb:e9:95:12:dd:
0f:e7:21:c8:a1:33:4a:d6:7d:40:63:e1:1a:6a:bc:1f:86:dc:
6a:93:db:10:0a:94:45:36:43:80:68:3e:34:2d:f3:b3:ca:a9:
16:8a:0f:05:ab:dc:85:d0:7e:94:d4:f7:46:bd:af:92:00:4b:
a3:d6:b5:0c:8c:ed:78:97:4e:8a:aa:4a:73:1c:70:aa:e2:d6:
05:f8:19:a9:2a:c9:3d:c7:d4:51:d5:ed:48:2c:27:b7:5d:22:
37:5b:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org