Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/a723861e0a161874ff7ca018b1b69639808cc2bd.roa
File: a723861e0a161874ff7ca018b1b69639808cc2bd.roa (raw, json)
Hash identifier: 3tkwPJuMaaTJ87voNcMsOm1up5b4mEtY3UF5JWUAI4M=
Subject key identifier: 7C:A0:16:38:9B:A3:B1:3D:4E:E7:48:B1:46:E7:7C:B2:F6:4C:A6:4E
Certificate issuer: /CN=950b09210530c2a8f9ddac3b8483a9df5c0f7b70
Certificate serial: 186764
Authority key identifier: 83:62:47:EA:DD:C7:74:49:96:54:34:30:B7:65:6D:46:60:84:9C:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/a723861e0a161874ff7ca018b1b69639808cc2bd.roa
Signing time: Thu 11 Jan 2024 18:32:09 +0000
ROA not before: Thu 11 Jan 2024 18:32:08 +0000
ROA not after: Thu 11 Jan 2029 18:32:08 +0000
asID: 3257
IP address blocks: 170.83.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599332 (0x186764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950b09210530c2a8f9ddac3b8483a9df5c0f7b70
Validity
Not Before: Jan 11 18:32:08 2024 GMT
Not After : Jan 11 18:32:08 2029 GMT
Subject: CN=a723861e0a161874ff7ca018b1b69639808cc2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:d2:98:15:8c:77:fe:6b:2f:78:b2:70:33:
ca:5d:2c:e4:72:e7:0c:8d:9f:dc:65:57:b9:ea:f1:
a7:dd:a7:78:d4:d0:60:73:d0:2e:8f:f5:61:ed:70:
b7:f0:bc:9e:ae:0c:89:5f:db:16:bb:0e:5d:ac:35:
3f:9a:a4:95:f8:81:e6:7c:37:5d:d8:e1:fc:fb:65:
7b:17:65:8c:d5:f0:f0:bb:af:9a:80:2e:b4:86:54:
72:76:9c:3a:2b:c0:74:68:7b:42:52:e0:2d:33:ec:
db:f9:a7:22:94:18:ac:62:80:59:ae:43:22:52:b6:
af:ea:a2:da:d4:b3:ee:a3:fd:0d:84:09:7b:a1:91:
40:74:4e:d5:52:4c:0e:29:56:a3:e7:7b:7f:05:91:
6b:f4:ad:67:62:c1:bb:ef:84:20:a8:13:99:58:23:
58:1e:7c:09:a7:d8:a8:92:9c:03:d3:ca:15:f7:f1:
5c:7f:2f:3c:a7:57:dd:90:32:08:a9:72:5a:38:89:
76:dd:6b:77:a1:6f:b3:72:5c:93:e3:f1:e3:20:3d:
79:25:18:4a:fb:4a:42:48:42:3f:91:7b:2f:51:fa:
b0:73:3c:54:85:e9:59:9b:b8:53:5c:e9:8f:d1:f0:
38:0c:86:da:1b:80:49:e0:f4:e0:e6:12:8d:2f:ad:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A0:16:38:9B:A3:B1:3D:4E:E7:48:B1:46:E7:7C:B2:F6:4C:A6:4E
X509v3 Authority Key Identifier:
keyid:83:62:47:EA:DD:C7:74:49:96:54:34:30:B7:65:6D:46:60:84:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/a723861e0a161874ff7ca018b1b69639808cc2bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:7a:1e:c3:82:34:76:76:9e:2f:2f:66:5d:2c:8a:48:60:23:
ac:a4:a4:f6:a5:46:ba:b7:a8:cc:99:59:63:c9:74:70:a5:3e:
97:8c:61:e2:77:ba:24:e4:3c:ae:77:8b:66:d3:ab:ca:2b:5b:
54:90:6b:e6:0c:5b:29:d0:d8:3e:5b:14:06:34:6f:8e:26:4f:
cf:88:44:37:93:0d:1d:9b:9a:7a:43:ae:14:c5:51:f9:1c:c6:
4b:5d:85:f8:3f:35:eb:07:0f:dc:4a:c5:ed:1c:3b:82:35:99:
ac:ac:23:6d:d3:f6:6d:c5:8b:e5:18:0f:fe:53:67:a3:6f:f8:
ef:48:db:38:d2:4c:a1:82:1f:a6:98:91:e0:49:b6:94:2b:3d:
a0:7d:1a:ed:18:dd:64:a6:69:ef:6e:40:9d:9a:56:7c:68:24:
50:12:2f:63:5f:3a:68:ce:3b:6b:d7:84:40:e0:47:85:92:65:
52:ee:9a:01:f6:a4:e3:e9:6d:06:5a:15:03:ae:e7:30:45:3d:
72:96:31:67:cb:01:5c:c5:a1:89:15:25:cb:37:a1:15:8b:22:
33:a0:33:59:76:89:d8:a7:38:3e:6d:7b:06:4e:ae:16:11:60:
d8:26:d3:b6:67:a4:b4:88:ff:9f:b2:1a:e3:f4:26:16:1f:f1:
1f:c5:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org