Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/d1cd914da0e1a47f93d59666542cbbd2123175ae.roa
File: d1cd914da0e1a47f93d59666542cbbd2123175ae.roa (raw, json)
Hash identifier: l3trE1bhEmrA6oJwhsJPRWeF6k+EBx/8dqItp9JE5qA=
Subject key identifier: 7A:9C:D6:7D:04:83:1F:8B:66:2F:91:79:9E:89:9D:DD:A9:1A:CF:E8
Certificate issuer: /CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Certificate serial: 184BE7
Authority key identifier: 7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/d1cd914da0e1a47f93d59666542cbbd2123175ae.roa
Signing time: Thu 11 Jan 2024 18:06:06 +0000
ROA not before: Thu 11 Jan 2024 18:06:06 +0000
ROA not after: Sun 11 Jan 2026 18:06:06 +0000
asID: 397044
IP address blocks: 170.231.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592295 (0x184be7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Validity
Not Before: Jan 11 18:06:06 2024 GMT
Not After : Jan 11 18:06:06 2026 GMT
Subject: CN=d1cd914da0e1a47f93d59666542cbbd2123175ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ca:2a:7b:d4:de:b5:e4:da:6f:ec:66:e6:cc:
4b:bf:60:1a:06:86:eb:8d:36:6d:18:bd:79:4c:4c:
38:d8:ea:96:7b:da:53:4b:8c:c8:16:e0:e2:a0:a2:
77:86:1b:1d:a3:ba:bb:5f:2a:04:41:3b:a7:2e:8e:
00:10:94:54:32:22:ec:8f:f8:3a:3b:98:14:98:a7:
be:22:ac:b8:9f:c7:65:5e:19:23:02:d9:84:4e:02:
77:4e:21:4b:a9:45:f4:cf:45:60:85:69:9b:8c:33:
49:10:e8:fa:47:ad:b0:7f:6e:d8:73:1a:e5:64:15:
f4:af:88:d7:8a:09:5b:2c:ad:c6:f8:70:49:2c:11:
c6:ac:81:c7:2f:72:f7:48:62:84:9a:43:25:0f:68:
4f:5b:9c:3d:f0:72:6d:d1:5d:4b:bb:08:4f:19:78:
31:33:d7:67:a0:60:58:87:a9:6b:03:f6:2d:b2:07:
dd:c2:b7:ad:1e:a6:2d:a6:2f:d8:96:be:50:ac:08:
92:8b:2c:88:67:6c:bf:93:4f:3c:6b:1d:4a:a9:1f:
68:7e:e3:08:4a:8d:3e:b9:f9:49:69:68:c8:0a:0d:
d6:b5:f2:cd:16:11:27:e4:5b:67:7d:af:01:7f:e3:
c4:16:b9:15:64:07:14:01:e1:68:0b:fd:e1:70:74:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9C:D6:7D:04:83:1F:8B:66:2F:91:79:9E:89:9D:DD:A9:1A:CF:E8
X509v3 Authority Key Identifier:
keyid:7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/d1cd914da0e1a47f93d59666542cbbd2123175ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/569d9c53d2d7a2dabbb573b437a4edbd78719117.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.248.0/22
Signature Algorithm: sha256WithRSAEncryption
52:37:b2:99:b3:1f:e0:ca:e6:30:8b:77:9f:e6:da:33:e7:25:
fa:cc:ad:ea:d4:8b:1f:30:35:84:27:2c:96:a4:8e:88:2a:1c:
53:54:9d:b0:f3:22:37:cb:3f:f6:75:e3:f7:71:05:27:b2:dd:
db:e4:60:3a:ca:3f:8a:f2:e6:26:0d:2f:98:71:02:58:1f:96:
ce:d4:76:81:43:1a:9c:64:d9:51:b2:18:63:73:4b:0b:bf:f8:
9f:52:eb:f9:2e:0c:f9:a9:a1:08:2d:d0:80:b2:61:cb:c6:1f:
b7:02:83:13:b5:12:91:b5:a6:66:ac:ed:0f:48:26:bf:fa:a5:
95:b6:7d:fe:b0:ea:ec:0b:03:f9:77:d0:a3:2e:b7:e8:bc:fd:
4f:76:c7:94:3d:16:58:91:cf:04:3b:d2:91:aa:cb:d8:95:bb:
cd:ae:b3:28:cc:1e:a6:f7:fe:2c:ed:b1:24:70:59:2e:bf:78:
16:e5:bb:94:9c:a5:98:ef:80:12:13:9b:28:00:56:19:4a:e4:
c1:56:29:bb:5a:fb:bf:07:b6:e1:23:ba:73:c8:57:a1:10:78:
ad:56:68:f7:f2:a8:41:76:b3:b7:a6:d2:c0:45:76:01:73:87:
46:4f:d7:fa:2b:92:f6:87:2b:bf:94:bf:10:a5:bb:92:7a:a5:
8b:83:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 23:51:21 2024 by rpki-client on console-fra.rpki-client.org