Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/1487a9cb3abb7489bd7b397fe7cd7966e7177f21.roa
File: 1487a9cb3abb7489bd7b397fe7cd7966e7177f21.roa (raw, json)
Hash identifier: iJY2o6NoRQ1sYbs5xWuENtzcA0b6+6BVexbLYm+l+Tg=
Subject key identifier: E5:06:71:6F:11:A8:C8:3A:DD:09:4D:25:BC:06:BB:C7:65:60:E5:66
Certificate issuer: /CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Certificate serial: 1F2815
Authority key identifier: E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/1487a9cb3abb7489bd7b397fe7cd7966e7177f21.roa
Signing time: Tue 06 Feb 2024 19:16:42 +0000
ROA not before: Tue 06 Feb 2024 19:16:42 +0000
ROA not after: Fri 06 Feb 2026 19:16:42 +0000
asID: 27775
IP address blocks: 200.7.148.0/22 maxlen: 24
168.121.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041877 (0x1f2815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Validity
Not Before: Feb 6 19:16:42 2024 GMT
Not After : Feb 6 19:16:42 2026 GMT
Subject: CN=1487a9cb3abb7489bd7b397fe7cd7966e7177f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:84:3a:16:75:6b:ef:54:ab:f5:f3:e7:5e:
0c:0d:d1:55:bf:0a:59:c1:a0:82:8a:68:56:51:72:
0f:5f:57:1b:06:3e:28:24:15:5d:44:f3:95:96:01:
63:62:eb:ec:5c:94:e1:f7:1b:f7:76:67:6b:8d:41:
73:4e:f8:af:b5:bd:aa:ce:28:ce:10:3a:a4:29:b2:
7f:98:30:d7:46:7b:4b:1a:0b:f2:1f:1f:df:b6:ad:
f9:08:dc:0c:07:8d:22:86:8f:6f:fb:6e:d2:a8:66:
8e:77:6a:10:10:a5:e5:66:f0:22:61:a8:c9:53:80:
0a:7d:e0:30:3f:bd:90:f9:7f:4f:e5:e6:c1:69:56:
98:bc:8f:c0:3c:86:27:31:8f:d7:1d:0e:5e:ba:cd:
ff:0b:f9:23:8d:28:1b:0f:cb:2f:e5:cf:f0:17:4a:
e3:ec:07:3a:a8:15:48:34:64:fc:65:d1:70:7a:fd:
f1:9f:b2:9b:f1:6d:57:23:6d:2a:c4:a4:1b:42:74:
dd:89:5b:42:09:3a:33:43:38:68:9c:b7:f8:93:f9:
9a:92:eb:1d:76:cf:c4:61:f6:24:4b:5d:8d:87:ee:
3f:e8:4d:be:da:1d:01:f5:da:8d:15:08:bf:84:80:
a9:dc:d5:d3:ff:38:d4:a0:97:60:7c:94:ac:06:aa:
92:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:06:71:6F:11:A8:C8:3A:DD:09:4D:25:BC:06:BB:C7:65:60:E5:66
X509v3 Authority Key Identifier:
keyid:E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/1487a9cb3abb7489bd7b397fe7cd7966e7177f21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.84.0/22
200.7.148.0/22
Signature Algorithm: sha256WithRSAEncryption
46:1e:cc:3f:57:82:81:a0:d9:f4:a9:cf:f0:fd:e2:c9:4b:04:
74:ff:b6:b5:94:46:f5:10:2d:01:ba:79:27:e6:1c:50:cb:ca:
de:6d:bb:79:f7:c8:ba:2f:81:1a:d9:0e:19:5b:52:a9:77:f7:
ac:eb:e9:41:19:8c:1a:57:cc:8b:aa:08:fd:b3:d4:7e:c2:51:
1c:c9:3b:a0:0c:2a:64:2f:e6:bd:92:4b:51:92:bc:c7:3d:eb:
d8:f7:79:5a:53:0e:2c:10:50:0c:01:ac:1c:18:5b:c2:52:7e:
eb:ca:e2:c5:f7:7d:e6:7b:25:dc:da:c7:17:1e:5a:23:33:f0:
cf:43:73:5c:d8:99:68:a2:84:98:8c:99:45:2c:fa:40:40:d2:
df:3d:1b:3e:63:9f:91:58:41:49:04:20:61:7d:c9:8e:6a:21:
df:ee:c9:1c:29:e1:ee:99:4d:d5:cf:36:7a:09:77:17:ca:f0:
3b:a6:34:14:6f:fb:8b:fa:40:c6:3c:1c:c6:21:b9:b2:b5:7c:
4a:54:4a:8b:4b:87:2b:61:d9:5b:6c:dc:89:40:e9:c7:ee:5c:
b1:b1:65:61:90:7e:76:01:e8:9b:41:59:12:e1:1e:00:68:92:
0c:56:16:45:a4:47:bb:34:b2:a1:4d:af:3a:82:34:4e:e1:05:
74:38:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org