Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/87600d10d41104c4c9a7b144b29b72c27ade5b0a.roa
File: 87600d10d41104c4c9a7b144b29b72c27ade5b0a.roa (raw, json)
Hash identifier: aWlmpOsyeuyHuqjNncW6hJK0sz53sjoJhnhFnvI7rOc=
Subject key identifier: 5C:BE:4E:4B:7A:69:96:A0:84:56:12:6C:CC:60:82:A3:2F:0D:BE:DA
Certificate issuer: /CN=df5a245f6f52f09479811abcbd433b19790b0f3b
Certificate serial: 02F1
Authority key identifier: DC:E3:6C:25:2F:05:90:00:51:48:F3:02:CA:8B:CA:CF:EC:9E:F9:05
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df5a245f6f52f09479811abcbd433b19790b0f3b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/87600d10d41104c4c9a7b144b29b72c27ade5b0a.roa
Signing time: Mon 23 Jan 2023 19:59:03 +0000
ROA not before: Sun 22 Jan 2023 19:56:59 +0000
ROA not after: Thu 23 Jan 2025 19:56:59 +0000
asID: 272901
IP address blocks: 177.71.96.0/22 maxlen: 24
2803:5690::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df5a245f6f52f09479811abcbd433b19790b0f3b
Validity
Not Before: Jan 22 19:56:59 2023 GMT
Not After : Jan 23 19:56:59 2025 GMT
Subject: CN=87600d10d41104c4c9a7b144b29b72c27ade5b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:97:ea:5f:d9:50:f5:76:67:49:05:a1:6d:
18:18:ac:d4:ca:7a:ed:2c:8a:14:b8:f6:91:3a:5d:
86:af:16:86:e5:b0:b3:a3:31:52:92:ef:23:b3:af:
78:c6:af:e7:b4:59:99:51:8f:ab:21:a6:b5:b2:05:
c3:6f:b5:a0:ad:c6:c1:b8:e6:13:ae:4f:5a:84:b8:
41:f0:31:8e:3b:81:5d:d0:a6:ef:27:b1:c8:37:1b:
c5:78:49:6f:c2:b5:f4:33:7b:5c:be:05:f7:5a:6e:
57:8f:9c:21:d0:b6:75:79:24:a9:a4:76:a2:45:39:
96:e5:19:ca:84:b6:6f:f8:27:40:c5:3d:99:01:36:
2a:c8:ba:53:73:8d:33:44:2f:d0:92:94:9e:54:89:
66:c1:34:c7:d5:cc:87:3b:a4:e7:08:17:4c:db:63:
8a:8d:7f:19:43:9a:45:5a:a7:66:21:77:a2:e6:10:
dd:6d:1a:11:ee:fe:27:b4:35:cd:9c:f1:af:11:31:
1b:b6:3d:ef:a4:88:9e:d0:91:aa:79:29:4a:72:17:
87:eb:52:94:2a:86:5c:48:6c:03:35:4d:85:00:2d:
96:90:d1:dc:14:3d:30:b3:ff:39:99:f9:12:a0:18:
ad:e7:55:f4:d2:ca:62:29:3b:26:56:a0:fe:22:24:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BE:4E:4B:7A:69:96:A0:84:56:12:6C:CC:60:82:A3:2F:0D:BE:DA
X509v3 Authority Key Identifier:
keyid:DC:E3:6C:25:2F:05:90:00:51:48:F3:02:CA:8B:CA:CF:EC:9E:F9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df5a245f6f52f09479811abcbd433b19790b0f3b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/87600d10d41104c4c9a7b144b29b72c27ade5b0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/df5a245f6f52f09479811abcbd433b19790b0f3b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.71.96.0/22
IPv6:
2803:5690::/32
Signature Algorithm: sha256WithRSAEncryption
70:e5:40:b3:e5:3e:e1:00:a5:b4:65:72:11:48:b1:b1:e1:a1:
ae:07:87:f0:0f:f2:b4:2d:eb:d4:16:c5:fb:50:dd:fd:7d:5b:
dd:7c:5e:cb:54:56:95:aa:04:79:f2:38:0c:15:6a:db:ef:ee:
64:6b:5d:8e:d8:f2:c6:8d:6c:25:21:45:5f:c0:b1:af:9f:fb:
62:96:9c:13:7e:4e:6c:15:04:7f:b4:5a:da:9c:86:c6:1b:fc:
2f:b6:fc:92:52:a8:94:84:a8:ab:4f:7f:96:fc:83:49:09:d5:
a5:fa:60:31:c2:75:07:4d:b6:40:0d:d2:76:2f:ca:1a:ea:ef:
46:e9:84:75:73:09:72:c8:d3:8c:69:a9:88:32:4e:ba:29:ac:
9f:ce:8f:9e:5e:3f:a3:14:98:23:c4:ba:6d:db:15:09:23:6d:
e8:a9:f2:9e:86:00:6b:b8:16:10:bd:bd:7c:13:f1:cc:63:78:
4a:0a:3f:04:c8:e2:6a:e8:03:b5:0f:b2:d4:8f:74:ef:40:13:
4f:20:cb:08:f4:b3:b0:68:bc:41:20:4d:f5:f0:99:b5:87:09:
1c:65:ac:17:b2:0e:a2:69:97:9c:be:bb:66:79:0d:21:29:c0:
15:2c:78:a0:f6:ea:69:80:14:9f:cb:de:27:e4:fb:f7:a2:88:
1d:2e:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org