Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/d365ad3acb58839e2fb19f72438dc556ee13d5ee.roa
File: d365ad3acb58839e2fb19f72438dc556ee13d5ee.roa (raw, json)
Hash identifier: daFuptoGFiMbByM5a18ERUJ0Vz75RqE1dWiFLwhzEFw=
Subject key identifier: ED:F8:36:87:1A:4E:9E:A5:A7:E4:E5:E6:5F:B8:BF:61:9C:A5:56:77
Certificate issuer: /CN=ebff371d4ac1a6161db3e53f836c346c32163491
Certificate serial: 09B116
Authority key identifier: 76:EC:53:B1:F2:E8:7D:6B:B3:F7:BB:E4:04:3E:71:EF:30:48:FE:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebff371d4ac1a6161db3e53f836c346c32163491.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/d365ad3acb58839e2fb19f72438dc556ee13d5ee.roa
Signing time: Mon 30 May 2022 13:34:11 +0000
ROA not before: Mon 30 May 2022 03:00:00 +0000
ROA not after: Thu 30 May 2024 03:00:00 +0000
asID: 61509
IP address blocks: 143.255.136.0/22 maxlen: 24
170.83.32.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635158 (0x9b116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebff371d4ac1a6161db3e53f836c346c32163491
Validity
Not Before: May 30 03:00:00 2022 GMT
Not After : May 30 03:00:00 2024 GMT
Subject: CN=d365ad3acb58839e2fb19f72438dc556ee13d5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:84:15:17:cf:dc:90:7e:5a:43:00:70:61:2b:
57:19:94:73:35:b2:59:d4:b7:a6:f2:4c:9b:c5:3f:
2f:ab:c0:75:84:f4:92:6c:b1:b2:75:00:a6:8f:9a:
7a:b3:d2:5e:e4:f7:98:b5:07:d9:da:6a:89:5b:40:
8c:78:63:65:b1:d2:bf:fb:9f:e1:8e:89:00:0a:dd:
e2:63:ba:10:7d:b8:99:38:6a:e2:23:64:6c:83:72:
08:6e:9d:0e:5b:d5:7e:3a:2e:84:41:47:ba:fb:91:
9d:69:b9:c1:79:ed:54:28:7d:94:a0:5c:b7:a5:91:
bd:d5:89:ac:a0:09:d7:36:e1:a2:cb:37:15:5c:49:
5a:d6:87:fd:2d:20:ab:58:45:ce:9c:43:d4:d2:28:
d2:a0:31:d6:4d:61:91:33:e5:2b:cc:2d:7e:f8:51:
8c:72:53:69:51:58:e4:88:c9:c9:e2:e3:50:bb:6c:
35:49:ad:08:fd:60:c2:3f:9b:5a:0b:45:36:50:00:
a9:98:5d:30:6a:76:f1:a7:fe:99:c4:c3:f0:04:a9:
9e:46:25:5d:31:ef:0b:e4:63:a0:5f:6e:62:70:09:
0c:b6:c1:4d:94:0e:3f:d5:5e:31:c3:b9:73:2c:08:
63:89:b3:85:b5:9e:25:28:f4:a1:ad:26:63:1a:50:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F8:36:87:1A:4E:9E:A5:A7:E4:E5:E6:5F:B8:BF:61:9C:A5:56:77
X509v3 Authority Key Identifier:
keyid:76:EC:53:B1:F2:E8:7D:6B:B3:F7:BB:E4:04:3E:71:EF:30:48:FE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebff371d4ac1a6161db3e53f836c346c32163491.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/d365ad3acb58839e2fb19f72438dc556ee13d5ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/ebff371d4ac1a6161db3e53f836c346c32163491.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.136.0/22
170.83.32.0/22
Signature Algorithm: sha256WithRSAEncryption
81:70:0e:1c:10:31:df:2f:84:b7:96:a1:18:36:a5:f2:cc:55:
e6:ed:15:dd:be:47:88:15:c3:93:bc:23:a8:e5:ff:74:ea:db:
34:8e:af:a7:06:67:6f:0d:8f:c7:11:2e:00:ac:23:b8:31:94:
49:7a:13:a0:ba:6d:91:be:ee:d9:3e:52:b2:1d:d3:32:39:16:
f1:d6:1b:c3:3c:de:c2:a8:f6:01:4f:c1:54:6c:cd:34:45:00:
71:aa:cd:9e:05:05:a5:f6:69:d6:94:52:a7:53:f1:af:1a:9a:
bf:55:d8:2e:c7:b9:24:6c:85:3c:34:70:87:82:27:23:53:55:
f2:a1:f3:60:dd:f3:fd:23:54:4b:d6:9a:ee:26:15:2f:9f:0e:
c6:da:f2:84:b4:ff:b3:e6:71:f5:ce:91:9b:14:82:9c:dc:47:
94:72:aa:f2:d9:c7:fd:c9:80:ab:8e:7e:cd:7e:47:f5:51:30:
ee:52:c4:0c:00:c2:ec:10:f3:7a:56:43:90:e8:43:62:5d:b9:
96:ee:3e:a4:08:7d:dd:df:8f:35:bc:73:5c:50:e2:bd:cf:f0:
91:fc:05:a0:df:5c:9e:ba:d0:fe:fb:4e:4c:9d:61:95:5a:b6:
4b:0d:98:46:6d:81:77:25:46:b7:c5:b6:52:54:11:65:a3:87:
04:d1:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org