Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97a9fb88-da4c-489e-bb17-d280b7dd4ce8/40ea75d4294afc0649c66d94391a0b450499686b.roa
File: 40ea75d4294afc0649c66d94391a0b450499686b.roa (raw, json)
Hash identifier: 1igC5p27pMqYHo1y+6HhVijpoDpGkfErBoA4leqjYAs=
Subject key identifier: 30:A9:49:70:76:C5:CA:85:A5:F9:EC:05:0F:9B:E8:B8:8B:3D:A7:03
Certificate issuer: /CN=160407480011a0e8990e77fd1c5a57f5e86df642
Certificate serial: 0417
Authority key identifier: 38:12:AD:86:57:5B:F7:1A:37:53:57:1A:8D:08:95:A9:E3:7A:5F:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/160407480011a0e8990e77fd1c5a57f5e86df642.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/97a9fb88-da4c-489e-bb17-d280b7dd4ce8/40ea75d4294afc0649c66d94391a0b450499686b.roa
Signing time: Thu 07 Oct 2021 18:38:31 +0000
ROA not before: Thu 07 Oct 2021 03:00:00 +0000
ROA not after: Sat 07 Oct 2023 03:00:00 +0000
asID: 263720
IP address blocks: 132.255.200.0/22 maxlen: 24
2803:5780::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160407480011a0e8990e77fd1c5a57f5e86df642
Validity
Not Before: Oct 7 03:00:00 2021 GMT
Not After : Oct 7 03:00:00 2023 GMT
Subject: CN=40ea75d4294afc0649c66d94391a0b450499686b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:c7:a8:02:b7:b5:5d:51:44:d9:07:ff:e0:
01:fa:05:79:de:aa:6c:75:fb:44:b3:91:c4:42:4e:
ad:62:e6:34:3a:b7:0a:8e:96:06:b9:1c:49:60:b1:
d1:82:df:91:ab:32:f9:20:24:34:2b:ea:f2:fb:c7:
06:58:56:03:af:f3:f7:0f:fa:64:57:42:e7:7f:34:
2b:32:64:81:bd:22:b1:19:75:d8:a7:9e:1c:db:6a:
dc:3c:8c:b6:6c:c8:b3:8d:f7:e5:df:46:97:aa:fe:
8f:67:74:ac:14:0e:05:3a:f7:28:b0:f4:f2:37:03:
16:b0:33:1a:0b:a8:83:0d:a7:65:d8:18:17:e7:1e:
43:c2:b2:7a:f0:a7:b2:9c:f5:21:f9:e3:22:33:0e:
a6:83:3c:cb:ee:c8:ea:af:2a:71:7e:be:52:ea:47:
e3:a3:ac:42:a8:74:cd:43:8b:e4:d2:51:8f:6d:f5:
06:50:bb:82:0a:c2:b7:e9:cf:51:3f:c1:fc:06:0f:
01:62:24:33:cb:7e:ac:4e:27:f3:2d:0b:22:e9:85:
47:ba:41:12:07:12:bb:e5:30:2a:d1:cf:e8:d7:dc:
de:b4:de:86:94:7f:31:56:06:97:ce:a4:38:9d:5d:
6c:27:57:17:94:3f:e9:f1:9f:e9:bb:d9:5f:b8:dd:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A9:49:70:76:C5:CA:85:A5:F9:EC:05:0F:9B:E8:B8:8B:3D:A7:03
X509v3 Authority Key Identifier:
keyid:38:12:AD:86:57:5B:F7:1A:37:53:57:1A:8D:08:95:A9:E3:7A:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/160407480011a0e8990e77fd1c5a57f5e86df642.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97a9fb88-da4c-489e-bb17-d280b7dd4ce8/40ea75d4294afc0649c66d94391a0b450499686b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/97a9fb88-da4c-489e-bb17-d280b7dd4ce8/160407480011a0e8990e77fd1c5a57f5e86df642.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.200.0/22
IPv6:
2803:5780::/32
Signature Algorithm: sha256WithRSAEncryption
a9:cd:83:e4:a3:62:d8:88:cb:1c:19:eb:93:45:d3:ae:b0:93:
ed:8f:64:3b:07:00:b9:32:94:2b:7a:fb:15:fe:5a:22:9d:43:
30:cf:2b:4a:59:37:dd:8a:9c:dd:a0:8c:bf:ab:58:44:31:18:
bd:4a:02:7b:c1:46:52:10:25:d5:2e:5f:25:22:ef:e8:3e:49:
09:ce:0e:86:0d:97:69:e7:92:5f:e8:d6:2f:cc:1e:d2:85:57:
eb:f9:85:3f:ff:78:27:6b:d4:cf:33:f1:79:3b:f0:6d:06:08:
34:da:5c:29:99:db:11:d4:42:05:0f:a3:3b:5d:ef:74:af:03:
67:89:2e:5b:14:ca:3e:bc:db:9e:e3:8b:37:b9:f3:4a:08:8c:
9c:d0:fc:06:a1:74:67:11:7f:10:b4:95:9d:f0:c5:73:83:70:
1f:66:43:83:3e:03:7d:7c:38:8b:4f:fe:97:f9:0a:ac:6f:bb:
0f:3f:68:ff:9a:6d:f2:89:7d:b5:06:f5:f3:dc:b4:07:0b:95:
cf:66:55:9d:b6:c3:5b:79:c5:f9:8c:c2:4f:d7:be:a7:4e:97:
c0:11:9e:9f:2f:a4:dc:c6:d3:1e:0e:09:eb:84:9f:90:cb:78:
89:ec:75:2d:f3:fc:ec:48:b6:b1:2a:90:b7:0a:3c:5b:1f:e8:
8d:d1:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org