Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/b8dc90eaa1f290c470c52e09e15cdddfb3f34e04.roa
File: b8dc90eaa1f290c470c52e09e15cdddfb3f34e04.roa (raw, json)
Hash identifier: XxR3j8SPU37nkgBhF0lPeNyUCw+mlr1qUsV45uSwJ7M=
Subject key identifier: 53:1E:17:32:6F:83:84:99:76:86:9A:52:B6:45:7E:50:0E:D2:68:9E
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 1BAFFB
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/b8dc90eaa1f290c470c52e09e15cdddfb3f34e04.roa
Signing time: Thu 11 Jan 2024 21:24:41 +0000
ROA not before: Thu 11 Jan 2024 21:24:40 +0000
ROA not after: Sun 11 Jan 2026 21:24:40 +0000
asID: 272809
IP address blocks: 161.22.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814523 (0x1baffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Jan 11 21:24:40 2024 GMT
Not After : Jan 11 21:24:40 2026 GMT
Subject: CN=b8dc90eaa1f290c470c52e09e15cdddfb3f34e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:b3:79:15:6d:bd:d4:21:88:ad:14:ef:fd:
14:ff:7f:36:a8:be:cb:d8:f8:e3:32:d9:4f:8c:9c:
1d:c5:23:c1:30:29:fb:c9:6c:31:af:2f:20:25:34:
de:19:0b:0a:45:e3:2b:77:26:76:b5:84:35:3d:80:
cb:59:79:22:8b:dc:2e:56:9f:73:69:c1:88:ee:18:
32:87:16:3d:e5:5d:d5:ee:cd:5e:92:1d:f0:8f:1d:
80:91:59:5d:50:cc:67:18:22:f7:49:02:13:09:ec:
34:a6:95:05:81:78:e6:78:1e:5a:ea:0b:c8:3b:72:
92:ee:40:81:1d:ed:55:28:27:95:60:94:76:ce:e1:
e2:85:57:6d:c3:f9:0f:19:84:d8:29:c3:a8:38:be:
a2:4c:86:d0:b3:69:c8:14:22:0a:28:39:93:50:b3:
ac:9a:ac:1e:0c:17:a9:f8:ea:c8:9d:37:6e:d2:e5:
b3:49:1d:92:b9:c1:e0:d8:7b:43:13:99:44:68:00:
a3:93:fd:bd:0f:70:1a:0c:53:48:83:91:da:95:01:
2c:f5:51:88:0d:1f:a9:0b:0a:bb:e4:a8:a5:27:0f:
15:6c:66:84:49:10:c4:af:55:a6:88:11:14:d7:75:
62:7a:58:e1:6d:bd:bc:64:62:62:cd:8d:44:e1:a8:
3b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1E:17:32:6F:83:84:99:76:86:9A:52:B6:45:7E:50:0E:D2:68:9E
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/b8dc90eaa1f290c470c52e09e15cdddfb3f34e04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e1:14:46:c3:b5:68:9d:4e:7a:08:37:02:30:88:ba:18:7f:
53:73:55:9f:fc:b0:20:4b:2f:aa:8b:8d:6c:f0:57:ef:39:f9:
d8:f7:ea:f6:df:da:18:9c:25:5f:dc:8a:89:02:1e:45:0c:07:
24:d0:e8:1d:1f:28:8d:61:e9:20:59:2f:07:98:f6:3a:ad:d6:
a7:05:de:1b:c6:0a:74:11:9b:f3:f2:77:46:16:81:5a:6b:5f:
10:4b:dd:de:87:03:9b:75:7e:45:24:f2:d9:7b:7f:2e:29:19:
40:81:22:0b:d5:4a:66:b8:48:83:36:5b:02:83:67:f3:0f:3d:
49:f6:2a:af:ce:49:02:c6:23:72:df:d8:90:98:9f:9c:df:ca:
5f:17:31:dd:e7:59:d3:27:f5:54:02:a6:45:f2:5b:73:74:1e:
40:f0:01:03:34:0f:71:78:94:bb:e6:7d:19:83:59:18:b5:1b:
cd:4e:50:d3:55:c6:ff:19:f3:a6:c1:b5:6d:c2:ca:43:86:af:
0e:28:7d:3a:6a:5e:2d:b9:b3:dc:26:55:70:93:f9:26:af:89:
63:47:92:c8:2f:e6:df:bd:f5:2e:80:ee:a6:35:f6:7b:09:20:
0d:19:5e:a3:49:50:e4:4c:19:41:1c:b6:42:31:13:8a:b7:e4:
30:b7:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org