Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/2aeb371b931ebfd72bfec74e3d69178380caa01d.roa
File: 2aeb371b931ebfd72bfec74e3d69178380caa01d.roa (raw, json)
Hash identifier: yx56h7uqyeXagJVU4gtXFPlPPaS/qieyJJUzKWA16qw=
Subject key identifier: B2:54:65:14:A3:2D:92:8F:C4:58:73:76:19:06:3B:05:99:69:C9:8B
Certificate issuer: /CN=fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0
Certificate serial: 0D2957
Authority key identifier: C9:AF:3E:90:B4:D4:15:3A:ED:3C:22:DD:4D:BE:95:F2:3E:74:2D:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/2aeb371b931ebfd72bfec74e3d69178380caa01d.roa
Signing time: Wed 24 Mar 2021 14:34:15 +0000
ROA not before: Wed 24 Mar 2021 14:34:14 +0000
ROA not after: Tue 24 Mar 2026 14:34:14 +0000
asID: 27897
IP address blocks: 158.170.0.0/16 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862551 (0xd2957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0
Validity
Not Before: Mar 24 14:34:14 2021 GMT
Not After : Mar 24 14:34:14 2026 GMT
Subject: CN=2aeb371b931ebfd72bfec74e3d69178380caa01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:3d:33:b7:fc:93:d0:c3:40:b0:ce:5b:26:
7c:dd:c3:05:2f:e9:0a:74:2e:37:c5:0d:4b:d1:aa:
1c:c3:25:8a:c7:50:0e:ea:f5:06:48:35:0d:8d:cb:
8b:a4:7e:a9:d4:99:a7:40:07:45:70:dc:8c:53:18:
a7:50:51:8f:c3:c0:92:25:f5:a7:a0:19:4c:d0:27:
45:d5:b7:96:0e:ec:fb:17:ff:a1:e5:11:06:7c:1f:
63:61:0b:52:21:a2:0b:12:e4:b2:47:a3:83:19:67:
70:09:7d:e2:0e:8c:71:d1:8f:48:c0:8e:4e:8f:6c:
0a:d4:df:37:f0:5e:fc:ba:5f:9d:05:31:4e:39:52:
81:95:9a:8b:d7:8c:b7:5f:a5:b1:4c:d6:28:7d:2e:
fb:0b:d2:72:a9:c8:0f:b7:0d:f8:5c:b3:07:39:66:
45:49:20:34:26:ef:0c:0f:00:4b:b0:4e:f7:af:c5:
14:77:d8:27:22:28:57:fd:03:47:23:f2:0b:2a:93:
e3:b6:d3:b9:a1:7e:75:1b:c3:35:17:36:aa:00:bb:
d1:3c:07:c2:94:49:d9:9b:85:50:5d:53:fc:26:ed:
92:d2:d8:dc:da:50:e0:ce:4c:b5:70:ac:60:35:9c:
86:89:af:f1:c9:07:56:77:27:43:30:76:ee:dc:e0:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:65:14:A3:2D:92:8F:C4:58:73:76:19:06:3B:05:99:69:C9:8B
X509v3 Authority Key Identifier:
keyid:C9:AF:3E:90:B4:D4:15:3A:ED:3C:22:DD:4D:BE:95:F2:3E:74:2D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/2aeb371b931ebfd72bfec74e3d69178380caa01d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.170.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:ca:a3:aa:b7:b2:b0:92:66:19:b1:ee:0d:68:8e:01:48:ee:
5c:e5:cb:7d:f6:e9:3c:56:ca:c5:4c:f4:2f:13:e2:ce:77:9b:
3a:6b:6e:68:2b:a9:29:49:9d:e7:2e:48:22:d6:ef:e4:b8:52:
99:a9:a3:79:92:db:46:f6:b2:e5:a7:d8:ee:e4:25:9a:b1:4d:
e0:fa:06:da:ac:60:76:6d:a0:f8:60:fa:2e:f1:be:14:3e:96:
e4:6f:27:d0:9f:25:2b:1c:a0:2a:83:f0:8b:1c:d9:22:33:60:
84:e0:7b:40:d7:28:4c:f8:9b:37:61:c1:52:8c:9d:71:a1:30:
62:4b:9b:3b:d4:1d:47:79:cb:f4:ea:1a:45:5f:4e:c0:5d:79:
32:71:2b:d1:53:12:7b:43:cd:cb:df:18:cc:76:98:44:b8:a9:
bc:90:31:db:b1:eb:ea:6b:66:b1:9f:27:a4:c6:80:fe:3a:c6:
96:e0:f5:55:9b:3e:ef:48:24:34:eb:ff:55:b3:20:49:06:0a:
0f:e8:d4:ad:0c:3e:e5:9a:32:27:46:bf:e3:19:0e:96:45:53:
36:dc:07:55:f4:69:61:71:f5:a9:bf:77:cc:2d:07:6d:2d:27:
a2:c2:8e:f9:e0:ce:a5:3c:31:0a:15:d9:26:73:50:61:00:5f:
98:99:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org