Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/8d3be0ffd2b36c25e9a7a99103e47e900c0242d3.roa
File: 8d3be0ffd2b36c25e9a7a99103e47e900c0242d3.roa (raw, json)
Hash identifier: et25pJrFjU08kgTDBoaiO+1ZRcMnnDFY9cfBOMWmtoM=
Subject key identifier: 51:F9:74:D8:1E:44:03:60:70:2D:DB:43:20:6B:FD:DF:82:32:2C:CD
Certificate issuer: /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial: 0D2D82
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/8d3be0ffd2b36c25e9a7a99103e47e900c0242d3.roa
Signing time: Wed 24 Mar 2021 14:35:02 +0000
ROA not before: Wed 24 Mar 2021 14:35:01 +0000
ROA not after: Tue 24 Mar 2026 14:35:01 +0000
asID: 27951
IP address blocks: 170.246.112.0/22 maxlen: 24
2800:490:4800::/40 maxlen: 40
2800:490:4d00::/40 maxlen: 40
2800:490:8400::/40 maxlen: 40
2800:490:e000::/39 maxlen: 40
2800:490:e800::/39 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863618 (0xd2d82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
Validity
Not Before: Mar 24 14:35:01 2021 GMT
Not After : Mar 24 14:35:01 2026 GMT
Subject: CN=8d3be0ffd2b36c25e9a7a99103e47e900c0242d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:87:c5:21:95:d5:d1:cc:9d:4f:a5:70:d2:
c7:db:71:8d:76:fe:ef:d2:54:b8:6b:6c:d6:c7:16:
90:eb:ee:d9:ba:c6:63:2e:01:f4:5b:f6:b0:23:12:
82:26:b8:72:21:c9:c0:de:7c:08:86:91:65:47:70:
3e:52:58:b5:e6:da:c4:fe:6f:5d:91:6e:19:78:48:
5b:2e:99:be:de:46:86:97:66:23:1c:bd:43:46:28:
89:34:b6:01:ab:80:62:8f:81:16:ad:7f:82:cc:da:
cf:e8:4f:b0:0e:56:0b:02:28:88:96:a0:f6:52:1e:
69:08:fe:35:15:c4:5b:ff:14:d5:04:65:71:20:e3:
49:0e:da:4d:9e:f6:e0:63:d6:0b:42:98:56:0a:90:
aa:b3:65:c1:1f:6b:d9:31:45:34:d2:46:28:b2:1a:
85:a2:88:61:de:28:6a:66:fc:bf:9e:b0:a0:35:77:
72:e7:ed:78:b6:c2:e4:9a:b5:13:36:16:be:4c:ba:
7b:14:c8:43:0f:07:b8:0e:97:07:47:dd:e8:6c:5f:
cd:e5:c6:14:c8:5a:b3:69:a5:cf:29:4e:b5:8a:55:
3b:4c:2d:95:d5:7e:62:07:7b:c0:b3:24:a9:b8:24:
8c:87:ca:97:5c:bb:d4:01:0d:23:45:aa:cb:9e:4f:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F9:74:D8:1E:44:03:60:70:2D:DB:43:20:6B:FD:DF:82:32:2C:CD
X509v3 Authority Key Identifier:
keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/8d3be0ffd2b36c25e9a7a99103e47e900c0242d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.112.0/22
IPv6:
2800:490:4800::/40
2800:490:4d00::/40
2800:490:8400::/40
2800:490:e000::/39
2800:490:e800::/39
Signature Algorithm: sha256WithRSAEncryption
4e:93:be:4b:6f:bd:f1:4d:50:28:d7:40:65:03:75:1a:c9:67:
9f:43:4b:69:0a:82:6a:e8:ab:cb:66:2f:a4:24:b4:df:33:2b:
70:51:bc:80:1a:60:fa:43:1b:9e:46:95:9a:c0:cb:3f:47:c6:
dd:48:11:6a:37:da:d4:80:4a:c5:84:62:b8:da:10:32:d8:d1:
80:29:6a:03:23:86:61:5a:e0:a7:6d:48:dc:a0:fd:f1:66:53:
6c:c4:ca:6b:b2:1f:f4:01:4b:c7:78:c8:70:b5:89:a0:fb:81:
cc:9f:ad:34:7b:6b:04:28:d4:1f:53:ac:ae:97:2d:db:2c:1b:
0e:0d:b9:32:e8:11:b8:d8:4a:80:ef:04:6f:03:0a:03:89:82:
54:c0:b6:4d:4a:f8:b0:92:bb:bc:82:c8:2d:59:f6:3a:b5:aa:
bc:1d:f0:57:0d:a5:c1:f7:75:82:7e:98:6c:80:da:f3:b9:ac:
7d:06:bc:f5:28:81:87:9b:ff:19:5d:b7:57:b3:c6:41:e6:1c:
f4:62:d3:4a:47:69:4c:ac:72:4e:22:94:11:05:4b:52:2b:ab:
82:e8:c4:db:5a:63:ab:b6:68:ea:2f:00:9d:8b:8d:50:db:d6:
4f:86:27:92:39:38:a6:80:51:2e:5e:72:92:45:ce:3d:b2:85:
f5:d9:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org