Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a679c576-6763-4281-9c12-81a21011cffc/6084441422a4392a6dd7fe71c81c6e66146d5757.roa
File: 6084441422a4392a6dd7fe71c81c6e66146d5757.roa (raw, json)
Hash identifier: tf4AzL9XVOM3Mj7/kwET8CiT1f4bzUqiDDDkIbfQm8Y=
Subject key identifier: 9C:49:E1:09:28:ED:88:09:EF:F9:89:5E:39:14:62:31:66:E5:FF:C0
Certificate issuer: /CN=5170c241e6d2b694522a5ce5c5c6f3a36359d873
Certificate serial: 01F335
Authority key identifier: FF:BE:C7:3B:95:1A:6F:EE:98:70:45:7F:73:67:23:2B:A1:46:29:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5170c241e6d2b694522a5ce5c5c6f3a36359d873.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a679c576-6763-4281-9c12-81a21011cffc/6084441422a4392a6dd7fe71c81c6e66146d5757.roa
Signing time: Wed 24 Mar 2021 14:32:50 +0000
ROA not before: Wed 24 Mar 2021 14:32:50 +0000
ROA not after: Tue 24 Mar 2026 14:32:50 +0000
asID: 52371
IP address blocks: 186.159.120.0/22 maxlen: 24
186.159.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127797 (0x1f335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5170c241e6d2b694522a5ce5c5c6f3a36359d873
Validity
Not Before: Mar 24 14:32:50 2021 GMT
Not After : Mar 24 14:32:50 2026 GMT
Subject: CN=6084441422a4392a6dd7fe71c81c6e66146d5757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:8d:f4:e8:ab:f5:2c:92:ec:ec:c6:a2:81:
f1:f3:48:72:38:9c:aa:c2:2b:43:34:20:de:77:38:
d9:b9:d9:cb:f4:1a:a2:77:c6:aa:e9:d7:92:55:fb:
3a:c9:ee:99:65:6a:98:27:07:e6:d0:fd:ed:ae:74:
e8:85:67:6d:d4:56:9e:5b:f5:9d:60:e9:21:ba:58:
8f:6d:a0:c6:22:2d:2a:6c:dd:aa:95:21:00:3b:f0:
4c:1e:7c:80:08:3c:2d:e1:c4:15:41:5c:89:25:81:
cf:49:f3:bb:8d:30:9c:05:56:53:94:9e:e3:23:0e:
cf:02:c8:f9:39:4a:c8:be:5b:e8:ba:ed:88:43:89:
84:84:f3:6c:15:2f:4e:ae:30:59:81:df:cf:b5:76:
af:3e:81:9d:dc:0a:2b:28:b2:36:d7:a5:b3:0b:b0:
55:c4:1d:91:a3:22:2d:a1:4e:88:f3:7e:d2:be:0f:
11:84:dc:9d:0f:54:b7:ca:70:36:ed:44:83:3a:61:
4c:db:a8:b1:ea:91:08:81:91:05:02:79:9c:7f:f8:
fc:2b:e5:b7:3c:a4:f4:f7:71:55:19:d7:e6:85:ce:
39:0d:79:97:b7:36:d0:9a:95:1a:42:f3:24:b1:b4:
4e:7b:e2:a5:45:9a:c2:c9:94:2e:de:2f:a8:9f:e1:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:E1:09:28:ED:88:09:EF:F9:89:5E:39:14:62:31:66:E5:FF:C0
X509v3 Authority Key Identifier:
keyid:FF:BE:C7:3B:95:1A:6F:EE:98:70:45:7F:73:67:23:2B:A1:46:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5170c241e6d2b694522a5ce5c5c6f3a36359d873.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a679c576-6763-4281-9c12-81a21011cffc/6084441422a4392a6dd7fe71c81c6e66146d5757.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a679c576-6763-4281-9c12-81a21011cffc/5170c241e6d2b694522a5ce5c5c6f3a36359d873.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.159.120.0/22
186.159.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b5:1f:31:35:0e:20:b6:82:03:2c:fb:13:79:9c:e1:ed:18:
ad:d7:09:7b:c6:8d:1f:38:a1:03:95:2a:31:aa:0e:61:5b:40:
54:b6:b4:e6:e1:1d:95:8a:44:27:fa:7b:c8:8f:42:31:a6:1a:
a4:23:d7:1f:16:af:16:7c:7b:47:6b:bd:6a:3f:a9:81:fd:ba:
11:77:a6:ad:8c:eb:fc:c5:06:04:e1:8f:44:90:fe:14:fc:62:
b0:41:cf:48:27:56:94:f3:7a:9d:72:55:c2:c1:8f:57:ef:e7:
e5:0f:98:5f:ae:7e:7e:b3:73:0a:49:43:17:92:1f:d2:ec:e5:
54:12:38:b1:8e:fe:ba:66:36:1d:3b:26:c6:a4:54:56:f5:44:
03:91:8d:f0:09:da:0a:a9:e2:7d:ff:d5:42:32:86:23:86:0c:
fe:a0:7a:1e:cb:59:95:4b:b0:92:a6:26:b0:56:65:92:9c:cd:
ee:38:99:bc:9c:de:3d:c6:a5:67:06:b1:8f:20:0e:8b:46:e2:
a8:db:0b:f3:7a:f2:0e:e8:86:7b:81:09:54:48:76:06:7a:c6:
9a:f8:2e:96:38:42:a8:b5:13:d2:9a:af:2b:c1:b2:66:1c:b7:
f1:06:d5:39:4b:8e:04:fc:ec:fb:e8:6d:43:b0:46:cf:23:6b:
59:b5:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org