Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a683ce76-7b88-4006-97d3-0e0161d2b770/24cff38d2fcf7ed1a77fcf6a057488107122c931.roa
File: 24cff38d2fcf7ed1a77fcf6a057488107122c931.roa (raw, json)
Hash identifier: x76EbkeHEuXnUX3CDVdjD/Hj6f6ubBqtSpx5jxQDGVY=
Subject key identifier: 9A:9A:C1:B8:80:4F:94:C9:5F:0E:16:D6:4C:3C:BA:94:A9:E7:9B:0C
Certificate issuer: /CN=d82ac6a0ecc0c89dee177ba7da0cc43a5d15ca01
Certificate serial: 21A63E
Authority key identifier: AE:AB:E0:6C:E6:4D:71:BD:6D:CC:D0:35:5F:E5:A3:3A:E5:CB:98:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d82ac6a0ecc0c89dee177ba7da0cc43a5d15ca01.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a683ce76-7b88-4006-97d3-0e0161d2b770/24cff38d2fcf7ed1a77fcf6a057488107122c931.roa
Signing time: Wed 28 Feb 2024 11:21:21 +0000
ROA not before: Wed 28 Feb 2024 11:21:21 +0000
ROA not after: Sat 28 Feb 2026 11:21:21 +0000
asID: 265638
IP address blocks: 170.246.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205246 (0x21a63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82ac6a0ecc0c89dee177ba7da0cc43a5d15ca01
Validity
Not Before: Feb 28 11:21:21 2024 GMT
Not After : Feb 28 11:21:21 2026 GMT
Subject: CN=24cff38d2fcf7ed1a77fcf6a057488107122c931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:34:47:84:03:71:f2:51:c1:ca:65:7d:4f:
a5:72:74:dd:9c:00:74:99:4d:f0:05:e4:c6:bd:12:
e9:e8:a0:6b:89:72:79:60:89:67:92:a0:56:cc:10:
f9:ad:e9:68:32:2d:e6:bf:83:9e:0c:7a:13:20:18:
41:9d:41:4e:cf:cc:26:f7:59:ab:f4:4f:0c:f0:70:
24:b4:69:b7:2f:e7:ce:34:be:05:44:3f:76:4e:c3:
60:07:7d:f9:55:c1:66:a0:0c:38:a9:9b:fe:25:de:
55:69:44:58:ee:cb:53:6c:f4:52:e2:d2:17:c5:8d:
9e:4b:d3:c7:36:93:9c:f0:77:70:f0:e8:10:5c:af:
02:e8:f8:9a:37:c6:ce:fb:61:bc:80:fa:a3:d5:74:
69:9e:99:13:32:00:ac:83:7c:37:a0:00:fd:42:5a:
3e:2d:82:d1:a7:1f:16:9f:1a:9a:ae:3b:33:d2:19:
d2:42:c3:71:ca:9b:24:af:39:d1:0a:39:25:4b:ef:
dc:0f:c6:3b:f9:7d:cc:ec:bd:06:60:d9:c7:cb:48:
7f:d1:82:b2:23:63:eb:25:8e:2f:44:b9:f1:6c:30:
1d:10:5f:7a:09:7a:d4:c4:79:03:e8:eb:3c:5f:c8:
be:60:de:7b:e5:a2:1b:63:d6:e4:8f:4d:56:91:e4:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:C1:B8:80:4F:94:C9:5F:0E:16:D6:4C:3C:BA:94:A9:E7:9B:0C
X509v3 Authority Key Identifier:
keyid:AE:AB:E0:6C:E6:4D:71:BD:6D:CC:D0:35:5F:E5:A3:3A:E5:CB:98:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d82ac6a0ecc0c89dee177ba7da0cc43a5d15ca01.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a683ce76-7b88-4006-97d3-0e0161d2b770/24cff38d2fcf7ed1a77fcf6a057488107122c931.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a683ce76-7b88-4006-97d3-0e0161d2b770/d82ac6a0ecc0c89dee177ba7da0cc43a5d15ca01.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:1f:13:34:1f:d9:bf:b8:5f:1b:67:53:f6:b1:ae:1f:f0:74:
e7:ea:dc:8f:20:ab:fa:76:cb:9a:e3:38:5d:44:70:7c:e6:49:
47:02:a9:34:d3:ae:e5:59:61:b1:b3:2f:39:1e:4d:8a:8e:ca:
7b:9f:dc:56:a0:29:67:43:20:bb:46:2d:c3:38:0b:08:fa:fb:
03:83:97:fa:f2:87:89:4f:3d:30:51:9e:14:bb:a3:07:b3:b4:
2f:d7:4e:de:2b:c2:a3:6e:8d:7b:66:ea:d5:e2:15:da:ae:30:
c0:5d:63:62:4b:5d:b6:ce:62:7f:0f:c2:82:f4:ba:3e:15:64:
8e:6a:e3:3e:d3:f7:1c:b7:9a:2e:a0:44:1a:20:60:1a:7f:b0:
4f:dd:a0:74:ee:be:25:f5:1a:b2:c9:e7:6c:1f:d1:76:d3:07:
c3:bc:d3:d3:1b:7f:14:a4:3c:4c:86:2f:ae:29:69:b4:83:b8:
f5:2c:37:d5:fc:82:7f:ac:b6:48:b2:c6:46:5e:a4:b7:64:79:
6d:74:2e:4e:bf:a9:51:2a:ab:0a:96:2c:cf:7c:12:73:37:9a:
f3:dd:25:f7:91:12:a3:88:12:df:c5:53:6f:ac:71:dd:e1:89:
d3:9b:23:06:ca:d8:f0:43:61:db:d1:d1:21:f4:28:de:78:14:
11:31:14:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org