Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a756d6ad3482bf52200dd6edf2fdae1f748311b7.roa
File: a756d6ad3482bf52200dd6edf2fdae1f748311b7.roa (raw, json)
Hash identifier: mRCPtNZ1LnsUS97FiMsaIceq/S/fM6erWOrCv242Tq0=
Subject key identifier: D8:D4:9A:AD:2D:A2:55:CA:A8:18:5F:8D:07:B7:17:B0:FC:DB:76:09
Certificate issuer: /CN=a7656fd167ae72596f765a4f9b74e1606a1dea00
Certificate serial: 16B7B1
Authority key identifier: 94:00:8D:C0:79:4A:49:31:5C:ED:14:83:90:36:2B:CF:7E:5C:F9:DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7656fd167ae72596f765a4f9b74e1606a1dea00.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a756d6ad3482bf52200dd6edf2fdae1f748311b7.roa
Signing time: Mon 02 Oct 2023 17:55:15 +0000
ROA not before: Sun 01 Oct 2023 17:55:14 +0000
ROA not after: Thu 02 Oct 2025 18:55:14 +0000
asID: 19863
IP address blocks: 181.199.224.0/19 maxlen: 24
181.41.64.0/18 maxlen: 22
190.80.0.0/17 maxlen: 24
2800:3c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488817 (0x16b7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7656fd167ae72596f765a4f9b74e1606a1dea00
Validity
Not Before: Oct 1 17:55:14 2023 GMT
Not After : Oct 2 18:55:14 2025 GMT
Subject: CN=a756d6ad3482bf52200dd6edf2fdae1f748311b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:1a:3c:3d:ce:9e:bd:29:25:92:5d:19:9b:
c5:c7:5a:13:35:12:6f:3f:77:06:c2:82:2f:ab:f2:
26:cf:ff:a0:26:2e:07:25:ff:69:fa:6e:38:df:00:
a1:8a:d9:0b:6b:bd:c5:e4:91:1a:cf:43:4d:f9:31:
e4:c7:0c:9d:1e:f3:77:3d:40:81:2a:26:cd:ef:ca:
48:8b:47:46:ae:8e:55:bd:96:c9:20:ab:3e:31:7f:
bc:bb:7e:65:ed:9a:b2:f5:2d:30:ac:27:b4:eb:0a:
13:89:92:ff:78:4d:82:45:53:85:4c:f4:e0:de:d8:
f1:cb:01:e7:2f:4d:b9:b9:bd:72:b2:44:0f:52:20:
9b:24:c1:9b:6f:38:f1:f6:f3:c2:f4:98:ea:84:d5:
cb:4f:bb:36:64:b5:dd:38:3d:66:98:00:37:25:7e:
0b:e5:fd:af:c0:ed:be:66:27:6d:dd:51:3d:ce:22:
81:a9:17:33:0d:00:f7:f8:c3:f4:86:c5:40:62:de:
07:92:6b:8a:18:f4:de:fd:a4:35:ae:a5:af:c0:f4:
eb:fc:02:1b:8c:a1:f3:6c:09:aa:85:c5:71:9b:8f:
e5:3c:b9:2b:d2:2f:ef:f3:12:9f:ef:77:fc:0e:6f:
6b:1e:76:a8:cd:03:eb:5b:f8:07:ab:99:ae:d8:7a:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:9A:AD:2D:A2:55:CA:A8:18:5F:8D:07:B7:17:B0:FC:DB:76:09
X509v3 Authority Key Identifier:
keyid:94:00:8D:C0:79:4A:49:31:5C:ED:14:83:90:36:2B:CF:7E:5C:F9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7656fd167ae72596f765a4f9b74e1606a1dea00.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a756d6ad3482bf52200dd6edf2fdae1f748311b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a7656fd167ae72596f765a4f9b74e1606a1dea00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.64.0/18
181.199.224.0/19
190.80.0.0/17
IPv6:
2800:3c0::/32
Signature Algorithm: sha256WithRSAEncryption
37:ab:15:82:88:9a:12:7f:a9:c2:c9:f3:65:a5:62:73:33:ca:
73:45:21:54:eb:c9:93:31:9d:03:7c:a4:ad:05:e5:02:64:79:
ac:b2:51:6a:16:dd:8f:97:3a:1f:86:ac:1d:ed:40:14:83:43:
6f:2a:e4:26:01:ae:b2:fd:96:51:1e:4b:3d:09:98:d8:cc:d4:
76:3b:2e:00:a8:dc:0e:dd:c3:aa:40:e6:cd:37:ed:ba:6b:76:
3a:5a:9b:4b:34:b3:35:4c:15:46:f0:97:b4:dc:f9:d1:11:e5:
ef:c7:ae:e3:36:fe:be:4f:32:e8:35:5a:63:70:f0:8c:07:64:
2b:3e:09:29:72:b7:d6:dc:8b:b4:d6:c5:38:7f:bb:57:fe:c0:
c8:5e:a8:38:82:43:0b:53:d4:cc:91:72:68:a1:d1:0f:bb:44:
75:ab:c1:cb:43:96:1c:b9:b8:31:49:43:92:fd:29:7a:a4:09:
ba:33:67:f8:c3:bc:94:31:76:97:f4:59:26:97:f0:f3:6d:96:
75:dd:12:7c:e9:24:6c:4a:98:62:56:4e:ac:72:aa:b5:8d:28:
6c:26:d7:6d:16:ec:cd:a3:9f:99:f7:89:6d:96:8a:8f:fd:ff:
9f:63:f2:79:a3:80:98:fd:9c:99:c6:f5:b3:3a:01:4c:59:a3:
cc:88:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org