Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/6fb6d840fd2fd2b60891b4a98d18f8c1f0281f4c.roa
File: 6fb6d840fd2fd2b60891b4a98d18f8c1f0281f4c.roa (raw, json)
Hash identifier: BnaW6KM0dFfhhCPMVW/F9W4W1Zf65PEZZMJtSaG/vkU=
Subject key identifier: 14:2D:A7:33:0B:8B:9C:45:8D:07:02:C9:CA:B5:E8:8D:1F:76:AA:C4
Certificate issuer: /CN=5dbe213308e1f657ad90814bcb8813d9fd9c8c4c
Certificate serial: 03B246
Authority key identifier: 3B:90:04:1A:AC:83:67:A2:CE:39:A6:10:AF:03:79:B5:70:EA:BB:2F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/6fb6d840fd2fd2b60891b4a98d18f8c1f0281f4c.roa
Signing time: Fri 06 Oct 2023 12:38:53 +0000
ROA not before: Thu 05 Oct 2023 12:38:53 +0000
ROA not after: Mon 06 Oct 2025 12:38:53 +0000
asID: 263213
IP address blocks: 191.97.96.0/22 maxlen: 24
2803:e280::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242246 (0x3b246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dbe213308e1f657ad90814bcb8813d9fd9c8c4c
Validity
Not Before: Oct 5 12:38:53 2023 GMT
Not After : Oct 6 12:38:53 2025 GMT
Subject: CN=6fb6d840fd2fd2b60891b4a98d18f8c1f0281f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:17:42:77:9b:71:41:0d:c7:8a:0a:1c:b6:
ac:da:f8:f2:96:d5:f9:d7:24:fb:f1:eb:0f:8e:68:
d0:c8:a1:a8:e2:b3:4c:15:52:a7:e6:24:5c:09:07:
87:99:e5:ea:e4:f2:f3:a1:8f:b1:cd:07:9f:5d:95:
c8:54:ba:5c:f3:63:4a:b7:18:e5:38:47:91:e7:ee:
e3:87:f5:6e:40:b9:50:ea:d2:af:0f:c7:c6:0e:60:
ca:f8:f2:9a:e9:c9:e5:01:f5:7b:9e:bd:ec:49:24:
90:2b:43:9f:92:83:d6:9d:10:02:60:d7:f1:59:a6:
da:22:aa:51:94:cb:93:86:22:ae:46:c5:6d:f2:e9:
c3:9a:11:f2:1b:e2:c2:fe:a8:1f:40:8e:11:91:4b:
69:96:5e:10:c8:9e:2b:d6:91:4f:4e:3e:77:5c:4f:
76:c3:da:29:91:23:ad:40:df:a4:49:e4:2e:22:57:
b2:9e:d0:8c:b4:be:34:f2:2a:8a:d2:67:87:a3:05:
19:14:85:db:85:f0:73:64:26:a8:a3:99:3e:9a:bc:
11:78:fa:1c:22:8a:10:76:2f:1c:79:b8:f5:6f:f9:
24:c3:7f:c4:7a:3b:56:cc:8e:03:af:2b:83:a0:26:
c4:cf:d0:de:bd:ea:b6:7a:62:68:f4:0c:04:46:9a:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2D:A7:33:0B:8B:9C:45:8D:07:02:C9:CA:B5:E8:8D:1F:76:AA:C4
X509v3 Authority Key Identifier:
keyid:3B:90:04:1A:AC:83:67:A2:CE:39:A6:10:AF:03:79:B5:70:EA:BB:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/6fb6d840fd2fd2b60891b4a98d18f8c1f0281f4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.96.0/22
IPv6:
2803:e280::/32
Signature Algorithm: sha256WithRSAEncryption
74:4e:ab:c7:f8:0b:3c:94:2c:aa:af:8a:16:1f:9e:b6:60:31:
fc:29:5f:b4:ec:90:a5:18:72:bf:89:33:1c:07:3d:a2:94:3a:
82:26:4e:05:76:31:3b:87:56:ab:2d:c4:ea:b2:f6:08:ef:20:
db:05:2a:c1:f7:93:40:f7:70:11:2f:2e:b3:b8:8e:2a:8b:e7:
c0:45:ab:b6:b9:d9:90:fe:2a:2c:8c:95:44:9f:c6:c2:b1:83:
5d:e0:a3:f2:cb:46:71:3e:8a:69:35:c8:3d:d6:18:b1:6f:6c:
77:46:47:ee:ff:c8:6f:7a:ed:09:5f:3e:17:bc:32:77:32:f8:
07:5a:14:81:a5:49:f4:e7:d1:22:92:6f:6b:53:06:36:38:01:
fb:5a:4c:8f:3a:4c:a6:ca:fc:cd:09:15:8a:8a:ee:ed:b6:9d:
a5:da:67:c7:1c:16:54:b3:a3:28:49:45:1e:b7:8f:4d:3a:52:
55:e8:43:8c:f4:88:d9:3d:f0:ee:26:f4:a9:aa:75:a8:e5:94:
fd:db:84:42:48:f7:d0:3f:c3:57:b4:9d:1b:95:c4:ea:59:7c:
7a:f5:c6:be:c1:af:11:5e:4a:27:3f:9d:d2:82:01:86:13:5e:
5f:c5:98:d3:ef:eb:51:cf:87:77:7e:f5:6c:41:7b:25:41:85:
b2:0a:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org