Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/3cb5577376fee8ac95ea04a6eef004dbaefb5ea9.roa
File: 3cb5577376fee8ac95ea04a6eef004dbaefb5ea9.roa (raw, json)
Hash identifier: 5iBrL3rlBqmTIz24XSAICCc7tuBnq4bvyaXQNEmosUE=
Subject key identifier: 82:93:70:C1:F0:3F:D3:92:FA:2A:DE:16:EA:71:22:40:7B:2E:60:07
Certificate issuer: /CN=dbffe46f4ecd19060cdcba8eca5e475610f92f76
Certificate serial: 05391D
Authority key identifier: FD:90:9A:87:78:9A:78:39:08:F3:01:7F:6F:B5:30:76:DD:EE:67:C0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbffe46f4ecd19060cdcba8eca5e475610f92f76.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/3cb5577376fee8ac95ea04a6eef004dbaefb5ea9.roa
Signing time: Thu 30 Nov 2023 17:47:06 +0000
ROA not before: Thu 30 Nov 2023 17:47:06 +0000
ROA not after: Sun 30 Nov 2025 17:47:06 +0000
asID: 28392
IP address blocks: 201.131.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342301 (0x5391d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbffe46f4ecd19060cdcba8eca5e475610f92f76
Validity
Not Before: Nov 30 17:47:06 2023 GMT
Not After : Nov 30 17:47:06 2025 GMT
Subject: CN=3cb5577376fee8ac95ea04a6eef004dbaefb5ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:e7:d8:bc:43:36:64:13:8a:f5:5c:37:7b:
b9:60:80:80:ab:2c:a6:6e:b0:cd:68:29:2a:12:96:
53:e2:dc:a0:1b:ec:c8:8a:52:a6:87:d0:25:91:ba:
17:8b:59:0e:1f:49:34:aa:f1:85:db:55:03:11:37:
69:49:26:2a:d8:3a:24:b6:00:10:39:d5:18:4e:db:
ac:f1:65:b9:45:6d:52:0c:42:2d:e7:96:b9:e0:5e:
3e:10:9a:0c:9f:52:cc:b8:1d:4e:f7:bd:99:75:12:
33:c9:30:6d:76:2d:fb:5b:6d:89:f8:27:eb:df:ac:
d2:da:72:15:94:96:c5:7b:fc:af:2c:fd:23:71:65:
8c:52:3f:7b:e0:0f:03:c7:94:14:e7:26:08:be:64:
94:ff:da:8d:9b:64:60:1b:f8:91:bc:5f:d3:bc:4e:
b0:cb:df:0c:c6:b2:37:62:c1:d8:03:ef:9b:60:5f:
19:ae:49:7b:5c:90:a1:f0:05:ed:57:fb:e9:31:14:
24:d8:cb:f6:45:c7:ae:91:6c:64:5f:3e:f2:e1:97:
68:85:9c:b4:c2:fd:fa:29:8f:9c:81:42:08:0f:d4:
f9:90:93:3b:98:8f:dc:d0:82:06:a1:6d:c8:3d:b1:
a1:8b:04:01:aa:62:93:a4:ac:d9:18:3b:d4:c0:40:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:93:70:C1:F0:3F:D3:92:FA:2A:DE:16:EA:71:22:40:7B:2E:60:07
X509v3 Authority Key Identifier:
keyid:FD:90:9A:87:78:9A:78:39:08:F3:01:7F:6F:B5:30:76:DD:EE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbffe46f4ecd19060cdcba8eca5e475610f92f76.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/3cb5577376fee8ac95ea04a6eef004dbaefb5ea9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/dbffe46f4ecd19060cdcba8eca5e475610f92f76.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:83:dc:ea:0b:8c:09:b3:37:d8:53:3d:25:a5:e3:5e:a8:ea:
fe:5e:96:b0:a5:18:f2:b4:3b:0a:72:77:a6:24:6e:2d:ad:18:
17:01:08:1e:71:d5:df:e5:6b:4b:fa:72:c8:91:d2:2c:cc:dd:
10:cf:cc:de:94:7e:d5:72:a6:9c:38:83:be:ff:c2:f1:03:65:
de:77:de:2b:74:20:da:5e:98:8e:ee:d3:e0:e4:45:bf:46:1d:
62:bf:21:e0:91:12:ea:51:b7:85:40:b7:fe:7e:ee:1f:e5:14:
3a:a5:4f:bb:ce:cc:5c:0d:71:39:4e:49:79:02:7f:9e:ad:d4:
05:01:e3:9d:73:ce:c8:07:50:9a:97:8f:4b:e0:90:10:ed:72:
c2:89:ce:b9:10:b3:73:b3:e2:1f:ae:3f:16:99:39:e9:c8:6c:
c3:36:0c:78:a8:ef:4b:bd:05:7f:78:66:0c:59:e2:b2:13:bb:
99:0e:01:10:8b:d6:9c:c5:f8:51:a2:2b:57:20:71:df:c2:71:
4f:3d:3f:4f:ab:44:2e:ce:a1:8d:68:e3:4f:52:3b:16:a2:34:
c5:b6:2a:8f:48:ab:e0:d6:b2:de:f5:4b:08:74:49:43:4f:75:
f7:56:18:e7:0a:23:a0:0f:1f:e0:e0:95:46:90:5f:c8:71:b8:
bc:68:37:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org