Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/b72d53f9381fd662e6f4c68c037ec086ed074fa4.roa
File: b72d53f9381fd662e6f4c68c037ec086ed074fa4.roa (raw, json)
Hash identifier: 3HHAEkM/eHpU4kX0XfkybVEq8bRWPNsoccEHx/GABFE=
Subject key identifier: 64:BE:A4:C3:F6:7F:27:E7:B0:EB:6F:0D:55:C3:D0:28:0D:1E:1F:0F
Certificate issuer: /CN=1c33cd9619c7fbfcfdb2a30f4e85ebf5ad97dc5e
Certificate serial: 27385B
Authority key identifier: D6:4E:26:8F:FF:30:F3:E3:DA:F8:48:06:71:CA:67:84:2D:99:21:25
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c33cd9619c7fbfcfdb2a30f4e85ebf5ad97dc5e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/b72d53f9381fd662e6f4c68c037ec086ed074fa4.roa
Signing time: Wed 06 Mar 2024 18:53:48 +0000
ROA not before: Wed 06 Mar 2024 18:53:48 +0000
ROA not after: Tue 06 Mar 2029 18:53:48 +0000
asID: 263686
IP address blocks: 138.59.176.0/22 maxlen: 24
131.161.52.0/22 maxlen: 24
179.63.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2570331 (0x27385b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33cd9619c7fbfcfdb2a30f4e85ebf5ad97dc5e
Validity
Not Before: Mar 6 18:53:48 2024 GMT
Not After : Mar 6 18:53:48 2029 GMT
Subject: CN=b72d53f9381fd662e6f4c68c037ec086ed074fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:e2:cb:ff:c9:ce:20:fd:4f:09:56:ee:d7:
7e:de:14:f3:4a:13:96:f9:98:63:18:c2:40:3e:d0:
26:ec:e7:66:6e:bd:07:6f:6f:01:59:cb:87:96:cf:
c9:e5:da:97:4c:8c:09:9e:ae:2b:d5:ee:e6:45:6b:
9b:12:b0:e1:c3:c7:07:04:2d:5d:4b:ba:83:b2:0e:
0f:cf:e3:ea:bd:13:e1:53:76:db:9f:d7:bb:9c:3d:
77:fd:7e:7a:68:dc:c0:48:e7:ee:b1:0b:ac:d9:34:
ce:c8:56:35:39:3f:09:d2:4b:ff:af:0f:8c:15:50:
4b:75:dc:68:73:7e:d7:d6:f4:e7:98:4a:cd:fd:59:
66:d3:b8:b3:53:56:12:27:a6:7c:84:53:4b:a6:91:
98:0a:f2:1a:bb:20:31:5a:d5:be:e8:6c:b0:9b:68:
c5:4b:4a:e0:29:a0:b7:76:ac:07:82:c8:d6:b1:3f:
9c:f9:27:54:1e:9e:c8:f9:39:bd:dc:18:08:dc:9d:
ec:0c:d6:06:ef:14:99:09:eb:4f:2a:4b:6c:b9:78:
49:a7:fa:fe:67:c1:8b:51:3a:39:50:b4:df:58:c8:
04:15:3c:2c:66:51:07:b2:2b:5f:e6:a7:c5:dd:c1:
c8:3d:85:61:bc:e5:c8:70:d4:6f:f8:99:e0:39:8c:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BE:A4:C3:F6:7F:27:E7:B0:EB:6F:0D:55:C3:D0:28:0D:1E:1F:0F
X509v3 Authority Key Identifier:
keyid:D6:4E:26:8F:FF:30:F3:E3:DA:F8:48:06:71:CA:67:84:2D:99:21:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c33cd9619c7fbfcfdb2a30f4e85ebf5ad97dc5e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/b72d53f9381fd662e6f4c68c037ec086ed074fa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/1c33cd9619c7fbfcfdb2a30f4e85ebf5ad97dc5e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.52.0/22
138.59.176.0/22
179.63.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:6a:6c:02:45:65:c8:26:c3:6c:d5:ea:62:fe:0f:c7:4a:3e:
97:bb:da:e2:ff:80:7a:22:20:c8:dc:76:1f:5d:59:a6:59:1d:
a7:45:59:d0:cd:f8:7b:bf:21:b5:e9:f5:90:02:30:58:ff:34:
36:18:42:78:ba:d2:7a:f0:eb:b5:fa:88:06:6d:37:5f:75:09:
f2:48:fb:42:5c:92:c0:82:1a:00:9c:53:dd:26:49:4e:36:9d:
74:ed:ce:e6:45:b8:2b:43:42:e1:95:f1:f4:24:ee:47:2b:18:
20:1e:cf:9c:00:cf:2a:03:58:72:20:6d:50:62:5b:57:5d:b1:
0e:df:57:01:41:96:c9:e2:62:22:66:ea:40:64:95:9d:a8:f4:
59:4c:6e:a7:e9:41:f3:bb:b3:02:d4:48:b9:05:be:3d:32:db:
a7:94:95:5b:a1:c0:ad:21:7f:c9:6f:16:f5:75:b1:33:e1:5b:
f5:86:8b:8b:be:e9:83:c4:47:e7:e2:d0:e6:2d:07:16:1e:37:
a4:24:ee:39:fe:b4:92:d5:7d:d8:d5:c4:47:54:5a:82:d2:bb:
eb:06:3f:6a:50:48:48:89:ca:a9:cf:99:5a:2c:a9:79:4b:50:
bf:56:bd:77:0c:cb:2b:51:7f:f7:ef:5a:a7:e5:fb:a0:e4:27:
73:83:bb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org