Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/5e0abe8364c6e2f0985e5d6f31d400ce50e43d00.roa
File: 5e0abe8364c6e2f0985e5d6f31d400ce50e43d00.roa (raw, json)
Hash identifier: 3s8gxqWWNoaWyMNZJJUqO/0LsxsMbRoLKuoYdBO3+mg=
Subject key identifier: 54:7F:31:F8:0C:05:CB:DC:B9:DB:01:5D:28:7C:CB:F4:AD:31:A5:2A
Certificate issuer: /CN=fdfd425584dd260c812e3b649911e7753efa8f09
Certificate serial: 16B3D8
Authority key identifier: BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/5e0abe8364c6e2f0985e5d6f31d400ce50e43d00.roa
Signing time: Mon 25 Apr 2022 22:35:01 +0000
ROA not before: Mon 25 Apr 2022 03:00:00 +0000
ROA not after: Tue 10 Feb 2026 03:00:00 +0000
asID: 1299
IP address blocks: 170.80.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1487832 (0x16b3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdfd425584dd260c812e3b649911e7753efa8f09
Validity
Not Before: Apr 25 03:00:00 2022 GMT
Not After : Feb 10 03:00:00 2026 GMT
Subject: CN=5e0abe8364c6e2f0985e5d6f31d400ce50e43d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:87:65:d1:64:fe:c6:e4:2d:87:be:59:58:
c9:eb:d8:1e:55:00:15:3e:87:0f:14:1d:72:bd:01:
ab:be:ce:70:96:36:47:36:17:7b:46:ce:21:4c:65:
4d:84:e1:c5:6d:1d:f2:43:3c:ac:fc:5f:dc:cb:42:
0f:00:4e:17:63:e9:27:4b:2e:d4:20:73:34:d0:7e:
bc:0d:44:e5:fa:35:e2:8e:0d:60:45:72:a6:f5:fb:
34:d3:06:d4:a1:1f:55:eb:db:31:88:8f:0b:6c:bd:
ca:ad:67:52:86:6d:8e:a8:a7:ba:49:1d:8c:e3:b5:
94:a6:66:20:f2:1d:ce:7f:38:19:d5:cf:e8:84:02:
61:71:2e:d9:eb:31:e7:73:2d:fb:f1:9c:83:17:ab:
28:b1:33:84:0e:2e:ea:83:5e:6c:3b:0b:2b:d8:76:
58:4a:be:7f:91:67:fd:3d:d2:3f:f6:6e:c4:7c:74:
43:a0:5d:7d:0d:5d:d2:8f:29:75:9d:06:cd:d5:f7:
c0:c3:58:47:e4:3e:1f:8e:38:bc:39:c7:2c:08:18:
fd:76:50:c3:da:82:ad:d1:b0:74:9d:e7:1a:e8:ce:
dd:f7:54:2f:db:63:bf:1e:1f:00:d9:cd:af:11:03:
90:28:cd:42:1b:17:e2:15:e3:3d:ad:8c:55:39:62:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7F:31:F8:0C:05:CB:DC:B9:DB:01:5D:28:7C:CB:F4:AD:31:A5:2A
X509v3 Authority Key Identifier:
keyid:BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/5e0abe8364c6e2f0985e5d6f31d400ce50e43d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.143.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a8:c0:79:73:a5:b1:40:18:cd:83:80:f6:74:11:ca:d7:c7:
96:6e:a8:43:f7:21:e2:e0:13:76:bd:99:f2:80:f4:57:94:c0:
02:d2:36:87:dd:95:a9:21:36:fc:ee:fe:a0:29:31:e9:24:e4:
e0:1a:c8:68:82:76:ae:7f:55:87:0d:e0:5c:6f:ca:6d:a9:d3:
00:35:94:58:2d:3e:5e:1c:86:03:99:f5:e9:3d:fa:88:95:00:
8d:fc:fb:a5:5e:11:cb:03:3c:4f:89:1b:66:b6:ed:48:90:72:
56:3f:7f:dc:bc:4f:8c:dd:cb:0c:bb:cf:58:8b:e1:be:8e:9d:
b8:05:2b:52:d6:40:a0:ae:46:3e:d1:34:86:9e:8d:c5:90:c3:
a2:12:ac:28:38:7b:80:42:b6:69:97:64:85:c5:fe:79:cc:da:
c4:9c:af:20:7d:58:3d:3b:bf:99:e0:7a:18:e9:95:98:14:90:
4c:b4:68:07:a7:7e:42:f3:55:63:12:69:21:4e:f6:b5:07:89:
85:b2:93:3e:11:3f:ce:01:a1:ac:c7:7e:80:70:56:29:93:e6:
ab:b1:0a:98:81:d2:09:88:0c:25:01:89:0e:1b:e3:02:8e:00:
11:1d:19:00:52:03:b7:5f:38:54:1c:95:f5:4c:63:48:ef:19:
95:b9:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org