Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/ad07a3b26b0b09b65f5eb8e100499b76ee0e0848.roa
File: ad07a3b26b0b09b65f5eb8e100499b76ee0e0848.roa (raw, json)
Hash identifier: zCVB6+BPgSxdRloWKQc6YSofjLxibtPM1HuUAV9xjGg=
Subject key identifier: FF:6D:33:63:0B:84:DE:69:44:D7:A9:48:E2:5B:A5:8C:EC:6A:B3:67
Certificate issuer: /CN=fdfd425584dd260c812e3b649911e7753efa8f09
Certificate serial: 170089
Authority key identifier: BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/ad07a3b26b0b09b65f5eb8e100499b76ee0e0848.roa
Signing time: Thu 28 Apr 2022 15:01:41 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 264819
IP address blocks: 170.80.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1507465 (0x170089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdfd425584dd260c812e3b649911e7753efa8f09
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=ad07a3b26b0b09b65f5eb8e100499b76ee0e0848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:c2:58:a0:6d:9c:b3:3e:9c:e9:2b:2e:96:
53:af:00:05:67:5a:af:da:7d:2a:b5:5b:18:73:f4:
8d:e1:4e:1d:5b:d3:83:35:3b:c4:ca:38:cc:1d:49:
1a:3a:f1:dc:98:cd:95:64:32:1b:da:41:20:5a:74:
f6:5b:04:d8:be:84:b7:9b:a5:23:3e:89:85:24:61:
36:af:e1:da:4a:bd:5e:62:2b:21:10:bf:5b:29:e1:
e3:19:44:b7:3b:cb:60:d2:55:73:1e:2f:03:28:ef:
12:0c:84:a4:0b:b9:22:fb:14:07:37:ab:78:d0:32:
71:c5:5a:2f:e0:d7:b8:88:de:d9:54:b0:d3:f0:2f:
e1:fd:13:48:29:9b:3b:d5:30:d8:38:19:a3:8d:f7:
62:4f:8d:76:35:ea:07:24:3e:c2:be:fd:1a:87:31:
b6:58:35:68:69:cf:ea:b1:45:66:76:05:80:1f:85:
46:c7:4d:15:26:c1:23:14:4b:2f:12:42:7d:95:8a:
25:f6:e8:16:81:3f:97:97:e7:24:45:54:4f:59:df:
8d:78:ac:ac:78:2d:fa:67:a6:a5:03:ff:70:74:57:
8e:de:8f:8b:db:7e:fa:34:b5:f9:de:20:18:22:e3:
3e:94:69:68:87:ff:3a:17:51:ba:6a:0b:ee:48:e0:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6D:33:63:0B:84:DE:69:44:D7:A9:48:E2:5B:A5:8C:EC:6A:B3:67
X509v3 Authority Key Identifier:
keyid:BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/ad07a3b26b0b09b65f5eb8e100499b76ee0e0848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:da:e4:08:91:a6:d3:62:b3:d0:ff:5b:bb:77:e2:c1:25:db:
f1:05:cf:ee:59:db:b3:f9:4a:16:43:79:62:9c:9d:ff:b0:cb:
37:d9:7b:a6:a8:1e:19:95:52:6c:ea:73:81:13:79:51:bd:df:
02:c5:ab:a5:a7:22:e0:3e:9a:1e:6a:b1:fb:ab:04:cc:5d:16:
ab:1e:80:24:97:bd:17:d5:32:ba:a7:6c:b0:60:bd:bf:5a:95:
c1:9d:39:24:a5:51:c4:b4:0e:4a:fd:84:82:d5:db:91:40:43:
56:83:ac:3c:a3:d9:c3:0d:da:34:e6:a3:76:85:b5:04:3c:f1:
b4:e3:c9:a6:95:49:3b:03:2c:be:df:a0:d6:c7:2f:16:85:65:
bb:1b:00:5a:13:7a:b9:9d:43:4a:49:6e:0e:b1:45:c3:dc:c0:
c5:6a:1a:75:f0:cb:1b:8b:86:60:82:ff:57:81:06:8f:b4:52:
6e:6f:88:a1:0e:8c:3b:c1:09:1f:a6:68:d6:a0:96:21:74:fa:
20:97:c7:bb:5b:bc:b9:1b:3c:29:b6:a6:92:3a:78:76:d1:33:
a8:f6:c7:29:93:d8:1b:79:e7:63:b6:3d:b5:1f:cb:8d:1d:9a:
f1:c7:6e:1a:da:61:3f:7e:cf:c9:83:8c:97:35:9c:35:10:2a:
b9:47:03:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org