Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/4a472b2e1610b0efdddcb1b1f06d2a0cacca33e9.roa
File: 4a472b2e1610b0efdddcb1b1f06d2a0cacca33e9.roa (raw, json)
Hash identifier: JFQXy88GN5nbLdjLmbMWJzTk+mFzNupQYePoHwhjGvc=
Subject key identifier: 9D:C1:3D:9A:45:C8:A2:DE:98:2B:3F:D4:74:6E:15:2B:77:BC:A2:C8
Certificate issuer: /CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
Certificate serial: 0D3CC9
Authority key identifier: FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/4a472b2e1610b0efdddcb1b1f06d2a0cacca33e9.roa
Signing time: Wed 24 Mar 2021 14:34:00 +0000
ROA not before: Wed 24 Mar 2021 14:34:00 +0000
ROA not after: Tue 24 Mar 2026 14:34:00 +0000
asID: 267848
IP address blocks: 190.97.168.0/24 maxlen: 24
190.97.169.0/24 maxlen: 24
190.97.170.0/24 maxlen: 24
190.97.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867529 (0xd3cc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
Validity
Not Before: Mar 24 14:34:00 2021 GMT
Not After : Mar 24 14:34:00 2026 GMT
Subject: CN=4a472b2e1610b0efdddcb1b1f06d2a0cacca33e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:6d:05:ff:a9:d7:e9:48:ec:46:c2:16:60:
be:4b:0a:72:ab:5f:34:77:bb:fc:fe:10:ba:4d:f7:
3c:fc:b2:7f:96:c6:0c:0e:b1:4f:87:c8:df:85:4c:
9d:f8:83:e8:96:86:50:70:2e:ff:c7:e6:8b:d8:7c:
64:c2:69:36:d9:ea:78:ed:40:72:1b:dd:ce:f0:21:
22:ec:b3:fe:d4:b7:5f:c8:b4:bf:27:0d:14:ed:50:
01:d2:d0:dd:06:b1:6a:98:91:59:3d:1a:c8:a7:a9:
ec:a4:de:44:90:0a:b2:23:9b:53:bc:88:f2:23:cc:
68:58:6e:48:8c:00:ed:13:e9:35:4a:59:2f:cb:34:
a8:40:df:9c:5c:f0:2a:3a:91:22:3d:3b:e8:e5:b4:
7c:6d:78:09:eb:26:3e:b8:37:16:4b:86:f8:78:74:
a1:52:2a:05:b4:45:dd:a4:3b:d2:13:03:a7:a0:51:
f6:85:51:38:e4:bd:3c:d6:70:2c:a4:f2:ce:39:cd:
02:a1:6f:5b:af:e5:eb:e5:e4:11:a2:84:59:1d:98:
e6:93:e9:e7:f3:16:4f:75:38:e5:a2:a0:e9:65:f5:
af:73:47:8b:4f:74:41:37:32:af:7d:6e:35:71:61:
ef:fc:f1:af:18:d8:6a:25:31:d9:ec:f7:b4:50:58:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C1:3D:9A:45:C8:A2:DE:98:2B:3F:D4:74:6E:15:2B:77:BC:A2:C8
X509v3 Authority Key Identifier:
keyid:FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/4a472b2e1610b0efdddcb1b1f06d2a0cacca33e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.97.168.0/22
Signature Algorithm: sha256WithRSAEncryption
13:52:f2:6d:32:f1:0b:4c:61:a7:5b:7c:f5:5d:50:50:ca:69:
97:39:8c:de:8a:fe:60:f7:af:f7:51:f9:c8:5a:3a:94:48:e7:
7b:fd:5f:92:db:64:91:b1:9d:a0:75:e5:29:b8:b1:72:a0:58:
cd:1a:02:14:6c:1e:04:91:4a:40:ef:94:d4:e4:da:ed:79:d0:
8b:84:83:68:9b:32:0a:e5:28:64:60:54:ba:dc:22:04:d6:bc:
a2:b1:a5:51:f0:72:5d:3d:3b:e6:96:0b:05:a3:03:e3:37:e0:
b4:ab:06:41:c9:fa:dd:c9:d3:3e:07:06:69:77:48:89:16:52:
44:b8:0e:8a:9a:4d:22:81:fe:11:81:4e:db:d6:c0:35:8b:dd:
1b:c3:35:63:18:43:97:74:cc:0f:91:78:9d:63:9c:59:e8:42:
0e:14:80:6d:44:96:66:6c:4e:d2:fc:d5:cc:1c:7b:5f:a0:6a:
47:88:48:39:3e:50:fc:15:3b:7e:94:4e:b3:e8:cc:c1:bc:48:
77:f4:bf:68:57:4d:1f:ae:9c:3d:3b:09:67:38:54:7a:b7:80:
4d:f1:de:60:ba:57:ad:c5:c3:51:78:df:b9:48:44:05:8d:31:
9e:4f:54:11:f9:22:67:3e:dd:3c:fe:16:14:0a:46:a8:fe:76:
6d:95:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org