Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/b1c5c8c6061da548d74c1d3529c4399f5c6a0ece.roa
File: b1c5c8c6061da548d74c1d3529c4399f5c6a0ece.roa (raw, json)
Hash identifier: RqYx2i8F9SObo7lNPq/0p8T2QmUVIQcADBx3MYQdhXo=
Subject key identifier: CE:66:EE:1F:D1:8F:AA:2D:77:5D:94:B1:14:89:4C:94:60:E0:9D:E7
Certificate issuer: /CN=6e441519e30664b9a2cdf15d20d8d69bd047094c
Certificate serial: 0DB79D
Authority key identifier: 1E:C7:DD:A2:F2:D1:31:03:71:3E:37:DE:2B:7B:9A:D4:0F:5A:20:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e441519e30664b9a2cdf15d20d8d69bd047094c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/b1c5c8c6061da548d74c1d3529c4399f5c6a0ece.roa
Signing time: Wed 24 Mar 2021 14:38:25 +0000
ROA not before: Wed 24 Mar 2021 14:38:25 +0000
ROA not after: Tue 24 Mar 2026 14:38:25 +0000
asID: 46198
IP address blocks: 131.221.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898973 (0xdb79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e441519e30664b9a2cdf15d20d8d69bd047094c
Validity
Not Before: Mar 24 14:38:25 2021 GMT
Not After : Mar 24 14:38:25 2026 GMT
Subject: CN=b1c5c8c6061da548d74c1d3529c4399f5c6a0ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:8c:c4:38:d0:f0:47:2d:c7:fe:a3:7a:8e:
74:c4:cb:0b:43:c8:84:3d:6b:01:2e:7f:01:0e:01:
07:04:ed:c2:30:d1:b9:26:57:e6:51:75:01:cc:42:
ab:da:20:69:8c:6b:86:b7:5c:ec:24:2c:fa:f3:14:
f8:dd:49:63:6e:4d:c3:97:e6:0c:e3:49:d0:d2:b2:
61:ad:2c:0c:54:76:d6:83:d1:8f:d4:9f:cb:ac:ba:
ce:d0:c7:86:3c:d4:78:ad:12:45:cc:3c:d1:ba:95:
56:a4:4b:31:81:42:2b:18:52:93:18:c3:57:14:af:
a0:c6:c8:32:47:1e:4e:a3:77:0c:99:50:23:93:e3:
39:77:52:c0:b1:82:b9:36:92:80:fd:79:43:86:f2:
10:ad:6a:20:85:21:29:ca:5e:ac:bc:dd:50:7c:37:
2f:38:0c:64:eb:24:62:1e:2d:29:63:e4:82:6a:9f:
26:1e:48:04:52:2d:ac:7e:7e:bd:9f:5d:d3:0c:78:
16:47:63:e0:d6:b9:72:86:63:ae:6e:79:eb:f4:2a:
b7:cf:68:35:ea:18:0c:4f:d6:e0:69:6e:77:8e:75:
7c:75:83:90:48:55:68:8f:06:aa:ec:8b:a8:20:c2:
36:72:2b:8b:bf:42:c5:dd:26:a2:65:d8:5a:49:81:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:EE:1F:D1:8F:AA:2D:77:5D:94:B1:14:89:4C:94:60:E0:9D:E7
X509v3 Authority Key Identifier:
keyid:1E:C7:DD:A2:F2:D1:31:03:71:3E:37:DE:2B:7B:9A:D4:0F:5A:20:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e441519e30664b9a2cdf15d20d8d69bd047094c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/b1c5c8c6061da548d74c1d3529c4399f5c6a0ece.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/6e441519e30664b9a2cdf15d20d8d69bd047094c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.4.0/22
Signature Algorithm: sha256WithRSAEncryption
27:6c:23:a7:6e:fe:68:09:ed:2c:ed:1f:47:42:ad:b4:16:eb:
a2:d0:39:0e:f2:66:30:ae:c1:78:89:27:26:77:15:5a:41:a6:
87:18:15:60:f5:50:6e:4d:7b:95:45:5e:09:16:39:49:c6:a2:
3e:94:8e:65:bc:5b:03:1b:ee:cb:71:ed:92:51:40:93:18:f3:
84:ef:b7:6c:89:c3:94:40:fa:9d:c8:b0:9e:c5:d8:be:1d:a1:
c6:37:8d:82:fc:4e:bb:88:97:6d:2a:d9:f3:2b:15:07:e1:b1:
4e:9e:11:bf:3e:84:46:e7:7b:06:38:ad:3b:3c:22:1a:b8:01:
94:1f:5e:a6:81:fa:c6:05:f4:79:45:b1:d9:a0:76:65:98:26:
54:32:66:5b:aa:29:4c:aa:67:b3:0c:55:47:20:85:38:7b:f3:
9c:eb:69:63:9e:31:ba:be:c5:e3:31:be:82:28:e2:32:3f:1d:
1a:c8:3e:c3:b8:40:6e:3a:02:ae:21:7e:99:e8:b2:9d:40:78:
c5:71:d1:8d:5b:8d:39:e3:51:c9:0d:e3:5a:27:18:ee:ba:5e:
64:76:8e:6f:4a:35:59:30:67:56:ef:9c:b8:2b:3b:21:71:a9:
f0:80:f8:cf:08:c8:a5:47:52:27:d2:73:84:21:16:f2:ef:bc:
f1:6c:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org