Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3c49bc583560e16131ccf7f710de9a55a3d01e21.roa
File: 3c49bc583560e16131ccf7f710de9a55a3d01e21.roa (raw, json)
Hash identifier: OgzLEN5vVVU7CgrFnR99ftoFoTxwxAb8ORbL/siDIQ4=
Subject key identifier: FC:62:4F:4A:9B:50:DE:10:57:1A:FF:41:22:11:18:58:48:87:25:F2
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 287EF9
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3c49bc583560e16131ccf7f710de9a55a3d01e21.roa
Signing time: Fri 03 Nov 2023 14:13:08 +0000
ROA not before: Fri 03 Nov 2023 14:13:08 +0000
ROA not after: Mon 03 Nov 2025 14:13:08 +0000
asID: 3816
IP address blocks: 191.106.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2653945 (0x287ef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Nov 3 14:13:08 2023 GMT
Not After : Nov 3 14:13:08 2025 GMT
Subject: CN=3c49bc583560e16131ccf7f710de9a55a3d01e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:fe:eb:af:8d:0b:30:b6:ed:97:3a:d4:b2:
98:f3:e6:97:73:c9:d8:c9:39:f6:d6:85:10:f7:8d:
e6:23:21:09:df:c1:23:a9:47:6d:c3:98:92:8d:54:
d5:39:ba:8e:77:0f:52:8b:cd:d5:31:38:17:f2:a3:
48:a0:19:28:02:bf:c7:3a:b9:5d:5f:e0:e4:8e:2c:
66:78:17:5f:a6:88:98:37:c3:03:4c:91:35:7f:ba:
f2:a6:eb:60:86:bd:77:7e:32:0e:95:3f:6c:02:22:
5c:42:ae:ca:ea:49:69:84:1a:45:ae:38:c2:75:f7:
4c:a6:dc:2b:4f:2a:d7:d5:1a:4d:41:68:fc:63:e4:
f6:c5:a5:e5:99:45:f5:2b:e4:fb:12:7c:ff:63:33:
c0:28:b5:9c:07:48:d7:b9:f5:7b:f6:aa:6e:d7:5d:
59:04:15:b4:7c:9e:35:40:b6:3e:42:1d:e8:50:2a:
e5:1b:07:7b:91:30:d4:0e:64:f6:d9:da:0e:6f:b6:
a7:2c:b5:24:e3:6a:22:25:36:f2:ae:70:3f:4e:c1:
69:6d:b1:c9:0c:96:62:66:76:6b:50:73:2e:94:f4:
db:e7:fa:1a:c1:96:8a:7d:32:91:33:55:0b:51:eb:
fa:91:33:0c:d5:04:59:5c:fa:26:2a:e5:8d:b3:de:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:62:4F:4A:9B:50:DE:10:57:1A:FF:41:22:11:18:58:48:87:25:F2
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3c49bc583560e16131ccf7f710de9a55a3d01e21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.106.0.0/17
Signature Algorithm: sha256WithRSAEncryption
4d:71:4b:77:ae:6c:bb:49:9a:3a:0c:d8:5c:e0:2b:e1:ff:a6:
fd:05:0b:5c:c5:b7:9e:d2:3e:8c:2c:fa:41:c2:65:c3:ab:7f:
b1:6c:ac:6d:7d:f4:2a:a3:1c:85:35:47:d9:82:b8:15:b0:50:
41:23:f9:fe:79:f0:5e:ce:af:af:84:be:1b:ff:66:3b:b4:ec:
e6:d9:69:73:e0:dc:26:8c:f6:d1:12:b6:a7:75:d1:f2:98:98:
6d:c5:1c:16:76:03:a4:aa:a3:59:c0:cf:a7:ee:8c:cd:e4:4a:
55:26:1a:29:d1:0d:77:df:e5:fb:36:be:a1:d0:12:ab:02:fb:
a8:60:f1:56:89:a3:56:34:6f:35:f7:98:c9:da:30:23:38:61:
1e:6a:26:83:d9:b7:81:08:e7:0e:ad:b4:9c:32:98:e7:9d:cb:
74:36:92:00:fa:0a:60:c3:5e:4b:13:53:ee:39:58:85:a9:78:
a0:7f:a4:8e:45:a3:91:97:c1:ae:d0:99:88:61:fd:d7:24:33:
2f:ce:00:62:cc:2c:46:55:89:e7:93:e7:50:da:ff:60:9a:15:
44:05:88:83:3d:64:b4:33:0e:e2:7b:1c:3f:b0:c7:64:13:57:
40:67:40:c2:12:07:4e:14:cb:c9:f3:ca:3a:21:8f:cc:ef:5a:
8d:62:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org