Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f62ed58f77d96a0a3b193cda690b999b28ecff77.roa
File: f62ed58f77d96a0a3b193cda690b999b28ecff77.roa (raw, json)
Hash identifier: xiMDemDjIoXd7jDUwWcmsXklhnohbranJACPRP6FM8g=
Subject key identifier: A1:43:A2:B2:46:85:DC:CD:F8:4C:9F:97:B4:90:32:3C:07:48:E7:28
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 2882EE
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f62ed58f77d96a0a3b193cda690b999b28ecff77.roa
Signing time: Fri 03 Nov 2023 14:15:36 +0000
ROA not before: Fri 03 Nov 2023 14:15:36 +0000
ROA not after: Mon 03 Nov 2025 14:15:36 +0000
asID: 3816
IP address blocks: 186.171.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2654958 (0x2882ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Nov 3 14:15:36 2023 GMT
Not After : Nov 3 14:15:36 2025 GMT
Subject: CN=f62ed58f77d96a0a3b193cda690b999b28ecff77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:f3:18:7c:5c:d0:64:d6:ce:7a:6e:9b:3b:
7f:a2:ce:a3:b4:ec:c6:ed:e3:2f:6f:19:49:b8:7f:
ca:18:3a:25:21:52:1b:ae:ed:c9:49:f1:a8:38:84:
d5:59:a8:9d:cd:d1:25:87:9e:c6:31:cb:fd:75:b1:
30:32:96:bc:dc:7e:a6:c4:35:ce:be:3a:72:41:4f:
6f:71:0f:69:2a:61:b5:4c:58:e4:aa:04:d8:86:fa:
4a:2f:78:fb:21:eb:bd:a2:52:d4:9c:ba:ff:92:0c:
c3:6e:06:c6:ad:7f:29:58:f9:e6:8c:6a:68:5c:da:
d2:f6:91:a0:5b:59:3a:c5:be:0d:5c:aa:12:0e:6f:
02:c9:57:5a:8a:fe:2d:82:dc:49:68:04:54:25:20:
de:a6:7d:0c:71:f8:d3:d4:d5:5f:56:68:68:40:81:
39:92:a3:b1:04:48:54:a0:62:cf:bb:58:8f:3e:52:
89:fc:7e:f2:1a:1b:3f:23:05:ec:b8:b2:1f:47:63:
8d:e9:d6:8b:e3:e9:9f:fb:e6:a7:1e:2e:f6:b1:35:
22:7a:ae:3a:d6:45:ad:7d:97:40:82:8f:49:6d:62:
90:54:83:ca:08:a5:27:de:15:5f:1b:72:ba:4c:2a:
dd:1f:82:f2:af:46:ec:80:a8:e7:d4:66:38:7d:e2:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:A2:B2:46:85:DC:CD:F8:4C:9F:97:B4:90:32:3C:07:48:E7:28
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f62ed58f77d96a0a3b193cda690b999b28ecff77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.171.128.0/17
Signature Algorithm: sha256WithRSAEncryption
68:1a:e3:74:f1:44:da:01:cb:9a:48:0f:2c:c1:29:1a:a5:6b:
53:55:8e:c1:70:ad:de:67:ed:fa:f7:4b:af:d3:60:94:4c:c9:
c5:2f:bb:66:ed:cb:c0:85:ac:20:91:e7:63:f9:66:43:53:2a:
5c:cd:1b:8e:6f:f2:50:bd:45:c4:83:85:d4:43:ba:d0:d9:ce:
0b:b3:9f:3d:54:cf:62:8c:7f:82:fe:86:d1:66:3c:4e:bc:87:
4a:23:f5:7b:52:5b:7d:bc:8f:8c:4f:4f:58:f1:06:65:73:bd:
98:f7:d2:2b:6d:c6:dc:6a:e9:9a:e7:0c:ec:44:23:17:d6:d8:
99:c5:82:09:07:2d:a4:e7:fa:88:41:8d:e8:a6:22:e3:99:21:
e2:9a:ea:c8:94:e6:5f:69:1a:11:21:3f:9a:76:c6:fe:74:df:
05:12:75:f3:ee:21:9e:9c:72:34:ab:36:eb:60:8b:1e:ca:16:
99:c7:d9:67:e5:c9:0a:3d:50:20:5e:88:81:a8:ae:71:24:8b:
4e:e5:6a:a7:9b:1f:e2:0c:e9:52:b1:05:c1:fe:9b:c2:3c:75:
99:2c:fe:db:30:5c:44:a6:0c:5f:fc:11:45:38:6c:9e:f1:18:
5b:59:e9:f3:57:27:fb:f0:86:e8:9c:23:4a:31:a2:61:ff:07:
91:09:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org