Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/677c39959be330812b2cc5468a107b481de8d1da.roa
File: 677c39959be330812b2cc5468a107b481de8d1da.roa (raw, json)
Hash identifier: 5nzY/xCGmnENHM3sLn1VowkpvEAtDgYKOYJ/Yj8+1m4=
Subject key identifier: D5:C7:41:C5:37:12:93:37:39:E4:8A:1E:A3:AF:07:25:85:69:71:2C
Certificate issuer: /CN=b14932b827e5b166c58065cb1f4068a039d95258
Certificate serial: 0DEEE9
Authority key identifier: D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/677c39959be330812b2cc5468a107b481de8d1da.roa
Signing time: Wed 24 Mar 2021 14:33:06 +0000
ROA not before: Wed 24 Mar 2021 14:33:06 +0000
ROA not after: Tue 24 Mar 2026 14:33:06 +0000
asID: 28094
IP address blocks: 131.161.148.0/22 maxlen: 22
200.123.208.0/21 maxlen: 21
2803:7900::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913129 (0xdeee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14932b827e5b166c58065cb1f4068a039d95258
Validity
Not Before: Mar 24 14:33:06 2021 GMT
Not After : Mar 24 14:33:06 2026 GMT
Subject: CN=677c39959be330812b2cc5468a107b481de8d1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:76:38:4d:42:7a:b5:d8:1e:e3:a6:3c:8a:
b6:b6:b0:93:39:68:87:eb:e9:67:bc:92:19:5c:d6:
80:6d:6a:c5:bd:d3:25:73:df:5c:a9:09:2d:c8:a9:
f6:d1:8a:15:f6:22:d7:86:55:4d:08:38:63:fb:e1:
54:8a:e5:cf:61:27:db:39:7e:ac:7b:7d:0c:81:2c:
86:07:cf:e8:27:24:6b:19:bf:96:aa:0f:f9:b2:7e:
71:1c:0f:7d:17:6c:8b:8e:e3:39:16:1a:1d:57:28:
e2:de:0e:54:84:6d:d8:e2:cc:6b:2b:89:aa:ea:e3:
87:68:fe:21:f9:a3:8f:da:19:06:c8:a2:57:42:01:
87:34:91:0a:02:dc:21:b4:73:8c:4f:a7:28:e3:61:
d6:e6:1e:e2:89:48:aa:ec:bc:2f:c6:38:f4:aa:4d:
b3:5e:68:20:2e:27:66:ef:7e:36:20:02:03:59:8f:
7c:91:a9:ef:a7:97:da:14:e9:03:36:05:6b:6e:d7:
60:12:58:49:52:52:7e:c8:5a:b9:8e:e9:00:54:82:
f2:5c:90:a5:ff:06:7f:3f:6e:64:21:e3:cc:d9:a9:
e7:4c:92:46:fc:9c:12:22:f2:cc:da:b2:24:1a:c5:
84:c0:10:a9:b8:14:07:4e:3a:8e:ff:fd:e7:f5:a9:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C7:41:C5:37:12:93:37:39:E4:8A:1E:A3:AF:07:25:85:69:71:2C
X509v3 Authority Key Identifier:
keyid:D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/677c39959be330812b2cc5468a107b481de8d1da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/b14932b827e5b166c58065cb1f4068a039d95258.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.148.0/22
200.123.208.0/21
IPv6:
2803:7900::/32
Signature Algorithm: sha256WithRSAEncryption
8e:81:f2:66:47:01:ec:24:4c:33:96:b2:69:4b:1f:a1:31:ac:
09:05:10:9c:d9:52:b3:82:3c:89:32:aa:f4:5a:35:3a:7e:6d:
7a:77:91:22:b2:a7:72:b0:7d:e8:2d:93:d7:75:f9:14:d4:07:
69:39:11:b4:43:47:4e:ff:77:c1:15:56:d2:77:79:3d:90:38:
0c:3c:3d:78:4b:df:55:01:68:59:1c:3c:d1:4c:ab:88:23:53:
43:ba:8e:56:b9:05:0c:29:d8:9a:b8:56:ab:05:62:2a:3e:a0:
95:34:d7:bb:f2:91:14:c2:66:15:c6:27:fe:9b:5f:1f:35:67:
ab:78:d2:c4:09:1a:1f:16:c1:fb:04:44:33:43:a6:09:07:cd:
dd:02:e1:1f:03:53:cd:2e:d1:00:ba:e3:46:f7:a7:74:16:20:
ea:78:04:41:2b:ee:91:d3:53:75:89:94:ff:cd:09:f0:7d:62:
73:2e:31:fc:90:7f:2e:fd:71:f4:50:9b:15:46:36:5b:cc:0d:
ed:a3:f9:e8:60:b8:0a:5b:57:5e:12:cc:78:c6:13:3c:3d:e3:
97:9d:f7:f3:24:75:57:29:e7:da:87:7f:0f:52:e4:1c:f5:10:
fc:26:8b:6a:2d:09:4e:e1:14:74:aa:1e:99:ea:b5:40:7e:30:
5b:5b:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org