Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/687e49926cc5601ef90f46c9cc64c2e9b43f512c.roa
File: 687e49926cc5601ef90f46c9cc64c2e9b43f512c.roa (raw, json)
Hash identifier: etIUc1H1utuU+L5H24UNi1OfFHeCNhfktdqp/vkmE6A=
Subject key identifier: 76:FB:88:CF:E4:33:FB:13:97:A3:72:BF:E5:25:A3:81:18:2B:19:7E
Certificate issuer: /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial: 2A472B
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/687e49926cc5601ef90f46c9cc64c2e9b43f512c.roa
Signing time: Wed 14 Feb 2024 13:39:39 +0000
ROA not before: Wed 14 Feb 2024 13:39:34 +0000
ROA not after: Wed 14 Feb 2029 13:39:34 +0000
asID: 393629
IP address blocks: 201.221.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2770731 (0x2a472b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Validity
Not Before: Feb 14 13:39:34 2024 GMT
Not After : Feb 14 13:39:34 2029 GMT
Subject: CN=687e49926cc5601ef90f46c9cc64c2e9b43f512c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:78:cc:1c:e4:9f:27:2d:72:b6:06:65:26:
bd:ba:2b:e1:78:16:7b:de:a8:7f:92:ee:eb:f7:dd:
6b:b7:a6:dd:a0:44:bd:fc:f4:e1:d4:74:9e:b5:72:
69:6e:86:b6:b7:15:5d:ee:4d:11:ec:5f:86:c5:3e:
9a:5a:8e:d0:5a:2a:fa:cb:ea:46:61:6f:6d:c6:d5:
43:be:32:bc:e5:23:10:3e:85:51:75:34:ec:d2:85:
45:ac:50:f6:30:e4:7b:0b:4b:81:60:a2:5b:13:fc:
8b:df:0a:97:bf:95:9d:35:97:1c:82:aa:a5:24:6b:
08:a5:d1:1f:1b:7e:3f:94:93:39:29:0b:75:6b:92:
b1:c8:ef:fe:f1:79:67:21:d1:d2:3a:5d:aa:e2:fc:
76:40:c9:e8:78:96:f6:eb:93:f2:84:c1:8e:a1:4b:
2d:c1:fe:31:f3:ae:20:ab:f7:04:e7:7c:2a:d7:02:
51:b0:fe:08:78:b8:c8:de:fb:ee:a0:53:7f:50:e8:
62:68:4c:61:b3:4c:f0:85:cd:d7:7f:08:c5:28:18:
0d:80:7f:f2:2b:3a:b1:81:20:58:7b:e2:57:c8:0b:
5d:54:ec:35:78:70:1f:b8:85:8c:5c:1f:8d:86:4d:
5d:cf:81:f0:18:bf:66:42:b4:56:1d:0f:88:99:43:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FB:88:CF:E4:33:FB:13:97:A3:72:BF:E5:25:A3:81:18:2B:19:7E
X509v3 Authority Key Identifier:
keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/687e49926cc5601ef90f46c9cc64c2e9b43f512c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.88.0/22
Signature Algorithm: sha256WithRSAEncryption
70:a5:10:d3:78:82:8a:62:9e:b0:ac:18:3f:e4:01:ce:59:51:
93:f7:11:ee:c1:36:7a:89:72:16:f8:4a:5a:b8:39:a9:60:77:
34:ef:5e:0e:d8:c4:c6:ec:30:0d:31:2e:7a:3e:4f:8d:fe:15:
93:71:77:ce:2c:03:9d:fd:7a:68:2a:b3:e9:eb:72:23:9a:ea:
fc:4d:8d:ac:ee:3d:45:0d:a6:a5:ab:9e:7b:5b:49:3b:1c:9f:
99:d2:16:25:df:ac:8a:3c:5c:d3:59:74:ca:dc:c1:b1:4f:56:
4c:ac:ae:a2:28:79:e4:0a:ff:f9:f0:a5:ec:3c:47:1d:90:b7:
fc:69:9a:c6:54:66:de:d3:9c:bb:90:4c:e7:3f:ed:30:3f:a1:
03:42:7b:37:55:66:45:14:70:28:52:87:4a:61:3c:5f:20:e1:
32:06:67:7f:24:c0:4b:e7:9a:9f:c2:ae:78:52:53:fe:7b:06:
3c:01:06:7c:db:c5:06:06:31:08:a1:2e:1c:50:8e:c5:8e:e6:
5e:db:6a:df:7c:3c:0d:11:19:dd:58:c3:49:85:fa:22:02:e0:
50:06:e6:d0:ce:7b:e4:41:34:4b:44:0f:e6:4b:31:95:a4:d1:
a1:8f:9a:e8:4e:6d:3c:fb:bd:5e:ae:d6:7f:b9:2d:28:ec:46:
6b:a4:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org