Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/d9e03c845109647363062d595623f0019082a034.roa
File: d9e03c845109647363062d595623f0019082a034.roa (raw, json)
Hash identifier: bBgBf1JrQyXdCvJniUPVtv3q2OKjNJ/OnFP8RJm7xwg=
Subject key identifier: B9:C0:0A:85:4C:B7:13:29:B8:AA:4D:7C:95:03:30:3F:9A:70:12:52
Certificate issuer: /CN=39a30dc8d9a2613f485c79d6067d35eef4832f3f
Certificate serial: 0540
Authority key identifier: E1:A9:CE:70:6E:1D:BA:C2:75:F7:8D:5A:CA:2B:75:94:C3:A3:57:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39a30dc8d9a2613f485c79d6067d35eef4832f3f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/d9e03c845109647363062d595623f0019082a034.roa
Signing time: Mon 15 Nov 2021 17:25:33 +0000
ROA not before: Mon 15 Nov 2021 03:00:00 +0000
ROA not after: Wed 15 Nov 2023 03:00:00 +0000
asID: 263170
IP address blocks: 192.141.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1344 (0x540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a30dc8d9a2613f485c79d6067d35eef4832f3f
Validity
Not Before: Nov 15 03:00:00 2021 GMT
Not After : Nov 15 03:00:00 2023 GMT
Subject: CN=d9e03c845109647363062d595623f0019082a034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:54:b1:4f:68:64:1d:45:73:31:e5:31:48:
1d:db:01:f0:b8:2b:fa:76:56:f6:77:0a:0e:8e:ac:
35:fb:91:62:c0:d0:0d:31:e7:df:99:d8:d9:88:97:
86:47:13:c5:54:2a:5f:06:aa:43:7d:4c:2e:59:19:
c6:70:5e:a5:19:1b:02:15:38:c4:1e:fb:51:e2:dc:
75:dc:e7:35:74:94:41:52:b0:ac:37:a5:69:a5:91:
9a:0a:2e:1b:01:2f:ff:99:af:c3:14:06:b5:33:09:
22:3b:14:74:65:63:cf:9f:c3:27:6e:21:9b:7d:a5:
26:a8:b5:71:e2:6b:8d:10:74:d1:4f:b7:c6:90:68:
d6:bc:cf:9d:3b:2c:a8:75:89:d7:67:11:88:2c:81:
d9:37:2a:07:ef:68:d3:81:15:34:71:41:a2:d5:c9:
db:2c:14:52:02:8f:dc:76:54:02:e4:bd:37:5a:0b:
ac:8c:1a:4b:d9:a7:76:58:7e:97:5e:41:58:35:4d:
ed:3f:d5:94:33:59:30:da:7c:54:33:1e:7e:87:eb:
fd:1b:c0:82:81:dc:23:fd:d5:26:0e:7d:f4:5e:da:
ff:f7:e4:79:5d:b1:07:6d:4f:ea:73:14:02:32:92:
2c:ac:e6:97:b7:1b:91:f9:8e:87:43:52:f0:14:14:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C0:0A:85:4C:B7:13:29:B8:AA:4D:7C:95:03:30:3F:9A:70:12:52
X509v3 Authority Key Identifier:
keyid:E1:A9:CE:70:6E:1D:BA:C2:75:F7:8D:5A:CA:2B:75:94:C3:A3:57:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39a30dc8d9a2613f485c79d6067d35eef4832f3f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/d9e03c845109647363062d595623f0019082a034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/39a30dc8d9a2613f485c79d6067d35eef4832f3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.4.0/22
Signature Algorithm: sha256WithRSAEncryption
28:eb:95:2c:b6:5a:e7:c6:68:40:85:10:9a:29:65:4b:cb:77:
c6:c6:ea:e8:78:4f:4f:b0:d2:3a:71:19:78:70:4d:66:26:b3:
e3:fc:9c:6f:3c:fb:95:ca:1a:3a:82:eb:c1:00:3d:7d:40:98:
e6:d9:8a:d1:a4:d8:a5:5c:30:0c:88:bb:f5:57:9a:22:42:e2:
ed:45:3b:4c:65:4b:61:89:65:3a:0d:74:b3:72:aa:8c:cb:93:
eb:14:84:7d:6b:83:65:64:40:76:f4:29:a4:ed:1c:ec:3c:44:
cf:97:3b:51:8f:a8:57:46:1f:33:48:bc:71:24:03:85:4f:6f:
ab:6b:1b:7a:5e:44:47:26:80:7e:9b:61:e9:6a:e9:79:36:1b:
a6:46:41:1d:6d:3a:31:7f:18:b1:6b:11:0e:eb:18:de:ae:20:
57:78:7c:05:49:0e:35:c9:6a:28:13:b0:ae:b9:dc:6e:47:c5:
ca:a2:a9:a0:3d:ad:5e:d9:35:cc:d2:a8:e2:c3:63:aa:d8:38:
e2:00:b1:23:7f:7e:b6:05:9c:65:15:a5:6c:37:6b:fb:be:9c:
17:67:9b:3e:a0:bf:1b:2a:c7:76:dc:f0:a5:25:e1:ae:d2:c7:
42:0c:ba:dd:04:8e:7a:26:da:7e:c7:f3:5b:bb:8d:e5:1d:58:
de:a2:c5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org