Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/95eaf9c257b17ffb16a230fdfff54e985072a462.roa
File: 95eaf9c257b17ffb16a230fdfff54e985072a462.roa (raw, json)
Hash identifier: +p7veIH4ooca7Zj3hWiaAxh+/BgFEsbylM6wYr2UaGU=
Subject key identifier: 85:85:F5:F1:6E:71:E4:7F:2A:16:6F:F0:54:C0:34:8D:1E:DC:3F:40
Certificate issuer: /CN=8634873a21a0af40a01354647ad4978d3847d365
Certificate serial: 228E9F
Authority key identifier: 0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/95eaf9c257b17ffb16a230fdfff54e985072a462.roa
Signing time: Tue 27 Jun 2023 16:32:37 +0000
ROA not before: Mon 26 Jun 2023 16:32:37 +0000
ROA not after: Fri 27 Jun 2025 16:32:37 +0000
asID: 28058
IP address blocks: 179.60.48.0/20 maxlen: 24
200.105.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264735 (0x228e9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634873a21a0af40a01354647ad4978d3847d365
Validity
Not Before: Jun 26 16:32:37 2023 GMT
Not After : Jun 27 16:32:37 2025 GMT
Subject: CN=95eaf9c257b17ffb16a230fdfff54e985072a462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:55:f8:8a:32:d9:8a:ab:cb:8e:27:4e:96:
59:c2:75:8f:48:f1:57:3c:33:66:32:9f:13:fc:52:
41:01:08:30:f3:45:7e:ff:16:fa:a2:d5:72:61:2a:
9b:e2:c7:2b:44:6f:39:9a:f2:a0:2c:6a:71:11:d7:
e3:27:89:6e:cb:96:ba:b3:45:96:1c:36:ad:c9:ed:
b7:d1:94:e2:0c:a8:e5:ec:f3:15:09:05:42:4a:6c:
89:05:c3:13:38:8d:74:64:a8:e7:e2:ef:b0:03:77:
48:cb:a6:6e:18:4c:3c:a9:25:90:1e:15:bd:05:dd:
1d:ef:81:8f:e2:b4:44:30:9f:3d:78:5f:66:c7:fa:
3b:6c:27:a0:68:e3:81:81:73:47:f2:4a:aa:c5:db:
ec:2f:2f:0c:30:aa:7d:4c:9f:71:9b:1f:8d:92:6a:
19:2f:1c:d3:b9:ea:25:5a:47:2d:3b:05:a3:fc:60:
4d:75:8a:b5:1d:df:70:b6:3c:f0:9c:ea:ab:f1:0f:
29:df:59:0a:ea:d3:b8:84:b8:76:73:99:d8:c5:ac:
fd:f3:5f:ab:2d:f6:2a:25:63:8f:4d:61:46:60:6b:
3c:7d:31:8b:3d:65:73:1d:ad:e0:ed:45:27:56:33:
57:a5:89:88:96:ca:51:2e:7c:54:e2:74:67:db:74:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:85:F5:F1:6E:71:E4:7F:2A:16:6F:F0:54:C0:34:8D:1E:DC:3F:40
X509v3 Authority Key Identifier:
keyid:0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/95eaf9c257b17ffb16a230fdfff54e985072a462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.48.0/20
200.105.112.0/21
Signature Algorithm: sha256WithRSAEncryption
12:0b:a4:d0:85:a9:4b:18:04:cf:5e:63:76:d0:1a:f9:b6:08:
ea:f0:e1:49:16:99:9e:11:9a:07:6a:df:a2:9b:03:a8:41:33:
ea:2a:cf:71:64:fa:bc:9c:b4:8c:e8:79:53:2e:05:ff:dd:82:
fc:f8:e8:81:db:02:df:b0:8d:a3:0d:06:31:57:e3:45:96:6a:
34:a1:7a:b0:8d:1b:6e:95:8f:59:09:96:2d:6f:99:fc:21:d4:
15:4f:de:53:38:8a:dd:cd:65:d4:56:bb:e0:ae:9d:ba:c7:f4:
59:90:f5:61:d1:02:fa:dc:9a:cc:87:93:7e:7b:84:d2:84:9b:
5c:0d:c1:30:e8:3a:7d:58:b3:fe:94:53:17:92:fb:e7:aa:96:
23:e3:92:92:14:87:a6:70:89:ba:33:95:a0:75:93:be:19:07:
bf:31:91:3a:a1:bc:7a:e6:ae:53:44:1f:13:32:7f:cd:62:e9:
bc:22:b4:f6:d4:b5:e7:b7:44:36:be:50:86:9e:29:4d:d8:da:
3a:1f:99:31:e4:17:50:6a:9c:c5:87:85:f4:f8:aa:af:27:33:
72:a0:b5:66:03:be:f5:ec:49:81:e1:d7:91:6f:62:25:18:40:
b2:00:c7:fa:62:f4:2f:3a:e4:5a:44:48:0b:53:0d:4a:26:ed:
ce:73:a8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org