Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/6ae67ce9d2580d5c40b03758bd072c2d9f6b354e.roa
File: 6ae67ce9d2580d5c40b03758bd072c2d9f6b354e.roa (raw, json)
Hash identifier: i+0gru7njeSK6P4DiZkoTkewBp6fN0tzOe44kWRu9CY=
Subject key identifier: 2A:D8:FD:F2:38:AB:BF:9A:96:B8:86:E3:CA:23:B7:54:37:31:AD:58
Certificate issuer: /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial: 194405
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/6ae67ce9d2580d5c40b03758bd072c2d9f6b354e.roa
Signing time: Wed 13 Jul 2022 12:16:58 +0000
ROA not before: Wed 13 Jul 2022 03:00:00 +0000
ROA not after: Sat 13 Jul 2024 03:00:00 +0000
asID: 10481
IP address blocks: 179.0.14.0/24 maxlen: 24
200.13.42.0/23 maxlen: 24
200.33.82.0/24 maxlen: 24
2801:0:440::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1655813 (0x194405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Validity
Not Before: Jul 13 03:00:00 2022 GMT
Not After : Jul 13 03:00:00 2024 GMT
Subject: CN=6ae67ce9d2580d5c40b03758bd072c2d9f6b354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1b:5e:6b:a5:01:53:43:95:e1:d6:a7:d8:f6:
d7:e3:2d:69:38:38:cf:1a:f6:e4:5d:e7:eb:63:bb:
81:29:5e:11:20:0c:b4:72:f0:e5:37:aa:2b:55:80:
9d:ed:6d:3b:5d:2f:ab:6f:5a:63:13:92:43:f9:5f:
a8:47:91:b8:8a:05:fa:4a:7b:ff:25:d5:a6:d2:92:
81:22:7c:5c:71:e1:51:99:a5:be:c6:01:ed:9a:0a:
35:77:3b:99:57:86:35:4b:6f:f7:a5:8a:31:60:ce:
26:d4:a3:5f:35:b5:91:fe:15:30:44:00:96:7e:2e:
e7:71:cd:88:5a:19:c1:3b:1d:69:23:9b:8e:fc:80:
a0:1c:4e:f0:80:46:57:6f:8d:c7:3f:65:51:ff:e0:
85:22:06:3d:9b:e0:c4:91:40:d1:20:b6:b5:83:63:
df:0d:65:b8:13:dd:99:60:72:60:0b:a8:fd:01:fd:
65:1e:f2:a9:b4:1d:5d:02:86:13:1b:40:04:7e:32:
62:10:56:73:a7:ad:a0:e7:7e:74:11:aa:bf:f5:34:
bf:8d:70:29:49:d9:7a:5b:c3:b8:e3:d4:6c:0f:28:
3c:07:93:e0:93:dd:40:a4:e2:15:57:af:07:8e:1d:
b2:d1:61:b6:f2:b0:06:69:8e:07:69:39:2c:da:a5:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D8:FD:F2:38:AB:BF:9A:96:B8:86:E3:CA:23:B7:54:37:31:AD:58
X509v3 Authority Key Identifier:
keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/6ae67ce9d2580d5c40b03758bd072c2d9f6b354e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.14.0/24
200.13.42.0/23
200.33.82.0/24
IPv6:
2801:0:440::/48
Signature Algorithm: sha256WithRSAEncryption
bb:b7:99:69:7d:df:4d:48:db:d9:f9:00:9a:82:9b:7d:b3:9c:
f6:15:fd:87:d3:b2:d4:0d:8e:b1:14:4e:34:df:18:3c:c8:f7:
47:2f:92:9a:de:7f:2d:c9:64:c0:a8:ae:6b:f0:93:ef:89:a9:
08:87:df:8b:38:2f:ef:9c:4c:7b:b4:6c:64:f3:c7:0e:3e:60:
e1:c3:94:77:6c:0c:8c:a9:b7:7e:29:b2:ee:33:6b:81:ac:93:
95:00:7f:bc:83:b6:f1:e7:86:3f:c4:f8:a3:c2:ae:ee:a4:00:
e3:5b:ba:cd:07:8d:9b:43:1a:80:34:4c:3f:00:fd:25:0f:32:
b2:84:6e:0f:da:c7:9c:37:f9:88:df:56:ef:bb:67:c6:f8:91:
75:50:70:47:11:83:ef:42:c4:6d:26:9e:c7:01:6c:28:66:de:
aa:d0:8e:c1:c9:71:08:bb:13:4e:8f:19:be:f7:aa:ad:49:bc:
d7:48:30:85:50:3a:e0:62:0f:31:db:3f:99:32:ce:c8:0b:fd:
d3:18:02:38:1d:de:30:04:4f:2c:08:a7:ca:0f:fb:cd:ce:5e:
1b:71:5d:44:53:dd:ea:4a:12:fb:d4:78:59:72:7d:f4:ad:15:
57:48:fe:d0:f3:30:1d:b2:12:f9:b6:25:2a:ed:3e:35:ff:cd:
c4:f6:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org