Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/48ae7ad1b791dae3e08f37773b71d8960a0bfa4e.roa
File: 48ae7ad1b791dae3e08f37773b71d8960a0bfa4e.roa (raw, json)
Hash identifier: UdsziVDfL3RY2DTqHn6JscK9kK5YiBlyaAk3mTbpoUc=
Subject key identifier: 85:EC:09:02:F5:96:E7:B4:CF:C7:5B:D2:46:68:C5:5B:A0:C4:76:D7
Certificate issuer: /CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
Certificate serial: 26ABCE
Authority key identifier: 6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/48ae7ad1b791dae3e08f37773b71d8960a0bfa4e.roa
Signing time: Fri 22 Dec 2023 14:29:04 +0000
ROA not before: Fri 22 Dec 2023 14:29:03 +0000
ROA not after: Mon 22 Dec 2025 14:29:03 +0000
asID: 264746
IP address blocks: 191.97.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2534350 (0x26abce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
Validity
Not Before: Dec 22 14:29:03 2023 GMT
Not After : Dec 22 14:29:03 2025 GMT
Subject: CN=48ae7ad1b791dae3e08f37773b71d8960a0bfa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a1:0c:fd:83:31:e1:67:6b:14:52:e0:ee:a6:
d3:7a:02:8b:70:6d:56:2f:08:6e:e7:26:c9:b6:16:
85:81:4b:a1:61:50:c6:96:05:74:8e:8d:24:47:9f:
b9:44:df:fd:bd:7d:f2:4d:df:85:bc:58:48:1c:19:
ac:45:9b:0f:c3:f1:67:52:43:ee:9c:46:25:3d:e8:
39:22:37:0a:b0:23:8d:3a:20:dc:b5:3c:69:59:9c:
01:5a:e7:ea:36:f0:fc:0a:76:86:89:0e:8b:49:60:
57:93:c4:53:c4:cc:93:70:e8:be:d7:c6:74:09:ed:
da:61:f7:34:80:ec:aa:15:c3:32:20:78:72:ca:92:
64:5b:e9:51:b3:ea:5a:49:2b:76:35:ee:24:4c:2c:
61:22:27:6a:3c:fb:fc:6b:d3:d7:23:d8:4f:48:b9:
cd:23:cc:ab:06:3f:bf:6b:41:f6:0e:91:dc:3b:0a:
52:1f:14:bd:36:4a:06:20:16:0e:46:d0:2d:45:c1:
b5:a7:66:bc:3c:4a:78:bf:d3:4d:e1:63:91:dc:4e:
7d:9c:b2:26:25:b2:bf:a2:8a:01:4d:52:b9:5f:fa:
41:4e:41:ed:a3:19:02:b3:30:ba:70:37:ea:d9:d6:
92:39:c5:f8:3f:b4:0e:63:f3:b6:56:34:00:0f:f6:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EC:09:02:F5:96:E7:B4:CF:C7:5B:D2:46:68:C5:5B:A0:C4:76:D7
X509v3 Authority Key Identifier:
keyid:6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/48ae7ad1b791dae3e08f37773b71d8960a0bfa4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/68f7a0910bc6c4f99cea989c6355a0951ef0b528.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.64.0/22
Signature Algorithm: sha256WithRSAEncryption
19:d0:56:49:ee:da:ef:ef:00:80:97:2d:fb:0e:b1:04:c7:55:
69:e2:c5:64:dc:e8:c3:db:a4:b8:13:dd:18:c7:cb:5f:4c:57:
fb:6e:3b:81:ef:27:23:19:40:a5:32:45:f7:c2:5b:63:4a:1a:
bd:bb:f8:8f:a4:5a:e8:e3:c1:50:6e:b5:38:dc:81:0d:38:03:
70:5f:1b:26:4a:49:4f:bf:d8:35:23:c3:7d:80:e7:e0:ad:19:
43:b1:06:61:51:f1:ad:ae:c0:b4:9e:4f:0a:86:23:c1:c6:26:
7c:05:ce:5e:4c:64:fe:a3:e7:ad:0a:15:f2:c5:d1:bd:60:02:
2a:28:a8:15:ac:4d:df:95:66:cb:18:ac:d8:9c:43:f8:a6:cd:
78:cf:ab:97:14:42:d6:56:bd:8c:59:6b:b1:2f:b4:7b:df:07:
3c:ce:ee:b2:7c:f7:8d:bf:65:13:eb:b1:8a:e5:19:67:97:d6:
9a:1d:77:59:5a:5b:6d:ed:54:62:76:10:52:b8:f0:3a:5e:cf:
05:9e:86:89:5e:d9:27:21:1f:75:e9:44:b8:92:39:81:c4:80:
a7:fa:86:99:37:5a:37:b7:bf:a3:90:27:5e:99:23:d7:ea:17:
fc:2c:8a:ae:46:8e:b5:37:1a:d7:46:67:f4:67:f4:8c:c8:c0:
f4:64:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org