Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/8c1b9525a2de51c784068fd7fad9b740b8488cc1.roa
File: 8c1b9525a2de51c784068fd7fad9b740b8488cc1.roa (raw, json)
Hash identifier: vvtYYyL6lspShshi3X1MXJFR3NRpdopm8PbK5gs/TV4=
Subject key identifier: D0:8A:FB:AB:74:CF:3C:68:CA:C8:AB:01:7F:63:F3:8B:0E:77:8D:EA
Certificate issuer: /CN=4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa
Certificate serial: 0D3069
Authority key identifier: 16:32:85:BE:91:49:B4:FA:01:47:42:4E:C1:3D:94:27:89:1E:13:A1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/8c1b9525a2de51c784068fd7fad9b740b8488cc1.roa
Signing time: Wed 24 Mar 2021 14:39:29 +0000
ROA not before: Wed 24 Mar 2021 14:39:29 +0000
ROA not after: Tue 24 Mar 2026 14:39:29 +0000
asID: 27668
IP address blocks: 191.100.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864361 (0xd3069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa
Validity
Not Before: Mar 24 14:39:29 2021 GMT
Not After : Mar 24 14:39:29 2026 GMT
Subject: CN=8c1b9525a2de51c784068fd7fad9b740b8488cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:bb:59:ac:fe:54:2f:55:f1:34:18:16:f2:
57:14:c1:12:12:4c:41:b1:38:a3:aa:e3:51:cd:6e:
5e:bc:ac:2f:73:77:6b:4c:2d:26:fd:bd:aa:f4:7e:
67:41:6d:48:fe:e5:c3:cc:7d:02:60:de:6e:da:c5:
dc:f8:55:98:8b:33:74:ce:3e:b4:4c:4a:ed:61:84:
89:d0:1e:55:34:59:6b:d6:b4:5a:39:86:da:0b:2e:
e3:1f:42:65:cb:f4:d1:b0:b6:52:30:d4:84:67:69:
3b:04:c2:bc:4f:75:90:76:15:b8:66:da:1d:c6:6d:
5e:77:55:a9:a9:f4:f4:45:67:b9:ad:75:fa:0f:04:
32:82:ff:38:39:94:87:e4:8f:3d:22:5b:3c:48:a6:
e4:04:5c:98:c8:88:f0:6f:60:b7:01:2f:3b:80:29:
3f:64:d7:ef:dd:1d:04:b6:9f:db:2b:79:43:a1:bf:
62:7d:1c:37:97:3b:44:42:d7:be:b9:aa:4e:09:f8:
a8:e1:2b:0d:e9:80:a5:83:45:2a:c5:44:89:30:24:
42:35:bf:81:1e:c1:ff:bb:0d:f1:08:78:85:af:55:
98:9b:18:61:1c:57:44:fe:25:0b:1d:16:da:85:e9:
a2:80:60:7e:a2:0f:75:df:1b:a1:9f:56:da:8c:15:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8A:FB:AB:74:CF:3C:68:CA:C8:AB:01:7F:63:F3:8B:0E:77:8D:EA
X509v3 Authority Key Identifier:
keyid:16:32:85:BE:91:49:B4:FA:01:47:42:4E:C1:3D:94:27:89:1E:13:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/8c1b9525a2de51c784068fd7fad9b740b8488cc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:b5:b4:b2:9f:07:56:54:57:7a:9b:d9:e5:a1:8d:28:13:d3:
54:ee:8a:00:99:41:f4:d1:45:ae:21:25:62:cd:04:7f:05:07:
96:1b:8a:fe:ec:73:f5:55:ca:83:19:dc:63:0e:4b:d6:36:a2:
52:01:eb:90:1c:50:7a:b6:d4:51:af:dd:f8:86:29:16:98:78:
ce:a3:8c:f4:dd:02:0d:d0:14:af:1f:7d:86:c4:e3:b8:cd:87:
76:80:ab:3f:a8:82:40:c5:97:fb:05:47:0c:3b:78:75:70:73:
34:30:72:38:2c:27:19:5a:e0:20:2f:93:41:10:d8:25:26:0b:
1c:7f:9b:39:d9:99:03:7f:2e:f8:b9:b3:53:f2:d3:4f:43:95:
1e:e0:79:7d:cd:56:f8:dd:6f:6a:01:ac:07:a4:36:f7:39:bc:
d0:0d:f6:3c:06:be:4a:6f:9c:3d:af:18:fc:f4:28:0d:4d:e1:
dd:86:e7:b8:e1:96:5e:a7:f3:c6:0e:b7:85:95:7a:b8:f3:94:
52:ee:34:2f:bc:94:b2:65:ee:84:fe:a6:84:f9:6a:9a:5b:c6:
f3:3b:4f:86:82:03:27:9d:d8:f1:9a:9c:ff:30:50:dd:c3:6a:
25:bc:87:a2:28:c9:f3:44:19:66:c6:25:46:02:d9:74:be:10:
0a:f0:a6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org