Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/3d879e034b6d71114db9176ede3ccac6f78b71f4.roa
File: 3d879e034b6d71114db9176ede3ccac6f78b71f4.roa (raw, json)
Hash identifier: zekW9HMcgzQMw07VRCGh3ElmgcZ0ZlXTNzCeRRfCVaQ=
Subject key identifier: 68:5D:5D:B0:E0:E4:AE:86:24:6A:83:32:0F:4C:E9:F0:B2:20:69:DE
Certificate issuer: /CN=063c6924e8891b8dd6d9889adcc8e4154f3f02c4
Certificate serial: 18A985
Authority key identifier: 13:EE:C7:A5:32:52:23:CB:DF:6D:3D:07:81:C3:95:16:AE:FD:BF:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/3d879e034b6d71114db9176ede3ccac6f78b71f4.roa
Signing time: Wed 09 Aug 2023 15:47:31 +0000
ROA not before: Tue 08 Aug 2023 15:47:30 +0000
ROA not after: Sat 09 Aug 2025 15:47:30 +0000
asID: 270049
IP address blocks: 131.161.220.0/22 maxlen: 24
2803:ade0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1616261 (0x18a985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c6924e8891b8dd6d9889adcc8e4154f3f02c4
Validity
Not Before: Aug 8 15:47:30 2023 GMT
Not After : Aug 9 15:47:30 2025 GMT
Subject: CN=3d879e034b6d71114db9176ede3ccac6f78b71f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:22:f9:8b:9e:a2:86:89:73:93:66:8f:c7:
36:95:24:da:d4:de:f3:7b:e7:a2:7b:cf:5b:48:b5:
a6:06:6d:04:3d:60:3f:28:db:33:4b:86:28:87:1f:
22:1d:34:11:36:42:1b:b3:5d:87:26:01:a3:67:24:
61:d6:4e:9f:bc:e5:3a:e3:15:9a:97:28:68:61:2d:
5c:07:63:e7:78:8e:6a:0e:78:c0:2b:59:d3:9f:b6:
c1:f3:7e:a6:70:30:5b:86:78:31:7f:69:31:11:b6:
64:9f:d9:82:3c:7c:60:ef:7c:fe:cd:f3:60:35:66:
90:72:63:4e:1e:f9:ca:43:4e:31:97:17:e6:cc:f8:
db:f4:e7:cf:b0:8d:fb:fd:29:d7:e7:be:00:f5:0e:
39:15:91:14:56:fe:65:3b:d1:e2:31:63:ee:5e:2a:
f0:16:3c:7a:25:7a:20:c9:71:26:e7:b1:2b:9c:2f:
60:4b:80:db:ef:f2:2d:a1:45:ef:72:dc:12:3e:a3:
fc:f6:1e:2f:5b:c9:f1:59:20:1a:58:03:25:db:0e:
75:d9:82:43:e0:7e:75:fe:58:11:de:92:28:64:85:
14:60:16:70:c3:00:f5:a9:48:d6:93:f2:b3:85:40:
d5:84:8c:41:42:97:93:fc:b1:b1:32:d5:34:d3:82:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:5D:B0:E0:E4:AE:86:24:6A:83:32:0F:4C:E9:F0:B2:20:69:DE
X509v3 Authority Key Identifier:
keyid:13:EE:C7:A5:32:52:23:CB:DF:6D:3D:07:81:C3:95:16:AE:FD:BF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/3d879e034b6d71114db9176ede3ccac6f78b71f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.220.0/22
IPv6:
2803:ade0::/32
Signature Algorithm: sha256WithRSAEncryption
39:00:19:63:0b:70:84:70:e9:3a:da:a6:2f:17:13:7a:7f:3b:
e7:55:0f:5f:f7:99:80:ee:25:a0:5d:7b:fc:f5:63:aa:e4:82:
1b:e5:5f:c7:c9:e4:d9:1d:3b:0d:38:be:f4:c8:02:b2:9f:08:
00:71:df:a8:f4:39:9e:65:a4:74:4c:38:7f:d5:8b:90:ca:0a:
2c:05:b8:9d:11:36:54:48:ee:92:57:97:6e:82:e7:12:66:d8:
3a:40:bf:19:5b:a1:5a:eb:6a:68:3d:d7:07:41:2f:c0:bb:f9:
88:86:fb:06:32:27:8b:f4:91:06:c8:ec:0c:0f:fe:1a:7b:95:
e0:5d:6a:17:29:46:0b:aa:a5:0d:20:3f:54:29:97:b8:c9:12:
2c:e8:39:5e:a5:99:58:8c:b8:9e:92:89:2c:fa:3e:90:1f:ba:
bf:8c:c2:4e:af:24:94:ca:b2:e8:c7:6f:55:61:b1:99:03:46:
51:9b:81:7a:3d:a4:da:97:9c:c7:e9:d2:08:cf:32:7c:0d:32:
48:2e:fb:c8:14:ec:93:fd:c4:62:88:73:ea:26:e5:4f:9d:d5:
7a:81:55:b8:02:84:e0:ab:5c:55:4b:f2:3d:59:78:86:05:bc:
2d:e1:13:0a:a3:7f:1f:6f:c3:53:94:f0:54:53:c4:5d:cc:6c:
2b:ed:98:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org