Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/bd1d14eca40ce90fbd86f5c8588b6ae0f1565604.roa
File: bd1d14eca40ce90fbd86f5c8588b6ae0f1565604.roa (raw, json)
Hash identifier: qlaW2ddT27ncMUZEwlgL9MhGdcY7tJWg9r3b1MIvTlc=
Subject key identifier: 44:E4:9D:B7:A4:06:E1:67:47:55:AF:35:C3:60:BF:D8:82:CA:3B:2A
Certificate issuer: /CN=9d6c5e9533c6eb5af58cbd6336fc050db67d3be3
Certificate serial: 158019
Authority key identifier: D0:6D:14:AA:17:EE:99:AD:E2:40:A1:23:7D:61:18:C8:1B:5E:C5:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/bd1d14eca40ce90fbd86f5c8588b6ae0f1565604.roa
Signing time: Thu 27 Apr 2023 02:01:26 +0000
ROA not before: Wed 26 Apr 2023 02:01:26 +0000
ROA not after: Sun 27 Apr 2025 02:01:26 +0000
asID: 265798
IP address blocks: 131.221.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1409049 (0x158019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6c5e9533c6eb5af58cbd6336fc050db67d3be3
Validity
Not Before: Apr 26 02:01:26 2023 GMT
Not After : Apr 27 02:01:26 2025 GMT
Subject: CN=bd1d14eca40ce90fbd86f5c8588b6ae0f1565604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d1:7b:34:60:25:f2:2b:b4:b1:7e:1f:03:f0:
6c:e3:0a:3b:cb:36:38:04:a1:1c:0e:06:f3:b4:1e:
07:a6:10:45:2d:14:7c:7a:c2:41:b0:42:5b:ab:3d:
5f:20:41:27:f2:d0:2e:0a:90:8a:80:28:2c:2d:33:
4a:4f:26:e3:c9:ca:e4:9b:c4:64:a2:08:c4:b9:6b:
af:65:f2:c2:60:c1:db:97:3d:d0:5d:7e:11:f1:09:
0c:03:c8:1b:d9:75:6f:00:69:ee:7f:1b:5f:1e:7e:
3b:e9:d0:a4:42:9f:80:df:fb:c5:d1:13:9e:ed:00:
5d:5b:b6:48:5e:31:b0:d1:2d:3f:5c:41:dd:40:4e:
db:38:19:f4:80:37:58:6c:c8:47:4e:49:44:9f:c7:
08:e5:40:a5:3c:04:cf:3b:b6:08:3c:be:de:ce:7e:
18:71:bf:16:11:c7:80:c3:24:15:30:07:cd:53:d1:
83:bc:e5:17:ac:7a:71:4e:55:22:04:03:20:61:dd:
35:bf:1c:a6:3d:94:e5:29:25:59:78:ff:c9:af:a6:
c2:92:33:ed:c0:b8:ce:a1:f6:89:00:40:7a:45:e5:
46:b6:5a:e5:ae:20:83:f8:2a:17:ad:97:0f:6a:0c:
51:af:bb:5e:6a:7a:5e:95:71:dd:61:2d:0c:c5:d2:
b0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E4:9D:B7:A4:06:E1:67:47:55:AF:35:C3:60:BF:D8:82:CA:3B:2A
X509v3 Authority Key Identifier:
keyid:D0:6D:14:AA:17:EE:99:AD:E2:40:A1:23:7D:61:18:C8:1B:5E:C5:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/bd1d14eca40ce90fbd86f5c8588b6ae0f1565604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.64.0/22
Signature Algorithm: sha256WithRSAEncryption
23:a0:55:99:2a:a9:f3:4f:d0:12:af:b8:29:d6:e0:97:06:f7:
53:00:90:f4:46:b3:8e:35:78:4c:3e:31:85:d9:82:7c:f3:8f:
c0:26:f2:45:9a:89:51:24:6c:73:70:33:b3:ea:a1:79:03:4e:
fd:d0:5f:42:b6:75:95:27:79:b6:05:c0:d4:6c:7b:45:d0:89:
25:cd:57:1c:2a:a0:f2:b5:d5:d7:a1:2d:5c:68:ec:ce:e6:88:
45:c0:98:11:bf:ec:89:23:fb:62:52:7a:ad:d5:58:37:c2:5f:
5f:f8:b7:15:10:2b:95:69:80:ea:92:cc:e4:0f:da:8b:99:b7:
a3:99:66:d8:76:78:9a:04:d0:76:fe:08:e0:06:69:d1:62:a1:
2f:d8:22:eb:18:12:ef:d7:5c:4a:a7:d9:c2:09:be:41:cf:6f:
49:a4:d9:af:fe:b3:22:9f:0d:3c:e8:5b:d5:c8:16:6d:8f:01:
d7:a3:73:97:36:00:85:54:4f:5c:11:e1:f1:e9:e6:84:1d:f4:
0e:3f:69:54:93:45:61:07:f4:35:71:19:f6:a1:b6:38:14:d1:
97:b4:d2:09:32:e9:6a:5d:c0:11:cb:e4:0a:de:2a:21:cf:cf:
5a:ae:5c:c7:7c:0d:82:3a:11:71:c3:6b:a7:af:cd:36:12:20:
4b:89:7d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org