Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df9d849e-41d5-4bc0-8063-faf4339459a3/3aa7e00c41802285c7d93cc96bb734549c1e6d7b.roa
File: 3aa7e00c41802285c7d93cc96bb734549c1e6d7b.roa (raw, json)
Hash identifier: 9Nu5NChFkj9wU4kzqR1BxnDke2ZmZejoPuroFC5mNQk=
Subject key identifier: C2:BF:1A:D3:75:8F:44:FD:11:35:3F:72:C1:C6:7F:6D:93:E4:A0:81
Certificate issuer: /CN=02f9cec7b7d0b2680f428d964e65ca2f5bde900d
Certificate serial: 04294B
Authority key identifier: C6:09:63:FE:12:2E:EB:50:78:FA:9A:21:EA:D9:F1:79:01:95:EA:57
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/02f9cec7b7d0b2680f428d964e65ca2f5bde900d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/df9d849e-41d5-4bc0-8063-faf4339459a3/3aa7e00c41802285c7d93cc96bb734549c1e6d7b.roa
Signing time: Wed 24 Mar 2021 14:44:32 +0000
ROA not before: Wed 24 Mar 2021 14:44:32 +0000
ROA not after: Tue 24 Mar 2026 14:44:32 +0000
asID: 4493
IP address blocks: 148.225.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272715 (0x4294b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f9cec7b7d0b2680f428d964e65ca2f5bde900d
Validity
Not Before: Mar 24 14:44:32 2021 GMT
Not After : Mar 24 14:44:32 2026 GMT
Subject: CN=3aa7e00c41802285c7d93cc96bb734549c1e6d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:60:5c:8e:53:11:41:04:ae:cc:bf:e6:b4:
26:3b:c0:78:6f:cb:5c:bc:1e:38:62:26:24:5c:00:
e2:26:64:5a:2f:51:86:01:83:fc:95:24:a3:d4:d9:
ab:9e:e4:28:78:8f:b0:ba:58:2e:c7:5c:c2:b4:89:
60:a3:f9:9c:42:c9:f4:01:39:a9:4f:da:2b:55:11:
92:8c:52:f2:57:f3:82:09:b7:d6:11:bb:77:91:ca:
91:1d:a4:d5:c9:74:27:ef:39:61:9f:d4:e3:d4:63:
04:ab:5f:57:f7:b4:b1:dc:be:75:57:2b:cd:9f:83:
9e:4e:8f:6d:3d:b3:ae:fb:a7:d2:df:93:cd:37:b4:
87:41:53:ac:7c:cc:d1:7c:cc:4b:69:df:60:6b:81:
f2:53:e6:f0:2c:6a:cf:7d:7a:d6:f3:15:82:ed:d6:
71:e2:df:76:e3:45:6c:fa:95:27:60:db:2c:c7:b5:
53:aa:cb:ab:91:5c:ce:86:38:dd:87:a6:ce:56:09:
d5:b7:26:dc:dc:f4:b9:a5:c4:80:6c:91:ae:bc:21:
5d:f0:7f:8b:40:dd:cd:30:19:37:47:bd:bb:1e:12:
2f:06:e3:72:b6:b7:07:ad:a1:3f:c1:2e:73:60:80:
24:a6:a8:d8:d1:42:26:3c:fb:f3:fc:d1:a4:9e:82:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:1A:D3:75:8F:44:FD:11:35:3F:72:C1:C6:7F:6D:93:E4:A0:81
X509v3 Authority Key Identifier:
keyid:C6:09:63:FE:12:2E:EB:50:78:FA:9A:21:EA:D9:F1:79:01:95:EA:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/02f9cec7b7d0b2680f428d964e65ca2f5bde900d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df9d849e-41d5-4bc0-8063-faf4339459a3/3aa7e00c41802285c7d93cc96bb734549c1e6d7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/df9d849e-41d5-4bc0-8063-faf4339459a3/02f9cec7b7d0b2680f428d964e65ca2f5bde900d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.225.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:94:6b:9e:32:8d:37:af:45:2c:bd:a7:12:16:80:52:a3:6f:
dd:ef:06:22:47:3f:a0:22:b1:08:c5:98:10:98:4c:f4:1d:70:
d4:c5:6d:40:9a:21:d0:d9:e4:92:00:b5:c7:57:d0:66:2c:af:
15:6b:14:b4:f8:a0:c7:27:7d:4d:a4:ce:06:ae:be:6a:48:ee:
30:41:a6:dd:1f:b5:26:72:3b:41:48:c0:16:f8:5f:bb:a1:93:
a2:0b:b4:27:97:62:10:c2:74:67:c1:34:f6:62:16:43:ed:ef:
e5:1e:38:21:de:3e:c5:19:36:cf:33:33:1a:3e:ba:64:80:9a:
a0:f8:a4:af:52:fa:84:40:70:19:3f:fd:21:4a:57:67:b0:0e:
3b:75:fa:4c:71:02:30:dc:07:08:7a:98:fd:8f:18:1c:3d:32:
4c:cd:ec:9a:89:52:f0:fa:0e:40:f1:99:c4:be:ee:01:02:ee:
05:cb:12:88:99:cb:b5:98:6d:2f:8a:a6:0b:6f:fa:fc:08:d6:
00:58:2a:55:da:90:35:94:87:bc:c0:14:3b:c9:6d:68:e3:27:
95:61:f8:7d:e3:19:b6:86:93:42:f4:d8:cb:98:9b:7d:8f:61:
29:2f:ba:3e:ff:23:87:70:e9:da:63:a3:00:aa:34:ce:8a:1d:
a7:2a:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org