Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5801f4a876b6490619603e15790e4df77e4f1c7c.roa
File: 5801f4a876b6490619603e15790e4df77e4f1c7c.roa (raw, json)
Hash identifier: XnFlydMCpfjicKIE34CrP361VtdotmtLOcXzjEOIgyo=
Subject key identifier: 08:38:0D:BF:94:F4:76:90:61:A3:C6:31:CE:89:74:9E:7A:38:EB:AC
Certificate issuer: /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial: 0C38EA
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5801f4a876b6490619603e15790e4df77e4f1c7c.roa
Signing time: Thu 05 Oct 2023 10:19:00 +0000
ROA not before: Wed 04 Oct 2023 10:19:00 +0000
ROA not after: Sun 05 Oct 2025 10:19:00 +0000
asID: 272150
IP address blocks: 192.141.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801002 (0xc38ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Validity
Not Before: Oct 4 10:19:00 2023 GMT
Not After : Oct 5 10:19:00 2025 GMT
Subject: CN=5801f4a876b6490619603e15790e4df77e4f1c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:b4:53:18:da:45:3a:15:39:0e:5a:b4:23:
31:ce:dd:78:0b:7e:1e:e3:75:0f:3a:ca:ec:3b:76:
85:ff:f0:01:f4:64:ff:c7:0c:dd:99:57:a9:29:76:
49:6f:57:53:98:6a:fe:bf:18:6f:7c:2d:12:b9:10:
13:a5:c7:13:8a:0a:78:d3:cd:c3:51:37:f3:cc:ef:
c1:4f:48:a4:d3:27:91:1c:dd:90:57:fb:e1:bb:7c:
8d:aa:5c:14:63:0a:c7:99:25:14:d5:d6:c2:94:91:
79:e9:3e:6c:00:c2:d4:21:06:45:f8:70:d0:3a:a1:
93:f8:77:3e:54:db:07:a8:b9:95:43:a2:a1:8d:13:
08:83:9f:fd:1d:56:b8:b7:45:4d:9f:ec:42:5a:d2:
48:08:6f:18:86:4c:55:c3:58:e0:3d:da:7e:28:1e:
4d:41:48:0b:cb:36:8e:83:a1:61:73:10:46:b5:33:
35:3c:18:3a:3c:bc:36:0b:28:be:54:2d:da:70:a7:
ad:97:81:25:ff:1e:ec:53:d8:e4:6f:38:0c:bb:dc:
68:cc:80:18:6c:3b:1a:bc:55:d1:5a:bc:e4:61:1d:
5b:98:2a:81:01:00:6b:c1:a6:71:7b:a7:58:eb:bf:
c1:f9:d9:cb:09:22:e4:eb:dc:4b:6c:b0:5e:be:5b:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:38:0D:BF:94:F4:76:90:61:A3:C6:31:CE:89:74:9E:7A:38:EB:AC
X509v3 Authority Key Identifier:
keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5801f4a876b6490619603e15790e4df77e4f1c7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.20.0/22
Signature Algorithm: sha256WithRSAEncryption
70:ff:44:c9:3a:3a:7e:1d:34:63:5e:74:f2:c5:d5:5e:f4:23:
95:bd:2e:2d:2d:0b:b2:a7:8c:5e:25:46:73:eb:41:36:78:49:
73:fe:cc:8f:a2:ad:3e:a2:c8:13:8b:fe:eb:7e:40:a4:c0:69:
15:35:b7:7e:41:f5:2e:90:7e:84:ed:a6:c8:c2:0d:56:c5:b5:
7e:e5:2a:29:28:2e:90:53:f0:d5:99:35:2d:92:d4:de:66:bf:
99:2a:a8:41:c0:57:f8:da:a6:ff:0a:6e:fa:c3:6c:82:54:d5:
e9:b2:48:6f:29:61:e0:22:6f:8e:6b:ac:71:92:8f:75:83:90:
5c:fe:d1:ec:7d:73:22:96:5f:25:e6:67:28:53:38:c0:55:9d:
d4:ab:c3:91:f1:3a:63:41:ba:0f:da:bb:8e:ea:af:f3:cd:8a:
bc:79:c3:63:22:81:ed:9a:9b:88:62:51:75:5a:12:a4:80:06:
81:76:f3:1e:01:eb:a7:9a:15:ba:47:4d:fa:f1:20:10:c0:56:
f0:6a:c9:96:2a:77:b8:b4:9d:d8:e7:2a:20:63:ba:1d:7d:b3:
6d:98:1c:05:5f:ae:1c:38:f5:33:4e:e6:f0:5f:0e:fd:b2:4c:
65:cf:58:ec:8e:ca:3f:9c:af:b7:ad:5d:a0:bf:b1:51:3b:b4:
fc:7e:e8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org