Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/ab7c0a6d2a8d09767604e8808831cf93128d0da4.roa
File: ab7c0a6d2a8d09767604e8808831cf93128d0da4.roa (raw, json)
Hash identifier: 1yPmtaEKl0ZfLpkz/Yro/+qvDph+jrf9tNj3vKtETVU=
Subject key identifier: 69:CD:27:52:E3:55:EC:45:B6:3C:B5:A1:2B:64:5D:D9:BE:51:6B:2E
Certificate issuer: /CN=7be338779993b5a43526ba10761aa524da070d7d
Certificate serial: 23D736
Authority key identifier: 49:6C:BD:64:40:D7:D4:BF:CD:B6:0B:A4:FC:3B:D1:07:8A:1F:1B:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7be338779993b5a43526ba10761aa524da070d7d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/ab7c0a6d2a8d09767604e8808831cf93128d0da4.roa
Signing time: Fri 08 Sep 2023 16:20:32 +0000
ROA not before: Thu 07 Sep 2023 16:20:32 +0000
ROA not after: Mon 08 Sep 2025 16:20:32 +0000
asID: 52468
IP address blocks: 167.250.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2348854 (0x23d736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be338779993b5a43526ba10761aa524da070d7d
Validity
Not Before: Sep 7 16:20:32 2023 GMT
Not After : Sep 8 16:20:32 2025 GMT
Subject: CN=ab7c0a6d2a8d09767604e8808831cf93128d0da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:8d:95:2d:1f:dd:b0:a7:eb:81:76:3a:ed:
4a:b4:82:ea:6f:2e:d4:31:3e:c7:66:ad:db:cc:01:
90:29:30:4c:23:0a:cb:e2:60:11:4c:1c:b2:45:19:
ac:9c:0f:48:d7:f3:e2:b1:99:ca:a1:6b:60:34:fd:
cc:09:07:1a:24:c0:89:24:96:f5:57:bc:28:a2:70:
73:d2:b8:33:5a:3d:92:21:6f:b4:4d:f0:07:b6:36:
2a:a1:d2:3f:8a:1d:dd:5b:2d:35:d1:0d:6a:29:29:
5e:0c:23:0e:f9:ad:4a:71:0f:dc:cd:66:b0:ac:ac:
2e:b5:ce:d8:43:94:7f:3a:a6:fa:86:41:2d:37:fa:
3b:1e:dd:5f:dd:b6:fd:17:e9:3e:41:39:99:76:d5:
f8:c7:1c:01:7b:a8:aa:15:dc:cb:0e:5d:74:b4:64:
66:ee:a6:5e:57:0d:10:6c:1e:a6:76:e6:9c:0f:0e:
f5:32:da:4a:4c:e7:be:d0:d2:40:82:c2:0f:7a:e7:
30:ec:3c:8f:fa:ef:bd:36:52:2c:3e:26:1d:78:43:
85:f2:1f:af:cd:44:fa:58:ce:3b:f5:af:fe:71:f4:
d3:b8:8d:53:13:bb:09:56:95:07:6f:4b:70:78:46:
17:a5:91:28:26:0f:50:ee:69:06:3e:42:46:d6:71:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CD:27:52:E3:55:EC:45:B6:3C:B5:A1:2B:64:5D:D9:BE:51:6B:2E
X509v3 Authority Key Identifier:
keyid:49:6C:BD:64:40:D7:D4:BF:CD:B6:0B:A4:FC:3B:D1:07:8A:1F:1B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7be338779993b5a43526ba10761aa524da070d7d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/ab7c0a6d2a8d09767604e8808831cf93128d0da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/7be338779993b5a43526ba10761aa524da070d7d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:b5:ff:bd:4f:c0:bc:d0:3c:da:60:03:46:a6:3d:f1:c4:dc:
74:3e:9c:75:54:fe:78:69:18:bd:6f:9e:3f:e0:ab:c6:14:52:
97:c0:e3:d9:a9:c4:b4:8c:77:3e:65:f6:78:35:f6:11:1f:a2:
c1:dc:2e:5a:0b:ba:8f:07:b4:52:1e:33:d2:ef:88:93:ca:06:
78:cb:53:3b:ae:09:44:50:9f:e2:5d:2b:83:21:c1:92:b4:1f:
e8:d9:2c:b4:7f:c6:30:f0:85:36:57:1b:b0:a8:7f:4c:7c:4d:
c4:60:98:c6:8f:0b:fd:48:92:81:ac:c6:36:fa:20:40:73:2d:
84:f5:3a:90:49:90:ae:9b:78:e5:98:6b:3d:bb:b0:09:03:92:
79:a6:16:7a:9b:87:09:ae:9e:b7:2e:5f:af:82:85:59:91:67:
a1:fc:c2:e9:c6:e1:32:9b:51:dd:58:8f:40:ea:0e:33:1b:61:
a6:35:ec:8a:6e:88:cf:ad:33:20:f9:8e:c6:66:4b:43:1b:34:
e8:3c:91:5a:8b:31:57:5e:84:30:f2:15:60:76:5e:70:3b:29:
95:95:1a:77:12:90:fb:86:f9:ee:2c:40:13:43:63:3e:3f:23:
c1:6d:ba:45:98:27:70:8a:3d:55:ef:59:81:57:13:6c:b1:90:
11:98:8f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org