Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/1371e46932b9cd73172c25d016bb83d3e3c2c496.roa
File: 1371e46932b9cd73172c25d016bb83d3e3c2c496.roa (raw, json)
Hash identifier: SFthGdZrr7svrRM6Bg4AmIpnC6OiEi84X4PPThRCwE4=
Subject key identifier: 54:AA:03:A7:F2:85:EB:BA:2E:82:5D:D7:15:50:0C:BF:40:A0:6B:7F
Certificate issuer: /CN=5842a35efb02d60e07426e0d03b3de78f9d908db
Certificate serial: 19F202
Authority key identifier: ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5842a35efb02d60e07426e0d03b3de78f9d908db.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/1371e46932b9cd73172c25d016bb83d3e3c2c496.roa
Signing time: Fri 26 Jan 2024 19:00:35 +0000
ROA not before: Fri 26 Jan 2024 19:00:34 +0000
ROA not after: Mon 26 Jan 2026 19:00:34 +0000
asID: 267720
IP address blocks: 168.181.176.0/22 maxlen: 24
138.36.220.0/22 maxlen: 24
2803:cf80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1700354 (0x19f202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5842a35efb02d60e07426e0d03b3de78f9d908db
Validity
Not Before: Jan 26 19:00:34 2024 GMT
Not After : Jan 26 19:00:34 2026 GMT
Subject: CN=1371e46932b9cd73172c25d016bb83d3e3c2c496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:7c:6e:db:3f:b5:fe:95:59:3c:71:61:a6:
e2:66:99:31:aa:ff:19:02:f4:f3:70:6c:3b:56:8d:
74:63:b5:9e:ef:64:65:57:b3:27:6c:4e:ef:2f:db:
55:b0:d0:56:c3:da:e8:90:75:a9:7a:af:a6:5a:9e:
df:fb:59:46:7e:d1:1d:d5:a7:ff:55:50:03:e9:2b:
bd:6b:0f:21:b2:1d:41:ca:b7:f5:0d:55:59:9f:b3:
bb:8a:28:a3:0a:ea:91:a0:5a:0e:a1:33:4a:7a:92:
59:69:d6:4b:5f:48:7a:d5:71:b7:34:1f:a4:a4:6b:
1b:53:12:68:bd:ad:56:13:ae:2c:d2:f3:23:9a:fa:
b3:f8:d6:fa:7d:c0:4b:07:3a:14:4a:b6:2f:a0:a8:
60:4c:d7:87:db:1a:3e:db:86:5c:82:ee:8e:9b:b3:
56:86:65:ce:22:b5:e6:ab:aa:4d:78:af:94:9c:df:
ed:9c:30:45:75:de:63:7d:30:c2:54:b4:eb:de:4f:
6c:1e:6d:2f:4e:5b:0b:9f:8a:80:71:89:e0:70:0e:
a7:6b:b5:5a:d6:cb:e1:46:07:20:06:c1:73:04:7c:
a5:10:0f:e5:75:42:91:4b:be:ac:fc:2e:d6:cb:86:
85:7b:ee:ca:66:05:ca:f2:30:d9:f6:0a:e0:cc:e5:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AA:03:A7:F2:85:EB:BA:2E:82:5D:D7:15:50:0C:BF:40:A0:6B:7F
X509v3 Authority Key Identifier:
keyid:ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5842a35efb02d60e07426e0d03b3de78f9d908db.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/1371e46932b9cd73172c25d016bb83d3e3c2c496.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/5842a35efb02d60e07426e0d03b3de78f9d908db.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.220.0/22
168.181.176.0/22
IPv6:
2803:cf80::/32
Signature Algorithm: sha256WithRSAEncryption
85:8e:9d:f6:01:4b:00:ec:a5:84:c5:a1:51:9b:a9:64:9a:bf:
98:5c:ea:ce:69:eb:12:40:f0:e0:c6:2a:d4:f5:34:0d:89:c7:
74:23:db:0f:83:fd:da:0b:e7:0e:7a:02:b3:7e:08:c6:01:fd:
26:c7:ea:57:ad:9a:0b:bc:a9:a1:eb:42:82:98:89:bd:a7:67:
bf:09:48:f7:5f:b5:ab:10:3f:3a:2b:e1:56:e0:62:cc:cd:58:
80:0d:de:f1:7f:b2:97:18:87:26:bc:5d:1b:f8:c8:b5:93:2f:
2d:93:d0:68:82:b1:59:df:ee:1a:1e:9c:03:7b:dc:c7:a3:ad:
db:36:33:bb:17:99:94:08:9d:11:e2:57:17:50:93:ea:c1:be:
5d:32:aa:4c:4c:83:8d:de:6c:5f:ef:6d:04:09:a4:e2:58:b1:
d3:6e:f7:1c:40:3a:98:cf:35:2e:87:07:9f:6c:8b:34:90:9e:
74:15:c9:71:7c:31:a4:da:17:97:42:bc:fa:80:20:7e:d6:87:
d2:1f:79:71:a5:d0:5d:63:5d:e3:d0:8c:06:f8:df:57:7d:99:
46:bc:c8:5d:6e:60:c0:6a:cb:68:2d:0f:f8:33:01:d2:c3:e9:
98:15:a1:b0:a5:8b:58:dc:f1:d9:fa:9e:ac:6e:04:6b:e3:0f:
54:cd:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org