Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/aa91e6356ff862d80ed1e424d5b54326b4510f9f.roa
File: aa91e6356ff862d80ed1e424d5b54326b4510f9f.roa (raw, json)
Hash identifier: yBUL5K2USr1DqnaWs8LOKXOQL1fkJtF0wYjweZaGRpc=
Subject key identifier: F7:B9:3C:42:0D:31:3E:33:86:A0:47:B4:EB:21:75:96:28:48:E7:09
Certificate issuer: /CN=928723b4ebd5246c0aa94baeaa44572b7b3662b3
Certificate serial: 0D392F
Authority key identifier: 42:E0:8F:E1:1A:DA:5B:56:FE:46:4E:5E:12:A9:21:A0:6E:BD:86:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/928723b4ebd5246c0aa94baeaa44572b7b3662b3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/aa91e6356ff862d80ed1e424d5b54326b4510f9f.roa
Signing time: Wed 24 Mar 2021 14:32:34 +0000
ROA not before: Wed 24 Mar 2021 14:32:34 +0000
ROA not after: Tue 24 Mar 2026 14:32:34 +0000
asID: 5692
IP address blocks: 163.10.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866607 (0xd392f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928723b4ebd5246c0aa94baeaa44572b7b3662b3
Validity
Not Before: Mar 24 14:32:34 2021 GMT
Not After : Mar 24 14:32:34 2026 GMT
Subject: CN=aa91e6356ff862d80ed1e424d5b54326b4510f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:1e:06:eb:1f:af:24:4f:86:69:c1:ae:41:
b2:2a:cf:86:37:d0:60:b2:69:87:03:9d:5d:7d:cd:
0d:4d:c6:34:e0:cd:f4:40:d7:50:a4:10:91:c4:c0:
79:2c:02:e4:d4:c0:e2:1b:c0:5c:c6:ff:e0:8f:4b:
5e:c7:9c:df:4a:79:ff:58:4f:e9:64:85:8e:6d:35:
92:ac:5b:16:8e:99:b6:33:6d:db:f7:4f:76:be:26:
c7:69:a7:39:25:bf:dc:a0:76:b0:b2:8a:3a:4e:f1:
6d:9e:9b:26:3a:e8:36:29:8f:79:73:bc:a7:84:f4:
48:31:4c:c0:93:fd:be:3c:be:42:58:83:29:93:be:
43:3d:84:10:91:f6:7f:e3:91:43:f1:d0:ab:bf:c1:
4c:b3:71:ac:24:5d:c4:2c:8d:1e:c5:a3:6c:0a:99:
7a:0c:5f:f0:72:1e:59:fc:0f:32:03:e7:0f:35:51:
48:13:fb:72:e1:fb:c2:16:37:5e:19:1c:31:d9:ff:
18:de:80:35:4a:d6:f3:5b:a5:f6:cc:21:0e:c3:a7:
60:44:b9:11:e4:cb:08:0d:d4:79:1c:c0:01:75:3f:
53:a3:af:cf:14:5b:53:28:c5:1a:11:09:42:dc:fa:
05:c6:d3:d7:d1:c9:ef:b2:e2:54:c5:5d:38:b1:86:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B9:3C:42:0D:31:3E:33:86:A0:47:B4:EB:21:75:96:28:48:E7:09
X509v3 Authority Key Identifier:
keyid:42:E0:8F:E1:1A:DA:5B:56:FE:46:4E:5E:12:A9:21:A0:6E:BD:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/928723b4ebd5246c0aa94baeaa44572b7b3662b3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/aa91e6356ff862d80ed1e424d5b54326b4510f9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/928723b4ebd5246c0aa94baeaa44572b7b3662b3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:23:c3:29:82:e2:1b:c3:1d:aa:fc:74:2c:62:70:75:55:7d:
f5:84:95:52:13:9b:fd:d2:65:c5:88:76:ec:0f:dc:ba:a4:74:
21:a0:e5:68:39:0d:01:38:ad:af:82:03:64:24:83:0e:b9:94:
f1:4f:18:33:7b:2e:bb:83:85:30:9b:59:46:d8:4a:bd:5c:08:
c3:7f:4f:6c:b1:2c:3a:02:2c:75:84:98:bc:c3:57:4a:cd:19:
63:18:63:db:a0:4a:a8:b7:aa:68:ed:85:a5:4f:a2:59:e5:8a:
03:23:6e:fb:e4:f3:0f:c5:d9:d4:fd:3e:b4:95:9a:66:19:ec:
9a:e6:6e:a9:25:46:da:2f:a2:6c:01:51:f6:63:5d:1c:64:b1:
dc:cc:9b:1d:14:2b:0d:bb:83:84:e7:64:ed:3a:75:1f:4b:ef:
f0:ca:2d:39:42:3f:40:d9:5a:d8:5e:00:8a:e6:ad:39:a8:0c:
b3:06:14:33:e8:2a:37:dc:a4:b0:ce:9e:02:aa:f1:2c:e3:44:
46:4d:ee:4e:33:6d:74:24:99:f9:ab:c0:f3:8c:6d:e7:5f:be:
88:d3:4a:4a:46:08:fd:fb:97:d6:25:c0:85:b1:95:75:17:12:
8a:02:c6:b1:6d:b2:30:b2:32:2e:a7:b1:05:9f:d8:ce:5b:88:
d0:d8:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org