Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/0773f29a5dfc34d8864edbeffac559ac6f1ce942.roa
File: 0773f29a5dfc34d8864edbeffac559ac6f1ce942.roa (raw, json)
Hash identifier: L9M/7VBpzW28780yZSULezjX0RTerr16+U7gFmarnmg=
Subject key identifier: 28:80:E4:31:84:35:AC:F4:B0:BA:BC:04:5A:B7:9F:95:90:F6:34:36
Certificate issuer: /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial: 26DC7D
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/0773f29a5dfc34d8864edbeffac559ac6f1ce942.roa
Signing time: Tue 27 Feb 2024 22:49:07 +0000
ROA not before: Tue 27 Feb 2024 22:49:07 +0000
ROA not after: Fri 27 Feb 2026 22:49:07 +0000
asID: 7438
IP address blocks: 189.201.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2546813 (0x26dc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Validity
Not Before: Feb 27 22:49:07 2024 GMT
Not After : Feb 27 22:49:07 2026 GMT
Subject: CN=0773f29a5dfc34d8864edbeffac559ac6f1ce942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:a4:c0:c4:0b:b0:49:57:a5:b8:a3:bf:9d:
68:4d:9c:e1:13:fa:21:0a:c7:86:8f:4e:5d:4d:d6:
bb:26:75:7d:1c:e8:c6:ca:67:1f:e6:21:f7:11:cc:
f4:69:52:fc:44:ba:07:0a:83:ad:08:c7:e9:29:c6:
a7:3c:83:54:71:6e:79:e1:3c:e9:26:6b:dd:1a:9c:
d7:38:d4:0c:ab:52:f4:77:a6:fa:db:09:2b:7c:b4:
8e:d6:d4:35:1e:15:2c:93:0d:0e:6e:9a:f0:94:ce:
20:98:60:d8:dc:78:af:41:15:7c:65:a4:57:ab:bc:
b2:69:8a:50:bc:3d:86:a2:1f:da:59:6d:68:dd:c0:
66:b2:98:2f:b1:ac:f7:46:94:5f:7c:e3:19:83:7c:
c0:4a:8b:17:f7:9e:49:07:be:9c:6f:dd:93:a6:8b:
47:26:5b:1d:f9:00:0f:92:41:47:e0:5b:61:65:09:
55:07:5d:8c:45:05:e5:8c:5b:60:db:3f:c0:5a:6a:
bc:1c:29:6c:dc:e6:ff:ac:14:ef:83:80:da:16:c7:
fa:3b:6c:d0:0b:13:78:14:31:4c:db:f3:7b:3f:9e:
b4:c9:8a:11:fa:aa:b3:2a:be:5c:f2:8f:c5:a9:f5:
10:b9:9b:94:09:a9:06:69:a7:6b:f7:cd:1a:51:93:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:E4:31:84:35:AC:F4:B0:BA:BC:04:5A:B7:9F:95:90:F6:34:36
X509v3 Authority Key Identifier:
keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/0773f29a5dfc34d8864edbeffac559ac6f1ce942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:07:f8:24:b7:32:34:1b:b5:07:9e:ff:1d:a0:ff:58:d1:f7:
b0:b2:31:c0:84:d3:dd:cc:e8:ce:98:f0:60:0b:ab:2c:14:1c:
00:e2:7f:5f:aa:75:38:de:3f:6d:5b:43:66:b7:5b:2d:d3:89:
bd:37:4e:b0:a7:bc:9a:70:1f:2f:e7:71:5e:34:29:24:1c:78:
b6:a9:d3:f2:64:00:54:a2:44:5a:4e:60:00:e6:60:6a:43:dd:
78:2d:ea:6c:e5:9d:6b:2c:9a:29:8e:f5:9c:56:2c:1d:1e:cc:
4b:ca:e5:70:c5:d2:1c:0a:49:8a:9e:4d:35:48:6b:40:0d:eb:
05:6d:d8:6c:91:28:a4:45:74:92:e2:50:a1:61:ec:0e:b5:13:
02:b2:4a:37:57:d3:f2:6d:0c:fe:bd:75:1e:44:b6:30:53:ec:
4b:cb:14:85:39:39:68:24:5f:c1:50:78:54:b3:9a:5b:68:a7:
07:dd:2b:3a:dd:b2:b0:1d:bb:f2:86:ac:05:de:84:0f:f6:b8:
26:ab:e7:f2:a5:62:3f:e3:17:63:79:86:60:9c:5e:41:a7:03:
cb:f8:5e:d5:2c:4b:e0:20:b7:e7:0f:cb:25:9f:ae:40:56:0a:
44:42:d0:1a:ec:f9:b7:26:50:3f:0f:6a:7e:5f:0d:62:5d:b4:
0c:a3:e6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org