Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/b976130b165266200da758adcd87d9de2840b8cf.roa
File: b976130b165266200da758adcd87d9de2840b8cf.roa (raw, json)
Hash identifier: 64QOa04D1rqDRO6+auRwGjJpzvDHv5Wzma4wwWJIRZw=
Subject key identifier: 7C:83:C2:7A:FD:57:8F:85:FC:72:59:1E:9E:67:72:4D:B0:F8:CC:CE
Certificate issuer: /CN=d136d4512330eb81fb319acf25ade2d4a9466d72
Certificate serial: 0CFCD2
Authority key identifier: BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d136d4512330eb81fb319acf25ade2d4a9466d72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/b976130b165266200da758adcd87d9de2840b8cf.roa
Signing time: Mon 04 Sep 2023 17:38:13 +0000
ROA not before: Sun 03 Sep 2023 17:38:12 +0000
ROA not after: Thu 04 Sep 2025 17:38:12 +0000
asID: 272026
IP address blocks: 177.11.254.0/23 maxlen: 24
167.250.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851154 (0xcfcd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d136d4512330eb81fb319acf25ade2d4a9466d72
Validity
Not Before: Sep 3 17:38:12 2023 GMT
Not After : Sep 4 17:38:12 2025 GMT
Subject: CN=b976130b165266200da758adcd87d9de2840b8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:16:b5:ed:8a:10:bb:00:4c:7e:1d:aa:11:
70:c8:e4:af:8c:f8:10:c8:66:41:13:0a:d9:b1:22:
20:5f:c5:3b:4e:51:28:aa:0b:43:63:f2:cd:28:0e:
c1:b9:50:65:ad:ac:b3:d4:66:fa:26:17:0a:59:dd:
2c:db:34:b4:14:d4:42:50:34:50:32:30:5a:5b:43:
60:e2:c4:2e:01:a6:7d:db:93:a7:ce:b1:1a:82:11:
db:54:15:c6:51:92:89:27:e6:15:a7:34:3a:90:f7:
47:0b:86:08:a3:6a:4c:55:9a:54:e5:f3:c9:1a:8f:
fb:ec:42:4e:3b:74:ef:97:45:fd:f8:ce:58:f1:57:
20:4d:59:21:7e:9d:51:bb:e4:e5:7c:09:52:79:14:
8a:45:10:bf:d0:40:f5:3e:6f:ab:54:57:30:0c:f7:
3e:f6:2c:16:21:b8:9e:61:37:b8:61:57:60:49:59:
70:03:f4:4c:cd:09:c0:5d:e7:c5:19:60:e0:80:5e:
0c:39:b7:10:43:0e:9e:2e:eb:93:19:96:1b:dd:f9:
ce:14:ff:16:8c:e1:4c:b5:f1:43:6f:56:6e:12:1d:
b2:2b:35:2e:61:54:eb:47:d0:99:ce:a1:d9:6e:71:
e7:40:a5:83:2b:20:da:9a:43:ac:8b:95:ba:59:fb:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:C2:7A:FD:57:8F:85:FC:72:59:1E:9E:67:72:4D:B0:F8:CC:CE
X509v3 Authority Key Identifier:
keyid:BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d136d4512330eb81fb319acf25ade2d4a9466d72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/b976130b165266200da758adcd87d9de2840b8cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/d136d4512330eb81fb319acf25ade2d4a9466d72.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.236.0/23
177.11.254.0/23
Signature Algorithm: sha256WithRSAEncryption
15:c2:a6:b2:9f:17:a4:eb:49:80:f4:f1:80:51:f4:72:c7:a3:
da:0b:a5:fd:12:4a:13:21:37:91:c1:21:71:11:f6:1e:61:f1:
d0:f1:2e:bd:75:39:41:29:c4:16:c0:da:11:32:66:6d:fc:2b:
78:66:f3:2e:96:56:1c:34:89:14:94:96:fb:a0:70:06:fa:40:
57:17:0c:fd:19:25:28:38:2c:27:71:5a:26:db:2d:ee:eb:b5:
b6:3e:b4:b3:a6:e3:57:65:c4:b2:85:c0:d6:79:3b:52:07:b6:
3a:91:2f:65:8b:de:6f:83:4f:1e:c1:a3:60:a1:81:58:61:71:
dc:3c:82:8c:63:6f:f5:1d:a6:1e:cf:aa:33:68:24:21:fe:a7:
8f:15:e9:22:cb:56:6a:9c:66:d9:8a:0d:35:4a:47:75:20:17:
bd:03:f4:e9:82:26:f6:95:e5:1e:d3:b2:89:da:46:07:10:03:
c3:64:05:1b:e8:1a:6e:8a:81:9e:58:29:2e:0d:e5:a1:3a:2b:
19:b3:d3:29:54:3d:53:cb:a8:40:45:ba:f4:b5:34:81:37:a8:
43:a6:ce:77:39:96:02:d7:25:77:60:4e:de:4b:74:4a:9f:90:
35:f0:7e:c5:f8:57:be:62:98:0b:a9:59:a3:f1:43:01:8a:fa:
60:60:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org