Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/43e197e6951f8949ddbe3ac17684eaac16359b96.roa
File: 43e197e6951f8949ddbe3ac17684eaac16359b96.roa (raw, json)
Hash identifier: IXbJo/u5hcvq5AawtRtetUqnGbbDT/tvPxgDOTjr418=
Subject key identifier: 23:C2:BF:54:23:45:12:6E:CC:C3:F7:95:89:33:E3:F7:FC:C3:0E:58
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 1F1CFD
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/43e197e6951f8949ddbe3ac17684eaac16359b96.roa
Signing time: Wed 26 Apr 2023 17:24:43 +0000
ROA not before: Tue 25 Apr 2023 17:24:40 +0000
ROA not after: Sat 26 Apr 2025 17:24:40 +0000
asID: 263235
IP address blocks: 170.210.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2039037 (0x1f1cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Apr 25 17:24:40 2023 GMT
Not After : Apr 26 17:24:40 2025 GMT
Subject: CN=43e197e6951f8949ddbe3ac17684eaac16359b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:04:3f:bd:6e:49:6f:a7:2c:bc:88:98:3a:
46:9f:1e:f7:7e:f2:55:b5:ac:c0:6a:2d:b2:41:e1:
58:c7:d2:90:78:39:2a:fc:c7:5e:94:c9:df:e1:18:
12:ff:ef:8a:c1:7d:bc:f9:ac:fb:07:30:66:e4:61:
1e:d1:dc:b7:ca:53:89:84:e2:4e:0b:3b:73:fa:12:
22:6e:36:64:de:4a:83:04:e8:86:ae:25:e3:e7:4e:
d4:7f:bd:0b:47:8f:14:c4:5a:7f:b2:6f:01:6e:e1:
9b:49:9e:cd:ac:ed:6d:73:67:6a:80:4b:a4:87:18:
fc:b6:27:8c:3e:cc:db:41:56:2b:5a:a4:f5:07:54:
dd:6b:bb:1b:49:38:52:b8:99:1b:a7:d8:8f:72:51:
f0:9a:11:ce:d2:d6:dc:19:9b:24:8e:eb:d8:80:0b:
63:ef:e3:7b:8c:de:2d:d6:97:b9:ba:b0:e5:22:02:
be:2d:a0:7c:4f:b6:e2:e4:7b:00:44:2b:d0:87:bc:
1e:2b:86:3d:8e:58:4d:a9:2e:fe:be:64:38:1e:bc:
c5:53:e7:83:dc:4e:92:b8:64:82:d0:b6:d8:20:03:
a1:4c:79:12:c8:e4:75:63:d5:ff:ad:1e:30:f2:7a:
9e:9b:25:9d:8b:18:86:52:57:c0:18:f5:d2:2f:25:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:BF:54:23:45:12:6E:CC:C3:F7:95:89:33:E3:F7:FC:C3:0E:58
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/43e197e6951f8949ddbe3ac17684eaac16359b96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.192.0/21
Signature Algorithm: sha256WithRSAEncryption
50:f8:a7:cc:64:d4:9b:d1:59:2b:3a:68:c9:b2:c2:79:ff:b8:
5f:da:91:eb:f4:a7:66:95:d9:5c:b2:97:74:92:42:19:52:d8:
e5:9a:c8:92:86:2b:a6:2c:d1:15:06:e3:bd:6d:12:2b:ed:72:
17:fd:66:b6:8c:eb:97:f9:8f:03:ea:e8:cd:ac:89:e8:1a:49:
0d:e1:f0:28:5e:63:00:1c:e0:57:e6:c6:b7:c1:85:e4:2b:2b:
51:ce:e6:1a:9d:9a:1a:1e:03:5f:b7:55:ef:b2:5a:f3:cf:22:
a2:a7:32:6c:cd:fd:48:52:4d:ee:b2:94:d9:bb:0a:98:ca:8b:
a3:77:77:74:93:8c:7b:62:49:03:13:0f:28:b5:96:9d:c5:44:
e3:05:d1:99:d4:ed:92:3a:ff:f7:91:ba:7d:b4:e0:8b:9f:c1:
a1:20:76:ca:47:19:45:7d:c6:7b:45:00:44:e2:ea:36:f8:06:
3e:48:26:be:41:56:95:38:43:2c:d3:9c:86:ef:28:12:96:c3:
cf:bd:bb:56:98:14:83:ca:37:11:1e:97:a8:02:16:4a:83:e1:
9c:14:94:cf:93:7b:71:e9:10:37:bc:45:8b:5a:bd:ba:8f:42:
e1:47:b6:1b:fd:33:b1:32:4b:9c:f5:73:34:13:80:67:9d:b8:
a0:fb:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org