Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/a218546f3f847b6e5bff96caea7c89e4c75acb88.roa
File: a218546f3f847b6e5bff96caea7c89e4c75acb88.roa (raw, json)
Hash identifier: XDRCcXfaOaIp/Y8JZzBBZkYCByDadF5SjjD1FEooEuc=
Subject key identifier: 49:E4:D2:FA:7E:30:DD:BD:84:28:ED:60:C5:98:49:8F:66:FA:5D:6D
Certificate issuer: /CN=d3e258591b81b726517d993ac9db01b629da36e1
Certificate serial: 11EA2A
Authority key identifier: DC:D2:6F:F6:04:03:AC:E4:61:17:DE:3E:E9:9E:E7:9C:1F:53:DB:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3e258591b81b726517d993ac9db01b629da36e1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/a218546f3f847b6e5bff96caea7c89e4c75acb88.roa
Signing time: Sat 09 Dec 2023 07:30:01 +0000
ROA not before: Sat 09 Dec 2023 07:30:01 +0000
ROA not after: Mon 08 Dec 2025 07:30:01 +0000
asID: 265707
IP address blocks: 192.140.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1174058 (0x11ea2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e258591b81b726517d993ac9db01b629da36e1
Validity
Not Before: Dec 9 07:30:01 2023 GMT
Not After : Dec 8 07:30:01 2025 GMT
Subject: CN=a218546f3f847b6e5bff96caea7c89e4c75acb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:af:1a:5b:e8:e7:58:75:25:f6:6f:51:c2:
f7:96:2b:ce:e3:7e:94:70:d6:dc:c3:4c:a1:40:89:
b2:ab:1a:e4:c4:26:d7:ec:66:7c:73:41:fe:01:c0:
fb:01:7a:4f:a5:a1:5a:e5:07:f0:05:26:e8:45:18:
79:39:38:f8:28:db:c8:fb:51:04:4e:6e:ee:cb:6e:
7e:a4:11:1c:de:81:54:e6:e5:c7:b4:5c:c1:c0:80:
b7:ec:22:30:17:78:87:03:16:97:0d:07:36:62:7b:
2b:20:91:ec:ef:31:9f:1e:ef:dd:33:5d:1e:38:3d:
3a:d5:18:64:a2:89:a7:dc:a7:f5:09:b1:f0:c2:9d:
69:6d:9f:40:0b:a1:fe:c7:19:8b:a9:7a:39:66:43:
f8:e1:c6:1c:18:e0:5e:e2:b5:23:73:05:40:9c:d9:
0b:0a:2f:41:52:14:97:28:af:41:0c:e4:e3:3e:83:
d4:27:2a:6b:1b:61:6d:ae:fa:80:f5:26:53:f5:01:
f6:69:e2:39:89:58:89:81:6b:4b:f2:08:76:3a:83:
ba:54:6b:03:2e:2c:7f:23:d1:1b:7d:27:11:a6:0a:
66:50:21:60:aa:7b:75:2c:01:9b:c4:09:4a:f1:bf:
5c:a6:9e:ad:54:a4:fb:91:f5:df:d3:d1:47:45:28:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:D2:FA:7E:30:DD:BD:84:28:ED:60:C5:98:49:8F:66:FA:5D:6D
X509v3 Authority Key Identifier:
keyid:DC:D2:6F:F6:04:03:AC:E4:61:17:DE:3E:E9:9E:E7:9C:1F:53:DB:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3e258591b81b726517d993ac9db01b629da36e1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/a218546f3f847b6e5bff96caea7c89e4c75acb88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/d3e258591b81b726517d993ac9db01b629da36e1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.60.0/22
Signature Algorithm: sha256WithRSAEncryption
47:29:94:9d:45:38:3b:7a:78:b1:38:9e:cf:86:92:83:4d:26:
52:ec:fe:58:50:ca:2c:c1:c4:94:7e:86:cb:f1:ce:e1:f6:89:
83:f3:e2:7f:84:6d:88:46:91:6a:62:d8:50:fe:f6:2a:d9:ff:
0a:02:a0:38:98:74:a8:03:71:60:f0:6e:33:7b:fb:23:e6:b0:
f3:c5:db:c3:5e:64:16:fb:c7:48:50:7f:9d:f0:35:e9:48:e2:
cb:4b:cf:40:3d:ed:44:40:42:36:0d:07:f1:eb:d6:46:86:ef:
13:d2:ee:20:bc:cf:f9:08:13:0c:1a:53:15:fa:28:16:c3:2e:
13:8b:c0:97:6d:c8:7e:8f:14:50:e2:41:2e:de:ae:bf:63:88:
9a:56:ff:d4:38:83:03:7a:1b:47:96:ba:67:c5:5b:d9:c4:f7:
25:25:e4:ab:fa:a2:ce:08:17:48:34:1c:b9:8e:57:50:02:a4:
a4:34:62:db:b7:ea:2b:9a:cf:60:ca:83:56:df:aa:c8:69:bc:
a2:15:55:1f:5f:eb:1c:35:24:30:1b:7f:53:1d:78:aa:36:80:
fc:a3:4a:b6:6e:41:ed:06:54:6d:07:82:8e:72:d6:d1:32:3c:
de:41:c9:86:cc:09:41:90:76:d2:de:6f:95:92:b1:e4:d5:92:
7a:19:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org