Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/691e31c3b99d87dc8ac08cd09a2e8f2033767241.roa
File: 691e31c3b99d87dc8ac08cd09a2e8f2033767241.roa (raw, json)
Hash identifier: NatlVwx7BgVKnB6i+pumEEsY5L4ltWvQWjvJ6aJumpU=
Subject key identifier: 5A:6C:AC:97:4F:2B:B7:18:1E:50:3E:82:2F:90:36:97:BB:BD:C9:59
Certificate issuer: /CN=16b44d2a0bda515371a4ded869185f017218c9f2
Certificate serial: 213A9B
Authority key identifier: 8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/691e31c3b99d87dc8ac08cd09a2e8f2033767241.roa
Signing time: Sat 10 Jun 2023 18:41:11 +0000
ROA not before: Fri 09 Jun 2023 18:41:11 +0000
ROA not after: Tue 10 Jun 2025 18:41:11 +0000
asID: 263766
IP address blocks: 170.83.108.0/22 maxlen: 24
190.103.84.0/22 maxlen: 24
2800:d00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177691 (0x213a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b44d2a0bda515371a4ded869185f017218c9f2
Validity
Not Before: Jun 9 18:41:11 2023 GMT
Not After : Jun 10 18:41:11 2025 GMT
Subject: CN=691e31c3b99d87dc8ac08cd09a2e8f2033767241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:bb:40:ce:72:cf:8b:0c:ff:fc:e5:0c:be:
bc:5c:d1:60:aa:f1:68:b6:ae:65:8a:7c:11:4d:0b:
f3:94:ae:74:05:64:be:1c:81:42:19:56:48:52:31:
3e:7c:e9:40:54:e2:56:fe:41:47:63:3f:0e:39:87:
a9:a8:d3:d9:fd:07:2e:51:fa:84:e7:19:f9:00:12:
3e:81:67:9b:a2:6d:7f:d8:3b:17:c0:b0:93:70:a5:
03:24:bc:c5:1a:88:4e:e7:78:36:e3:01:59:26:2d:
c5:7d:49:14:16:fc:9b:c0:7c:1b:83:5c:26:88:9e:
c1:f0:9d:56:3a:be:f8:8a:c3:52:9c:2f:08:d1:82:
70:b2:46:de:81:6f:c9:27:24:d9:84:da:7a:9b:e3:
f8:fa:64:2b:92:46:c4:82:a2:21:5c:72:62:fa:0b:
cc:ba:8c:27:c1:e6:00:1b:7f:1b:5d:27:7a:03:a6:
cd:46:dc:09:e5:f2:2a:9f:88:ef:96:80:91:99:68:
dc:96:bb:36:00:72:8b:04:f6:0d:6b:a9:01:07:f1:
a6:eb:68:b8:19:ac:8a:bc:13:a5:16:dd:10:7a:c2:
7d:0e:10:39:5b:0a:69:02:10:96:93:0c:9e:e3:22:
b9:3e:ac:a1:7d:81:31:8b:17:9c:55:3d:0f:4d:c1:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6C:AC:97:4F:2B:B7:18:1E:50:3E:82:2F:90:36:97:BB:BD:C9:59
X509v3 Authority Key Identifier:
keyid:8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/691e31c3b99d87dc8ac08cd09a2e8f2033767241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.108.0/22
190.103.84.0/22
IPv6:
2800:d00::/32
Signature Algorithm: sha256WithRSAEncryption
6b:38:db:a3:dd:93:b0:9f:e1:6b:ac:dd:9a:98:19:45:1c:cf:
a8:55:ae:46:c2:12:97:5e:2e:95:32:a6:f4:ed:5f:36:9d:a0:
c5:38:21:91:a5:c6:a3:11:9f:1e:a1:47:67:b7:65:15:0d:e0:
93:7c:13:22:58:a8:1c:5b:e0:ad:dd:fd:b0:23:92:ed:e0:db:
8b:51:7d:24:57:de:59:3e:e1:54:bc:10:f5:af:3c:00:f5:d3:
50:36:21:bc:55:1e:73:29:90:ab:41:ee:08:15:be:fb:c9:99:
d4:38:1f:16:50:9c:b9:30:ff:fc:19:c5:ec:7d:49:cd:e0:d7:
5d:d7:4e:f4:b3:19:63:e8:06:48:49:e5:d5:41:b2:94:32:6f:
b4:9f:ae:07:4c:04:4f:a9:d9:9d:21:70:6b:33:4d:5b:d9:5d:
79:35:38:99:4e:5a:56:4c:8a:1f:1c:56:3d:1e:a2:df:df:85:
37:12:b9:d5:12:cd:09:ea:02:71:55:5d:17:f9:5f:66:16:3f:
b9:34:25:cd:33:6f:b5:f6:fb:fb:9c:94:72:18:9f:9c:d4:3c:
bd:53:ec:14:2d:58:ab:65:81:8f:72:7f:fc:45:c2:1f:74:42:
26:f8:57:e4:bb:30:50:f2:02:ba:a1:cf:59:61:79:79:4a:2f:
3f:56:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org