Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/65241c6faa3831de5d97a6ca44cc983c24372071.roa
File: 65241c6faa3831de5d97a6ca44cc983c24372071.roa (raw, json)
Hash identifier: /JTNlDUgRUyS4iiTavNW15mpFPdS6Zaz76S3GCFsq/E=
Subject key identifier: 77:B4:AD:B2:2B:D1:1A:1B:B2:86:6E:52:46:BD:AA:FE:36:41:C6:51
Certificate issuer: /CN=8f3873d2185c02d28d6e454da708150f962e9305
Certificate serial: 039692
Authority key identifier: 18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/65241c6faa3831de5d97a6ca44cc983c24372071.roa
Signing time: Thu 16 Nov 2023 20:41:42 +0000
ROA not before: Thu 16 Nov 2023 20:41:41 +0000
ROA not after: Sun 16 Nov 2025 20:41:41 +0000
asID: 28067
IP address blocks: 64.28.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235154 (0x39692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3873d2185c02d28d6e454da708150f962e9305
Validity
Not Before: Nov 16 20:41:41 2023 GMT
Not After : Nov 16 20:41:41 2025 GMT
Subject: CN=65241c6faa3831de5d97a6ca44cc983c24372071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:a5:8b:62:e5:b2:18:72:cf:a9:96:89:3e:
59:6d:8e:10:4d:da:7e:7a:f4:ed:65:7c:7c:53:c1:
b9:c7:a4:34:c5:00:41:73:b8:61:dc:06:6d:61:9a:
ed:cc:67:58:0f:aa:60:2b:3d:3a:b1:a4:e1:03:fd:
1e:21:0b:7a:ce:94:c6:2b:2c:d3:bb:ff:bf:51:9b:
84:34:a2:23:c8:c7:9b:01:da:13:9d:94:53:83:1a:
df:16:0c:ea:b9:96:f9:24:10:70:63:03:6a:34:63:
87:c1:89:94:69:e5:42:bd:31:09:24:92:55:44:4a:
5d:a3:9b:de:6f:d1:a0:0b:5e:83:88:a6:02:9f:c9:
b0:27:45:49:10:96:d2:fe:c3:fe:a6:fc:a9:eb:5e:
37:19:85:75:69:4a:4f:5c:79:eb:c5:9d:f2:0c:0b:
71:da:69:8d:43:b6:35:c1:26:3c:ac:16:b9:2d:34:
7c:3c:eb:a8:58:6d:f2:12:eb:12:b5:7e:43:bb:d4:
90:c6:69:45:be:4e:fc:e8:ed:18:20:21:05:a9:04:
12:8d:06:60:0a:5c:33:89:c5:8d:7f:cc:5b:99:6e:
78:f4:46:25:c3:d5:c4:3f:7e:1a:8f:47:f9:03:7b:
f2:d2:fd:6c:0e:09:91:e2:4c:12:6a:d0:7d:54:12:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B4:AD:B2:2B:D1:1A:1B:B2:86:6E:52:46:BD:AA:FE:36:41:C6:51
X509v3 Authority Key Identifier:
keyid:18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/65241c6faa3831de5d97a6ca44cc983c24372071.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.28.128.0/21
Signature Algorithm: sha256WithRSAEncryption
59:8e:ab:f4:01:4a:a6:97:e6:55:de:aa:7c:d3:08:37:2a:e7:
55:7c:b5:67:1d:48:5d:b8:a4:14:e7:55:b6:e7:81:d1:a1:d0:
b7:09:db:ed:a7:7c:c7:d7:ed:94:da:82:b8:b7:16:12:98:36:
21:f3:bc:a9:85:ae:d9:8e:d1:ac:ed:3d:1d:89:31:80:23:7c:
1a:95:e6:f8:3c:22:a7:a6:f1:a2:0e:4e:94:33:9f:52:6d:0a:
ce:d3:db:cd:a3:30:82:fe:52:9c:f1:a7:e1:6a:7c:73:d9:99:
81:d8:f9:1f:c4:ee:39:65:51:71:f0:a0:96:05:68:f3:04:d6:
d0:ef:1f:c9:88:7e:c6:9b:21:da:6f:2d:7a:52:7d:49:3c:87:
db:32:bf:f0:62:9d:34:de:0a:d2:2b:95:4e:c7:a8:23:80:4e:
7f:6e:54:84:61:80:f5:e2:8d:a3:f5:66:9b:2e:c0:3b:c0:27:
97:93:30:31:3e:94:f2:3b:55:21:24:69:8b:88:b4:d5:01:47:
4f:8d:83:7e:4f:0a:c1:fe:c7:c9:87:e8:74:59:22:e4:06:76:
3c:b2:19:32:c4:5d:a9:3a:70:f7:28:f1:ce:85:e3:42:c9:ba:
84:83:3b:28:50:17:47:8a:a0:ed:02:84:13:a4:63:e6:fe:6e:
05:23:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org