Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/cd25aefca2afcbb297203e5bef55232db9e1829d.roa
File: cd25aefca2afcbb297203e5bef55232db9e1829d.roa (raw, json)
Hash identifier: cGHDdkQsNkRi87f7h0c3/1LPSmIwI+V6ZRI2PULOyiI=
Subject key identifier: 3F:54:0C:0D:F8:09:22:BD:AD:2B:46:8F:E0:B4:BA:EA:F4:21:3F:B3
Certificate issuer: /CN=21a3123959d9e97ae7e204e2a4018c03a6d5ab84
Certificate serial: 0B71
Authority key identifier: A9:61:C9:74:C7:C6:A5:CF:0B:06:49:21:C6:47:E9:0F:3C:55:75:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/cd25aefca2afcbb297203e5bef55232db9e1829d.roa
Signing time: Mon 04 Jul 2022 13:12:29 +0000
ROA not before: Mon 04 Jul 2022 03:00:00 +0000
ROA not after: Thu 04 Jul 2024 03:00:00 +0000
asID: 52380
IP address blocks: 179.60.152.0/21 maxlen: 24
186.65.84.0/22 maxlen: 24
2803:ea00::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2929 (0xb71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a3123959d9e97ae7e204e2a4018c03a6d5ab84
Validity
Not Before: Jul 4 03:00:00 2022 GMT
Not After : Jul 4 03:00:00 2024 GMT
Subject: CN=cd25aefca2afcbb297203e5bef55232db9e1829d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:c7:d8:2e:b6:9c:47:8e:be:05:84:74:72:
1d:7d:85:58:c8:da:48:ab:26:2a:0c:16:5e:50:78:
62:0f:a4:3e:e2:4c:dc:9c:30:c4:04:16:89:d8:e7:
fc:24:12:90:4a:3e:6d:e0:54:8b:86:aa:6e:31:97:
0b:04:de:90:43:04:ad:47:de:a3:4c:dd:13:95:44:
76:90:91:5b:c9:26:19:77:0d:21:96:8a:8e:71:82:
71:c9:46:dc:63:76:f6:9d:5d:5b:9a:72:e7:90:e0:
6b:4f:f5:38:46:e8:fe:c8:3a:ab:e6:71:1c:da:3f:
9a:66:b3:e2:73:62:46:92:6f:59:81:94:12:41:ba:
92:05:a8:34:4b:8f:cc:3b:8c:89:be:e8:ba:cb:84:
e4:05:f0:88:56:cf:ec:65:b3:0f:67:58:71:50:9b:
9d:7a:bf:af:5e:1a:34:2d:b1:53:80:a0:c2:e9:7d:
bc:48:e0:46:39:0e:5c:97:d4:c8:58:b8:21:6c:67:
c1:85:7b:fd:29:8a:95:6e:7f:15:cb:89:b5:4c:38:
cb:a0:93:17:39:83:40:43:bb:6e:7e:59:42:c6:e2:
1f:f8:64:21:f3:23:08:70:59:9c:50:07:0d:be:96:
e4:dc:56:b5:17:34:e8:0f:26:af:0a:cb:85:69:cd:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:54:0C:0D:F8:09:22:BD:AD:2B:46:8F:E0:B4:BA:EA:F4:21:3F:B3
X509v3 Authority Key Identifier:
keyid:A9:61:C9:74:C7:C6:A5:CF:0B:06:49:21:C6:47:E9:0F:3C:55:75:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/cd25aefca2afcbb297203e5bef55232db9e1829d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.152.0/21
186.65.84.0/22
IPv6:
2803:ea00::/32
Signature Algorithm: sha256WithRSAEncryption
9d:5a:45:04:57:90:49:07:2c:2b:d8:17:49:e7:f0:d9:04:1a:
81:b9:cf:fb:19:f3:ad:98:c0:7b:2c:08:56:fa:24:8c:29:0b:
5f:18:4a:be:e6:bf:58:a9:86:42:cd:9f:8e:51:02:ad:00:96:
0b:49:f6:be:07:d6:12:43:b8:2d:ac:eb:d7:7a:c7:55:85:4d:
1d:93:04:16:a8:f7:7b:e0:93:d5:44:ec:a3:39:5c:0a:a8:55:
01:89:9b:a4:44:4b:55:68:1c:d8:10:87:54:bd:f3:a3:49:e8:
24:e6:e1:a0:83:07:a1:b7:13:40:64:3c:cd:37:78:d1:42:17:
8b:0b:e0:68:63:92:b2:da:8e:a5:67:3b:a9:ad:f9:f2:26:70:
ae:05:c6:31:26:45:f7:1b:92:d0:18:a4:02:63:59:93:2f:06:
55:41:a5:1b:5f:b9:e5:48:1a:4b:c3:38:06:67:81:d7:29:2e:
54:93:df:2c:10:a8:7d:6e:11:a1:8d:4e:19:a0:98:ab:32:f7:
4b:49:8f:84:6c:ba:dd:26:f6:67:df:e4:6c:3c:25:f0:e8:8b:
aa:f7:7c:12:47:3a:e0:ac:a2:2b:48:df:12:78:e7:ee:2c:d3:
30:8c:17:b3:46:82:59:89:3a:cd:1f:da:ed:18:c5:02:a1:6b:
da:05:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org