Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/09d38e29b1f199892c6d84d4365cc6b9c1749ffa.roa
File: 09d38e29b1f199892c6d84d4365cc6b9c1749ffa.roa (raw, json)
Hash identifier: LsXMy457zXOvZzUuwHyRAFEIECxfOBNbZ8/CxF1PGX0=
Subject key identifier: AC:8B:FB:A2:06:51:82:24:63:78:01:19:80:DD:53:2D:0C:98:8A:79
Certificate issuer: /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial: 2783A8
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/09d38e29b1f199892c6d84d4365cc6b9c1749ffa.roa
Signing time: Tue 06 Feb 2024 15:31:39 +0000
ROA not before: Tue 06 Feb 2024 15:31:39 +0000
ROA not after: Fri 06 Feb 2026 15:31:39 +0000
asID: 6535
IP address blocks: 179.4.0.0/16 maxlen: 18
186.20.0.0/15 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2589608 (0x2783a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Validity
Not Before: Feb 6 15:31:39 2024 GMT
Not After : Feb 6 15:31:39 2026 GMT
Subject: CN=09d38e29b1f199892c6d84d4365cc6b9c1749ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:fd:9a:f7:37:e2:5f:aa:ae:30:a9:f9:8b:
bd:ff:d8:ee:c2:08:fa:9d:27:65:a4:9c:08:fe:7d:
28:39:b1:a0:28:02:1e:bb:57:15:10:45:f9:5a:c5:
58:63:db:66:7b:17:32:02:08:0e:d6:77:9f:40:a3:
da:59:05:2c:4e:56:5c:0f:0b:7d:19:a6:d6:75:a3:
f3:15:f3:02:9a:4a:1b:cb:5c:cd:8c:e1:08:84:22:
49:cd:bb:13:1b:a1:f7:63:b7:83:f9:4f:47:95:7e:
c7:53:60:2c:1c:c4:e2:67:c5:84:27:c7:7f:40:7d:
de:c4:60:e9:c7:1e:54:ed:4a:30:60:17:b0:53:83:
b5:84:9d:17:ff:d3:f7:9f:37:a3:c4:aa:f4:8f:89:
a5:a9:da:f8:c4:e1:be:c8:ed:1c:7e:cb:64:1c:c3:
ce:85:79:06:a6:5b:df:48:4d:54:77:36:ce:ef:59:
df:03:a6:97:ea:bc:f4:43:0a:66:e5:82:a0:c3:7e:
82:a1:b8:6a:77:33:4a:5f:fc:96:7a:43:0b:68:88:
6a:0c:6c:5d:b5:0c:26:e3:b9:0c:f6:dc:e4:40:f1:
aa:68:10:a5:e1:43:0c:55:a2:e1:72:3e:d9:b5:1f:
c4:bf:5e:91:84:10:86:ca:44:2d:1c:7c:91:3f:77:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8B:FB:A2:06:51:82:24:63:78:01:19:80:DD:53:2D:0C:98:8A:79
X509v3 Authority Key Identifier:
keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/09d38e29b1f199892c6d84d4365cc6b9c1749ffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.4.0.0/16
186.20.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0b:f0:90:c5:6a:b3:43:0b:22:d9:94:24:ee:b7:bf:bb:02:18:
34:35:fa:7b:c0:70:a6:e6:89:dc:a6:6c:86:6f:6d:a1:4c:15:
65:b1:bd:c4:73:cd:8e:42:bb:81:f1:5d:a9:a7:3b:44:20:41:
36:5b:94:d5:98:79:46:b2:3c:a0:26:91:e0:cf:de:33:d7:a6:
14:4b:cc:a1:ab:fa:cb:65:64:10:82:90:70:be:82:38:20:7e:
f9:a7:31:08:ec:9f:94:08:b8:6c:e0:60:a8:99:7b:fd:b3:bb:
f2:7e:2b:62:80:39:81:6a:d7:7e:3d:31:1b:3f:9f:92:c5:47:
14:3c:5c:77:7e:8c:4b:04:d3:f3:9a:47:7d:25:c7:3b:dc:a0:
fc:a9:e8:9c:57:18:c1:99:0f:14:18:0d:a9:1a:b4:52:5e:79:
69:a3:67:fb:e0:d9:97:f2:5e:b9:fd:e5:34:cd:80:2d:8d:77:
aa:03:98:51:93:70:c5:56:34:42:ae:51:ef:ee:48:2b:3d:0f:
99:4c:2b:a3:53:a5:35:46:b9:ce:79:5e:f8:3e:d4:02:19:bc:
ec:67:0c:7b:e5:f6:20:69:32:7f:0e:17:9b:81:1c:b9:99:a7:
57:39:5e:9f:e4:90:23:58:54:ad:eb:f9:da:43:e2:e2:0e:f4:
62:c5:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org