Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/227e6271b69e9345629dab6a741644a8a9f9872e.roa
File: 227e6271b69e9345629dab6a741644a8a9f9872e.roa (raw, json)
Hash identifier: zTRz3pdmmR02p2t+wAX1OIXDJecJttRtC4gFNqSWFlY=
Subject key identifier: 32:77:1D:D7:E3:9F:41:35:1D:C5:44:8A:19:9D:33:5E:48:10:07:80
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 245270
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/227e6271b69e9345629dab6a741644a8a9f9872e.roa
Signing time: Sun 24 Sep 2023 01:41:49 +0000
ROA not before: Sat 23 Sep 2023 01:41:49 +0000
ROA not after: Wed 24 Sep 2025 01:41:49 +0000
asID: 269918
IP address blocks: 131.72.168.0/22 maxlen: 23
131.72.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380400 (0x245270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Sep 23 01:41:49 2023 GMT
Not After : Sep 24 01:41:49 2025 GMT
Subject: CN=227e6271b69e9345629dab6a741644a8a9f9872e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:17:90:56:11:eb:fa:bc:3c:4a:ba:7c:2c:
b4:b0:3b:85:ac:47:9b:15:34:24:c9:32:11:af:f1:
24:df:23:db:2c:1f:95:09:58:74:d3:e0:3f:6d:43:
c3:27:e2:24:a0:f7:ed:9c:53:d4:87:d7:6b:9b:ee:
2c:29:a2:94:fd:6e:84:a4:60:99:10:48:ee:7f:9f:
0d:e8:a6:44:1e:51:b5:4d:91:b2:81:51:c1:32:05:
c1:a3:e4:9c:a2:c2:a5:50:1e:73:20:2f:1b:4f:db:
fa:95:53:b6:a1:94:60:7e:3a:23:43:c1:a8:1b:4d:
84:df:45:5c:c0:e5:07:28:df:6f:04:be:1c:bd:4a:
37:aa:61:fd:f3:39:65:ce:a0:43:48:5c:1d:9f:13:
bb:81:5c:b8:ad:57:55:b9:f8:3e:a9:f8:76:72:ca:
13:0e:a5:b1:75:f9:40:51:e0:55:19:80:e1:3e:27:
4a:2b:87:b5:62:87:05:4a:cb:62:1a:5e:1d:73:7d:
76:f1:d2:b3:c7:d0:fa:0e:27:37:e8:b8:f0:67:50:
9d:90:d7:65:db:c6:2e:65:b8:e6:63:5b:a3:5c:b1:
70:6f:5c:58:17:3f:91:7f:1d:b9:06:ff:4f:1b:3e:
44:73:09:f8:bc:be:78:44:f1:25:34:12:fe:1c:cc:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:1D:D7:E3:9F:41:35:1D:C5:44:8A:19:9D:33:5E:48:10:07:80
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/227e6271b69e9345629dab6a741644a8a9f9872e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:c3:95:38:0e:58:21:5e:84:23:67:ea:a2:cf:23:bc:97:38:
e1:a2:a6:78:0e:80:f0:2d:fb:e3:6a:fa:96:e2:32:7f:29:2e:
e4:8d:b4:63:28:5e:ab:d4:8b:89:20:b6:d4:16:b1:db:b8:7d:
bf:fc:78:94:0a:5c:73:eb:89:2d:a2:80:ce:db:36:63:9f:e1:
ae:96:71:c0:88:33:46:c4:57:ee:83:84:09:4c:57:1c:bb:b2:
64:2e:33:9c:bf:b0:4f:ed:8b:aa:31:9b:66:f3:bf:dc:73:12:
60:41:91:3c:18:26:be:88:1a:bf:b1:fd:5b:71:55:b7:a8:34:
54:05:58:16:8f:c3:c3:42:65:7e:71:a7:01:20:aa:1b:94:cc:
11:9e:38:f9:78:ef:9e:38:28:7c:5a:f7:86:24:ba:a8:a0:1f:
ba:24:6b:59:54:99:de:83:86:7e:20:0b:af:af:24:6f:59:fa:
e3:e9:b6:10:cc:08:98:56:2e:e9:b6:40:49:83:b0:9f:0b:6e:
a3:87:7b:b9:18:5f:29:7a:6d:65:b5:f1:01:37:e2:c3:d4:bb:
53:85:92:ef:9b:cc:71:6b:06:0a:c7:3f:0c:ac:1f:8d:f6:a2:
05:90:89:26:3c:98:fe:1e:e4:f9:4b:09:ab:5a:8f:dd:3b:58:
d3:c8:8d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:00:24 2025 by rpki-client