Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/f331c01a85b136fe164ad7f03a3fe524adb6d78b.roa
File: f331c01a85b136fe164ad7f03a3fe524adb6d78b.roa (raw, json)
Hash identifier: 8JdrC04gcKP04f/NqJegiPyU5A9CTpWjPOGOGfKcpEY=
Subject key identifier: 54:C9:F9:C8:E3:96:5D:5B:6E:6F:95:4A:16:8E:C2:A9:67:D9:BE:C6
Certificate issuer: /CN=b39e9213a27f038d3701817402c0abd4741eeae8
Certificate serial: 22E022
Authority key identifier: 99:79:99:98:C9:5F:87:1F:BB:3E:E7:AF:2C:AA:BF:1F:F9:F3:9F:9E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b39e9213a27f038d3701817402c0abd4741eeae8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/f331c01a85b136fe164ad7f03a3fe524adb6d78b.roa
Signing time: Tue 05 Sep 2023 21:50:46 +0000
ROA not before: Mon 04 Sep 2023 21:50:46 +0000
ROA not after: Fri 05 Sep 2025 21:50:46 +0000
asID: 265781
IP address blocks: 164.163.56.0/22 maxlen: 22
2803:1fc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2285602 (0x22e022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39e9213a27f038d3701817402c0abd4741eeae8
Validity
Not Before: Sep 4 21:50:46 2023 GMT
Not After : Sep 5 21:50:46 2025 GMT
Subject: CN=f331c01a85b136fe164ad7f03a3fe524adb6d78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:55:d7:c2:a5:69:38:cc:00:25:bd:e5:01:
d5:95:f4:ff:91:aa:ae:37:8e:00:71:60:9f:c6:8a:
d7:36:dc:70:95:29:09:42:d9:f9:94:9f:ac:7e:47:
f3:7e:02:60:a2:5e:75:38:c1:c4:98:5b:bf:37:54:
78:4c:08:2b:f8:44:a0:b8:e6:37:1b:30:fc:22:35:
38:05:f8:8a:2c:cd:ff:61:cf:35:f7:3f:9a:9a:22:
c4:43:9e:33:81:e3:bc:6e:3e:11:df:a6:08:e3:cb:
12:e9:f7:df:c7:b5:dd:5b:d5:bc:0e:78:13:8a:d3:
8e:b6:3c:12:5a:81:b8:8f:4a:84:60:e7:15:f7:ed:
16:a4:49:65:e5:fe:52:03:c6:a2:9d:bd:74:98:02:
6f:2d:db:5b:be:4e:07:71:7e:b1:7c:27:cf:d2:d2:
a9:0a:33:7b:ea:58:f5:63:bb:3b:bf:aa:9c:c3:59:
58:7f:2c:c4:97:6b:71:f0:b6:04:19:eb:8a:47:df:
e6:30:b6:5b:c7:eb:3c:2a:90:2d:97:a3:3d:11:c0:
e7:81:40:e6:57:62:a5:1c:66:d7:d9:37:6c:9a:42:
c0:39:0d:c6:07:f1:d6:49:c2:ac:4a:b7:bf:8c:e3:
94:78:6c:3e:58:70:d1:60:a6:95:ea:b8:9e:c0:e3:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C9:F9:C8:E3:96:5D:5B:6E:6F:95:4A:16:8E:C2:A9:67:D9:BE:C6
X509v3 Authority Key Identifier:
keyid:99:79:99:98:C9:5F:87:1F:BB:3E:E7:AF:2C:AA:BF:1F:F9:F3:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b39e9213a27f038d3701817402c0abd4741eeae8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/f331c01a85b136fe164ad7f03a3fe524adb6d78b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/b39e9213a27f038d3701817402c0abd4741eeae8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.56.0/22
IPv6:
2803:1fc0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:14:a7:40:cc:3c:e7:fa:6a:02:cb:f5:bf:57:82:76:8d:16:
c2:50:84:e8:76:51:23:e7:97:86:eb:3a:c2:04:61:b9:73:35:
f2:4d:36:05:12:15:fe:0b:7d:9f:fe:95:1c:57:c5:5d:38:d0:
c8:53:99:7a:d0:4d:33:ef:ca:50:c8:70:e4:14:08:6c:42:60:
db:09:03:16:58:aa:10:d4:17:f5:b9:00:2e:9f:a1:4f:08:be:
e3:58:1a:39:84:cf:98:c3:cb:93:92:b8:a6:8a:47:4f:86:50:
cb:c8:67:67:ca:f4:7c:69:fd:3d:a1:41:65:d2:55:a4:48:8a:
d1:a0:d2:2a:3e:3d:c5:61:62:94:bd:d9:0e:51:01:03:f4:aa:
b9:d7:78:0d:03:e3:3f:4d:fa:6e:5e:bf:f1:3b:a6:e3:d5:4f:
45:9e:9b:83:33:bb:b7:be:57:37:71:33:e4:aa:cf:d9:2c:34:
0d:2e:30:9d:0f:bf:1d:1b:ea:9e:55:be:55:14:5a:d6:75:83:
69:66:b6:aa:16:49:86:5f:87:f9:3d:f0:7c:4e:0d:12:2e:f8:
f2:41:ba:02:59:d2:66:92:93:c9:c0:04:cb:fd:0a:85:3b:b0:
cf:a3:ed:2d:1a:0d:a9:46:60:72:7d:e7:de:dc:15:b3:14:2d:
f5:49:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:57:37 2025 by rpki-client