Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/1645a422c659072c049812db219ffd52e65908d5.roa
File: 1645a422c659072c049812db219ffd52e65908d5.roa (raw, json)
Hash identifier: Z60N4N2BmdGrgUip4Jg+pHTwubAPdm8N5d+oxaumiF4=
Subject key identifier: 64:4B:53:4A:7C:51:28:E6:9F:D2:38:8A:70:26:1B:F8:CA:DD:73:F6
Certificate issuer: /CN=a835ecfb849bdaf6e17afc5648e5c10499cc2864
Certificate serial: 237533
Authority key identifier: D5:B6:03:67:61:30:CB:1C:5C:BC:81:6A:CB:65:8F:5E:B5:79:B8:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a835ecfb849bdaf6e17afc5648e5c10499cc2864.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/1645a422c659072c049812db219ffd52e65908d5.roa
Signing time: Thu 16 Nov 2023 19:40:09 +0000
ROA not before: Thu 16 Nov 2023 19:40:09 +0000
ROA not after: Sun 16 Nov 2025 19:40:09 +0000
asID: 267876
IP address blocks: 45.178.8.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323763 (0x237533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a835ecfb849bdaf6e17afc5648e5c10499cc2864
Validity
Not Before: Nov 16 19:40:09 2023 GMT
Not After : Nov 16 19:40:09 2025 GMT
Subject: CN=1645a422c659072c049812db219ffd52e65908d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:35:bc:c1:03:e3:9a:b3:59:7f:3c:cf:6e:a4:
b8:3d:e1:1f:d3:32:a4:66:96:f1:e2:d1:3e:36:c1:
b3:d4:5e:1e:8c:a1:de:93:79:5b:7d:e5:17:11:03:
9f:a5:9c:4e:27:c8:e4:71:11:dd:d1:8f:bc:ba:fc:
15:65:c3:09:75:6d:c0:62:82:bc:26:7a:16:b6:15:
82:c4:7d:a2:95:0b:e5:97:9d:5a:44:c5:c3:ee:55:
d6:60:f4:d9:e6:58:26:41:a5:cc:93:25:19:82:99:
73:ec:38:30:6d:20:69:dc:32:1b:d4:8e:4f:aa:25:
a4:db:d0:c9:0e:d3:96:95:3f:e7:e1:e1:cb:05:81:
4c:87:7f:1a:64:8f:8c:a6:21:b9:ef:9e:43:fb:aa:
61:15:cf:c5:88:cb:ce:9b:94:fe:ed:d6:0a:42:11:
8d:f3:2d:a9:cd:ca:34:0a:db:b5:4c:64:0c:22:d2:
ce:c8:59:00:a3:0e:4f:1b:1a:2e:d7:73:48:37:cb:
27:bb:72:9d:e2:da:06:f2:c6:a2:23:f1:af:ac:cf:
79:0b:b3:68:ce:2a:18:b7:6c:ce:83:cd:ca:84:34:
be:29:a1:0d:3c:fa:7d:35:b2:c5:3d:7b:f9:f8:83:
2a:26:8b:c3:a5:19:7c:65:a9:f7:08:23:63:d7:14:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:53:4A:7C:51:28:E6:9F:D2:38:8A:70:26:1B:F8:CA:DD:73:F6
X509v3 Authority Key Identifier:
keyid:D5:B6:03:67:61:30:CB:1C:5C:BC:81:6A:CB:65:8F:5E:B5:79:B8:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a835ecfb849bdaf6e17afc5648e5c10499cc2864.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/1645a422c659072c049812db219ffd52e65908d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/a835ecfb849bdaf6e17afc5648e5c10499cc2864.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:e0:db:b4:6c:9f:78:ab:0d:b2:90:38:85:e8:b8:68:92:fd:
d2:8a:af:1e:e3:ae:8a:8e:de:e6:ad:aa:c5:ee:2f:7f:25:ff:
7c:9c:13:c4:55:fc:7d:c9:ed:1e:f8:d8:f4:49:22:34:44:0b:
d3:26:8a:ec:8b:df:a8:45:5f:3f:b6:5a:22:0c:48:d0:86:03:
55:e1:ee:4e:2b:5f:0d:53:80:64:cc:f5:c5:58:03:db:13:2e:
bb:c2:a0:0d:80:cd:fd:64:c2:53:a8:4b:f6:00:ba:62:dd:4f:
ca:04:82:25:78:dd:a6:78:47:61:c0:fe:63:c0:8b:f9:64:f4:
5f:be:c6:c6:8b:cb:ac:61:3b:fe:f3:8d:30:3e:50:20:9c:3a:
7d:7d:e4:f9:6e:c1:e9:c8:d2:ee:a1:f7:a4:eb:75:11:df:18:
22:0f:e0:e8:e9:46:73:fa:a8:72:d0:2b:e1:26:5d:dd:9b:ad:
d7:3d:14:66:cc:92:fc:16:cb:ae:e4:af:e5:ab:fe:34:09:9f:
36:55:8b:9d:e2:75:74:2f:8e:65:3a:06:6a:fc:76:56:e6:50:
3a:d2:61:19:59:61:04:29:e0:d1:ba:c7:b4:bb:4c:a5:13:7f:
72:8a:6a:d6:2d:c4:5a:7e:39:c9:31:3d:a3:bc:18:8f:d7:6f:
f3:52:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org