Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/acdc9f464b2b0babeb87c0913c4502e57d874ff4.roa
File: acdc9f464b2b0babeb87c0913c4502e57d874ff4.roa (raw, json)
Hash identifier: PXszrvz+T3ea95D/8+CsWSxq3mgLBzVl9BDz+518LhM=
Subject key identifier: 8E:A7:D8:5C:2C:52:BB:5F:7F:1E:2B:DB:EB:4D:D0:27:10:DF:A6:57
Certificate issuer: /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial: 1DE18F
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/acdc9f464b2b0babeb87c0913c4502e57d874ff4.roa
Signing time: Sun 30 Apr 2023 01:18:38 +0000
ROA not before: Sat 29 Apr 2023 01:18:36 +0000
ROA not after: Wed 30 Apr 2025 01:18:36 +0000
asID: 27951
IP address blocks: 201.131.88.0/23 maxlen: 24
45.189.235.0/24 maxlen: 24
2803:84e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1958287 (0x1de18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Validity
Not Before: Apr 29 01:18:36 2023 GMT
Not After : Apr 30 01:18:36 2025 GMT
Subject: CN=acdc9f464b2b0babeb87c0913c4502e57d874ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:85:e7:5a:fc:52:a8:c5:04:16:e6:2b:1c:
e6:23:e5:b2:db:8b:7f:7a:27:b6:31:d5:fc:97:e6:
06:64:a4:ad:6a:e4:e4:77:66:01:8e:fe:8e:c3:66:
0d:28:11:2e:bd:28:8a:31:97:bd:85:91:05:1b:77:
02:1c:93:b3:14:8b:30:40:79:ba:f4:6f:76:fe:80:
94:46:d6:80:ce:e0:39:5f:25:f0:d1:64:7a:cd:46:
44:96:23:f0:04:d8:3d:d3:99:e9:88:d7:07:d0:b2:
ba:14:90:3b:f6:95:3c:44:fe:85:6e:6d:69:e6:a8:
eb:63:aa:ea:a2:1f:5f:dd:9a:62:37:df:d9:c2:b6:
8d:40:ae:8a:24:ce:8f:1d:e3:ea:e8:0b:1b:9c:0b:
34:36:b1:91:f6:fa:53:21:c6:dc:51:80:82:a5:3d:
67:8e:99:7b:92:4b:9a:8f:2d:75:e0:1f:34:1e:9b:
41:82:aa:50:1d:48:09:41:04:56:69:6a:25:ea:02:
df:7f:e5:b0:47:d8:fb:1a:65:fd:0e:f5:ff:92:82:
1c:0d:e7:3a:3d:12:20:22:53:43:5e:58:95:a9:2c:
a5:fa:e8:0e:bb:b6:69:59:7d:d0:6e:31:de:be:27:
0d:9a:89:e5:73:13:3c:17:07:3f:ff:bd:36:e8:dd:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A7:D8:5C:2C:52:BB:5F:7F:1E:2B:DB:EB:4D:D0:27:10:DF:A6:57
X509v3 Authority Key Identifier:
keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/acdc9f464b2b0babeb87c0913c4502e57d874ff4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.235.0/24
201.131.88.0/23
IPv6:
2803:84e0::/32
Signature Algorithm: sha256WithRSAEncryption
27:4b:a6:78:32:e0:0e:2e:f2:90:a3:76:77:c6:b6:ed:07:f8:
16:ff:f0:1f:08:93:d6:0a:6f:0f:e1:be:b1:03:c4:cc:b5:84:
60:0b:1d:2d:4f:da:51:ef:23:88:a1:20:0c:78:19:aa:00:6f:
2a:32:97:ad:c1:f6:96:98:00:dd:7d:8e:15:84:1d:67:88:41:
18:1c:fe:9c:b5:56:cf:11:42:2c:70:06:b9:b4:2d:93:7e:96:
9a:06:c1:3c:06:25:fe:33:ce:ea:da:70:70:53:ab:ce:99:b7:
69:ae:b1:d3:07:b9:47:cb:4e:55:e2:6c:24:7c:9e:d9:0a:12:
7f:47:e7:0e:13:e2:4b:70:53:3b:ec:85:c8:a4:02:08:ba:dd:
27:d7:4b:89:36:3d:0f:e4:ba:13:e9:f1:8c:e9:2b:c9:7b:61:
89:89:b4:e9:77:dc:11:c3:a8:d5:fe:18:1b:76:4c:d6:6b:97:
98:d1:fb:5c:9e:d7:c7:6a:07:46:95:8c:ae:6b:26:1e:5e:bb:
6b:fa:c9:5b:2b:da:a3:ce:ad:05:fe:85:2a:67:45:7f:f3:08:
bf:7b:ff:0a:ed:74:67:6a:1e:9f:93:f1:e9:a9:4b:fb:98:18:
b1:64:45:19:9a:c6:ba:fa:df:da:fd:d5:5e:0e:a6:d2:c4:31:
07:7d:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org