Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/9ce021aa4cc43d6851e5fb127227eb002aef1b01.roa
File: 9ce021aa4cc43d6851e5fb127227eb002aef1b01.roa (raw, json)
Hash identifier: 39ynKwswkA5h/fGTquBcChX4OKB88uJQSWjiQewYPV4=
Subject key identifier: 75:FB:DF:FD:C3:CC:90:71:C2:62:1B:F1:7E:0D:AA:E6:36:57:17:29
Certificate issuer: /CN=17ad69d5e226c4e4367e1ed072ec012708bb9a30
Certificate serial: 289C0D
Authority key identifier: BE:88:64:55:24:A3:1B:F4:C0:9B:04:DC:B2:F5:52:75:A8:24:D8:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17ad69d5e226c4e4367e1ed072ec012708bb9a30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/9ce021aa4cc43d6851e5fb127227eb002aef1b01.roa
Signing time: Thu 28 Mar 2024 19:23:31 +0000
ROA not before: Thu 28 Mar 2024 19:23:29 +0000
ROA not after: Wed 28 Mar 2029 19:23:29 +0000
asID: 52468
IP address blocks: 45.225.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2661389 (0x289c0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ad69d5e226c4e4367e1ed072ec012708bb9a30
Validity
Not Before: Mar 28 19:23:29 2024 GMT
Not After : Mar 28 19:23:29 2029 GMT
Subject: CN=9ce021aa4cc43d6851e5fb127227eb002aef1b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:f1:04:41:20:d8:6d:7b:b1:36:74:29:dd:
17:f7:33:8b:c9:db:2e:d1:25:25:ae:36:ab:82:73:
88:ce:91:6d:32:00:f9:c7:69:b9:66:b9:19:dd:a3:
96:1f:34:b8:58:4e:dd:23:55:f4:94:52:ff:cc:19:
d0:26:9a:ce:bc:b5:21:48:b2:85:fa:21:3f:01:95:
86:4d:de:d4:86:2c:49:ea:0a:a1:76:04:19:f5:73:
d1:d3:66:4f:35:8b:e2:59:6c:27:62:c6:b9:6c:82:
d9:1d:aa:f9:3d:7d:f7:81:ae:6e:80:0f:18:53:69:
82:b3:6d:41:f4:e2:40:9b:ab:58:16:af:5b:40:0d:
03:4e:c9:26:30:12:b4:75:f4:38:ef:e3:8c:07:6c:
8a:a8:11:9c:b4:00:04:97:b2:b8:5f:09:45:f9:ba:
45:97:51:70:95:54:14:90:07:c0:4e:70:e6:33:c9:
64:3c:62:0c:00:81:d3:e9:4b:04:39:e0:4f:3a:92:
1c:a3:0c:99:e8:51:09:2c:3a:8f:c7:5c:2a:cf:ac:
8c:a5:a4:1d:f4:60:aa:17:8a:6e:ba:02:3a:ff:1a:
19:49:ed:45:06:e2:f5:d4:c3:9c:23:48:fe:67:5e:
79:2a:cd:9d:0b:12:7a:de:74:0e:ec:2e:2a:84:f4:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FB:DF:FD:C3:CC:90:71:C2:62:1B:F1:7E:0D:AA:E6:36:57:17:29
X509v3 Authority Key Identifier:
keyid:BE:88:64:55:24:A3:1B:F4:C0:9B:04:DC:B2:F5:52:75:A8:24:D8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17ad69d5e226c4e4367e1ed072ec012708bb9a30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/9ce021aa4cc43d6851e5fb127227eb002aef1b01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/17ad69d5e226c4e4367e1ed072ec012708bb9a30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.104.0/22
Signature Algorithm: sha256WithRSAEncryption
73:82:60:97:e4:e1:63:26:5e:e2:96:31:12:22:fa:92:91:3c:
25:d9:57:f0:bd:66:40:b0:4d:a5:23:71:bb:22:18:2a:af:29:
df:5a:b1:d6:12:bc:57:e5:02:eb:15:4a:65:bc:ba:fa:24:3c:
ef:ab:95:83:a3:7a:bb:97:e4:5d:13:e3:21:de:91:81:1d:09:
d1:78:c2:eb:af:c8:b9:18:1e:f6:9b:aa:7a:40:58:65:80:a2:
96:17:c7:a0:30:65:5e:2e:a1:f1:a1:f7:e3:72:77:56:a9:ce:
c4:45:4d:5a:3c:10:4a:eb:31:07:bf:7a:8e:73:3e:4e:66:04:
69:cd:88:a8:3b:8c:16:17:fd:7b:72:f5:08:02:d2:f2:bb:cd:
c1:f6:4c:a8:02:74:5b:cb:61:59:99:bf:82:05:48:19:05:57:
e4:9b:a2:da:d7:bb:c2:ce:45:d1:9a:2e:20:6a:74:5f:4a:88:
91:12:a1:5d:0d:e2:9e:f9:28:84:d9:17:ff:3c:a6:f5:45:72:
7d:8f:6d:15:bc:ba:1d:51:f4:b7:f2:a3:55:3c:4a:61:b5:f1:
54:ac:bc:83:05:1e:b3:39:ff:74:ac:31:0b:71:0f:79:12:f2:
06:6f:0a:ae:93:d5:03:da:df:7e:d7:f3:ea:7a:d2:8c:25:66:
c4:a4:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org