Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/86c705c61f2e5fbdb785b8adadd0833d4531055a.roa
File: 86c705c61f2e5fbdb785b8adadd0833d4531055a.roa (raw, json)
Hash identifier: aF2DBFFdPCDH4jRE/7KcQNj1qwANQRJXO6mP4T+Qe4E=
Subject key identifier: D4:78:8F:6B:44:6C:63:88:46:BF:A0:1E:5F:7A:77:90:63:0F:E0:50
Certificate issuer: /CN=20561c0e6e4a53a86130af5c55d968e60b1940cd
Certificate serial: 262399
Authority key identifier: 99:51:67:0F:72:6F:79:94:1D:22:C9:47:BD:8C:62:9E:0D:06:CF:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20561c0e6e4a53a86130af5c55d968e60b1940cd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/86c705c61f2e5fbdb785b8adadd0833d4531055a.roa
Signing time: Thu 18 Jan 2024 18:45:20 +0000
ROA not before: Thu 18 Jan 2024 18:45:20 +0000
ROA not after: Thu 18 Jan 2029 18:45:20 +0000
asID: 266780
IP address blocks: 45.234.112.0/22 maxlen: 24
2803:9f20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2499481 (0x262399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20561c0e6e4a53a86130af5c55d968e60b1940cd
Validity
Not Before: Jan 18 18:45:20 2024 GMT
Not After : Jan 18 18:45:20 2029 GMT
Subject: CN=86c705c61f2e5fbdb785b8adadd0833d4531055a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:ff:5e:6c:b1:44:59:3b:26:af:1d:cc:28:
6a:30:08:a8:e2:46:b3:bd:6b:2b:4f:c4:7e:d6:5e:
8c:be:4d:db:c2:ff:8f:34:2f:9b:97:12:21:ac:39:
4d:9e:38:84:39:09:e7:9f:f8:09:d5:77:dc:69:bb:
2e:b2:97:76:aa:5b:58:dd:b7:8e:6c:78:04:58:3b:
50:ac:b1:d1:57:8f:af:aa:d3:da:43:11:b9:d3:67:
00:4e:36:40:64:fa:b6:c0:e0:7d:ad:19:a8:0b:cd:
5f:8b:ba:7f:3f:86:72:fe:e1:05:db:fa:b0:03:80:
a8:83:25:1c:61:4f:b9:7f:38:6f:36:66:bd:94:5f:
e9:02:94:80:f7:10:d1:97:90:72:40:de:2f:8b:27:
5c:8c:5f:1a:c2:8f:8c:8f:a3:f9:95:a1:07:87:3f:
0e:c6:0e:34:0f:b7:95:ff:9f:79:90:34:64:b9:99:
8b:c1:c9:ad:be:aa:f6:e9:95:3a:52:45:78:59:7b:
30:53:4e:3d:7b:27:49:ac:8c:ee:00:c1:98:e1:20:
83:71:eb:bf:11:1f:32:fe:4b:e0:00:a7:89:a8:6b:
c4:22:6c:e3:6f:69:09:9f:66:8a:58:36:f7:be:59:
81:0a:24:cb:f1:80:e7:b7:4d:6e:02:01:19:45:94:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:78:8F:6B:44:6C:63:88:46:BF:A0:1E:5F:7A:77:90:63:0F:E0:50
X509v3 Authority Key Identifier:
keyid:99:51:67:0F:72:6F:79:94:1D:22:C9:47:BD:8C:62:9E:0D:06:CF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20561c0e6e4a53a86130af5c55d968e60b1940cd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/86c705c61f2e5fbdb785b8adadd0833d4531055a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/20561c0e6e4a53a86130af5c55d968e60b1940cd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.112.0/22
IPv6:
2803:9f20::/32
Signature Algorithm: sha256WithRSAEncryption
94:a7:06:87:b2:39:72:77:4e:71:cc:cb:2d:bf:07:a0:51:f4:
a5:37:7a:d6:53:59:d7:f5:3f:e9:50:2d:25:91:e3:27:6b:d9:
8a:d5:ea:65:0e:6b:1c:1c:32:4e:39:57:e5:65:0f:90:ac:08:
b6:89:bd:a7:fb:d5:99:45:5b:97:46:54:03:88:92:77:65:49:
6d:a6:11:07:a5:94:34:93:1f:d5:c4:4b:f0:50:af:e3:6c:23:
6c:39:35:c2:c7:a9:e2:d6:cf:b4:92:4a:e4:ab:df:4c:d3:89:
90:c1:10:e9:07:a3:3d:83:97:5d:21:8c:52:ce:ca:c4:4b:97:
36:49:9d:33:aa:15:a8:93:5f:91:4a:94:89:f7:13:3e:a4:98:
1e:10:1b:59:8a:0f:43:56:90:ec:10:bd:05:7b:9e:a9:8f:0a:
60:63:f4:84:76:1a:45:b7:cd:5d:c9:f0:0e:05:de:35:c3:29:
dd:09:b2:88:63:bf:da:5a:a5:b2:c0:d5:d2:58:3e:36:eb:69:
9d:fb:0d:0b:ff:97:a1:ed:77:e2:ab:a9:75:e2:32:5a:c4:49:
48:bf:6d:15:d7:e1:0e:71:59:df:62:56:b9:7e:b6:76:4d:f0:
9e:88:26:70:8d:59:cd:fe:4c:26:e9:38:63:4f:d3:25:60:f6:
70:81:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org