Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/02da9ee81f2c80319d9584b35ea2921e444196c1.roa
File: 02da9ee81f2c80319d9584b35ea2921e444196c1.roa (raw, json)
Hash identifier: dHyrcLTLV5FIrE4ZhTBuG/KPyyKu5MjMVFmBhFL0/xM=
Subject key identifier: C1:C1:1C:51:EC:2F:82:45:86:48:85:A0:DD:27:60:13:B5:71:B1:0C
Certificate issuer: /CN=df98b707ece174bc717e21a1d3ec0ca5a54d4e61
Certificate serial: 214792
Authority key identifier: F4:1A:31:A7:59:0E:06:2B:15:9F:7A:01:02:E5:C8:54:43:02:FF:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/02da9ee81f2c80319d9584b35ea2921e444196c1.roa
Signing time: Sun 23 Jul 2023 00:03:21 +0000
ROA not before: Sat 22 Jul 2023 00:03:21 +0000
ROA not after: Wed 23 Jul 2025 00:03:21 +0000
asID: 266682
IP address blocks: 45.228.76.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181010 (0x214792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df98b707ece174bc717e21a1d3ec0ca5a54d4e61
Validity
Not Before: Jul 22 00:03:21 2023 GMT
Not After : Jul 23 00:03:21 2025 GMT
Subject: CN=02da9ee81f2c80319d9584b35ea2921e444196c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:39:b4:f2:59:d0:c6:9a:72:c3:5e:b2:69:
8a:0a:97:e1:42:f2:91:bc:0d:09:ad:09:c2:2d:cb:
b5:cc:a9:3f:4e:89:20:dc:67:96:9a:76:6d:f7:28:
ee:54:e2:f4:d7:29:cc:73:62:2d:5a:d9:53:54:40:
f7:9b:6d:fb:49:fc:27:aa:1e:de:90:72:0c:2f:7f:
55:8c:a7:71:44:4b:1d:3e:c3:24:1e:54:cc:b5:e6:
a7:ea:fb:06:bf:3f:0f:c3:63:b1:ea:5c:0e:39:6c:
6a:3f:ad:04:01:b1:de:1e:f9:34:19:ee:7b:45:7e:
0a:54:b4:a2:97:78:18:8f:69:10:b5:70:6d:2c:bb:
7a:ba:3e:71:14:04:76:85:89:a6:83:5b:82:9b:97:
52:5e:0a:f0:39:13:41:3c:5c:f6:7d:42:26:fe:7c:
ac:a9:25:98:e6:31:60:f2:f7:0e:49:cd:0b:4c:20:
1c:d1:c2:94:58:ca:d9:9c:57:b0:46:59:fa:11:61:
a3:87:ea:86:cb:0b:8d:f0:93:e1:35:af:be:05:38:
e8:88:06:f8:b6:6f:ca:0e:aa:59:43:a1:5e:e8:17:
63:65:fe:0c:02:1f:06:26:1a:c3:52:d3:b2:3f:25:
bf:4f:12:80:5c:0c:59:2b:cc:b4:59:da:21:21:69:
55:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C1:1C:51:EC:2F:82:45:86:48:85:A0:DD:27:60:13:B5:71:B1:0C
X509v3 Authority Key Identifier:
keyid:F4:1A:31:A7:59:0E:06:2B:15:9F:7A:01:02:E5:C8:54:43:02:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/02da9ee81f2c80319d9584b35ea2921e444196c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:13:9c:ec:ce:90:3a:34:9c:1b:20:3a:31:bf:5a:b1:f3:1d:
7a:51:6d:35:7b:74:1c:99:d9:f8:8d:e5:a1:83:da:c0:05:05:
9b:c8:8b:8d:54:47:8c:09:8f:ff:17:00:43:00:15:d7:fb:db:
01:57:5c:21:84:21:06:3f:88:c4:8d:d6:ff:2d:f0:a7:67:43:
4c:33:f8:9e:e4:15:62:54:45:91:26:25:9f:ae:0a:a1:22:f0:
77:38:bc:d6:d4:90:e4:22:87:84:4e:3a:bd:8a:9a:88:fd:3d:
43:79:f1:c2:e6:c6:81:61:6b:19:c5:63:5e:fb:5c:36:ed:48:
8f:9f:34:a3:89:dd:df:1e:7a:87:4d:8e:3e:e2:08:8e:75:48:
08:f8:19:6d:da:49:2d:b8:d2:83:5f:33:f1:f8:b8:58:35:cf:
a2:83:21:28:aa:f3:ad:38:53:1d:4e:e1:90:72:99:9f:48:2c:
dc:11:8e:d6:fc:9f:46:a6:4a:93:21:a8:40:3d:59:50:f3:14:
dc:60:f5:9a:69:11:06:8c:4b:3e:91:e9:8e:1b:91:ec:97:6e:
aa:7d:41:cd:ae:f5:97:64:d8:e0:83:e3:4c:b8:3f:7d:4b:bf:
13:fd:2d:77:e8:ee:e7:23:e1:96:44:35:ac:19:bc:2f:2f:e9:
84:74:cd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org