Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/c16ccf4b40d628d7a108cda6c20147c8097fee99.roa
File: c16ccf4b40d628d7a108cda6c20147c8097fee99.roa (raw, json)
Hash identifier: g+i1cQKnGNtEUdMlYMtoFcU3UG+/hx73OqTL2j9qjrQ=
Subject key identifier: 5D:31:D0:D6:5D:EF:83:BF:DF:5E:82:79:09:23:41:3E:E0:03:03:A8
Certificate issuer: /CN=32a8b2a97729bd1e6de885b58fd0c34c4a661ae5
Certificate serial: 1FEBDE
Authority key identifier: 69:32:6B:4B:40:01:AB:00:98:D8:72:37:63:4F:AD:39:87:A9:06:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/c16ccf4b40d628d7a108cda6c20147c8097fee99.roa
Signing time: Thu 14 Mar 2024 21:50:13 +0000
ROA not before: Thu 14 Mar 2024 21:50:13 +0000
ROA not after: Sat 14 Mar 2026 21:50:13 +0000
asID: 27843
IP address blocks: 45.236.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091998 (0x1febde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a8b2a97729bd1e6de885b58fd0c34c4a661ae5
Validity
Not Before: Mar 14 21:50:13 2024 GMT
Not After : Mar 14 21:50:13 2026 GMT
Subject: CN=c16ccf4b40d628d7a108cda6c20147c8097fee99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:41:72:66:0c:27:d8:e9:97:74:08:83:51:
47:e7:59:f1:77:c8:d1:d7:56:8c:fc:18:bb:d7:70:
16:30:f2:a0:d4:84:27:82:81:87:1a:83:31:c5:a9:
0f:29:ac:1f:a7:8f:49:a2:ed:93:87:cb:b8:75:7b:
2a:cb:aa:37:f0:45:74:07:95:18:e7:d5:48:95:38:
df:39:1e:58:74:17:8a:f3:0a:5b:13:4c:a7:be:aa:
5a:10:85:d4:d4:af:04:2b:4c:fd:2b:c6:3e:17:66:
5a:84:49:e7:2b:ac:32:3f:a6:bf:2f:61:bd:eb:1f:
e7:2d:d0:0b:b5:3c:44:9d:77:5d:7c:5e:f5:d3:13:
2a:92:be:62:10:55:53:0a:13:c9:64:51:cf:b8:11:
7b:5e:8e:ad:85:99:71:67:9c:e5:53:73:95:51:30:
00:ba:ce:09:10:04:d9:e4:f0:3b:cd:33:0c:08:4e:
bc:b0:01:5e:41:a0:b4:a0:bf:a2:0b:72:5e:ef:33:
13:e7:31:77:f8:65:50:38:59:c0:15:cd:b4:d1:f5:
9f:34:4f:e3:f9:92:fa:8d:1d:d7:ab:78:f9:dd:03:
5b:e2:78:57:29:b6:d3:49:41:a6:e8:09:42:3e:d0:
11:34:9c:64:92:9f:18:1d:dc:c7:d2:77:19:8e:a3:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:31:D0:D6:5D:EF:83:BF:DF:5E:82:79:09:23:41:3E:E0:03:03:A8
X509v3 Authority Key Identifier:
keyid:69:32:6B:4B:40:01:AB:00:98:D8:72:37:63:4F:AD:39:87:A9:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/c16ccf4b40d628d7a108cda6c20147c8097fee99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.44.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:8e:5e:98:fe:6e:55:4d:36:33:ab:f6:14:e4:f7:4d:83:b4:
3f:4e:ae:1f:24:fd:93:4a:2d:e8:9c:92:30:54:7d:23:50:0c:
00:51:9a:88:bc:41:a3:d8:13:80:2a:f1:f0:3b:45:96:c4:84:
99:c7:7f:38:71:b1:c5:c1:b6:91:c5:16:4b:c7:63:f5:da:0f:
d4:64:50:1e:2e:42:ee:f0:cd:84:6e:da:6f:2a:d2:04:8d:4b:
4c:c2:2c:ad:ee:4c:c0:f0:7b:04:dc:9f:33:0f:90:b0:0f:57:
52:13:fa:1e:e4:85:d0:ce:34:68:7f:19:1c:c5:4a:85:08:61:
79:47:0e:b5:e1:16:f3:a9:41:c9:1c:55:c8:7a:fa:6c:49:e8:
55:10:09:50:97:a3:ed:ba:90:55:94:3b:54:00:ae:fa:f3:c5:
f6:78:c6:55:b9:e0:ad:0b:1a:2e:ff:d1:0a:dc:44:b8:47:0c:
6e:bb:27:e0:c4:10:b1:3c:c5:a8:27:8a:44:0f:04:53:aa:3d:
0a:d6:f1:d4:8c:9d:32:59:84:53:7e:0d:85:d0:1a:26:f5:08:
dd:a8:bd:23:91:d9:f7:e1:20:83:e9:f0:3d:ae:6c:22:44:92:
97:ff:0e:42:fb:35:aa:d2:08:7c:c1:b7:73:d1:5c:a7:4d:d0:
b9:21:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org