Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/963924b8526ff7d30560cb0a3adba41f19c34582.roa
File: 963924b8526ff7d30560cb0a3adba41f19c34582.roa (raw, json)
Hash identifier: fa7rvsGVb9n8e5xKX+xwO3h8VOEn9uD9OBVUqE/emAc=
Subject key identifier: 87:E9:6B:55:C8:59:AE:95:5D:38:1E:F4:BE:A9:4C:0B:D2:B8:FA:FD
Certificate issuer: /CN=a431b12cbb45857ee37540244e236b5fe1793e26
Certificate serial: 0CC771
Authority key identifier: 0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/963924b8526ff7d30560cb0a3adba41f19c34582.roa
Signing time: Wed 24 Mar 2021 14:41:22 +0000
ROA not before: Wed 24 Mar 2021 14:41:22 +0000
ROA not after: Tue 24 Mar 2026 14:41:22 +0000
asID: 61468
IP address blocks: 45.238.216.0/22 maxlen: 24
2801:1c:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 837489 (0xcc771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a431b12cbb45857ee37540244e236b5fe1793e26
Validity
Not Before: Mar 24 14:41:22 2021 GMT
Not After : Mar 24 14:41:22 2026 GMT
Subject: CN=963924b8526ff7d30560cb0a3adba41f19c34582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b2:c0:9b:3c:9a:8e:ca:08:b9:43:aa:0e:7b:
fc:66:d0:42:94:75:15:23:5d:d8:da:f9:4c:29:e5:
68:cb:80:ff:5f:18:c4:14:77:34:55:27:fb:c3:97:
a3:35:96:3a:12:f8:64:52:70:14:5b:96:17:9a:b3:
98:11:f3:a2:b9:8f:41:eb:ae:d6:88:b3:db:10:b4:
e9:ce:54:6a:93:31:eb:b0:24:8b:07:67:37:01:c6:
b7:f8:5a:2e:4a:8d:31:45:78:b7:cc:fc:52:cf:4e:
c9:26:04:8a:f0:f0:5a:19:77:5f:f7:7e:0a:dc:79:
04:b9:30:13:59:02:e9:7f:d5:e5:5f:08:2e:7e:0f:
62:10:1d:f0:0e:21:59:ab:00:78:e7:61:8b:da:af:
98:1c:37:2f:2a:00:ab:b0:dc:f0:a6:a8:53:95:51:
08:f2:a9:b3:e4:a9:41:8c:a7:94:e2:ee:5d:28:3c:
6a:b4:7b:ab:61:8b:74:2a:50:2f:09:d4:7a:d5:31:
56:c8:8d:56:d0:75:d6:33:8a:cb:db:7e:29:b4:c0:
50:b1:a1:07:a6:8f:b7:5c:c9:24:36:41:62:43:6b:
9d:af:24:b0:cb:0d:d2:8e:7a:b2:58:07:65:8e:bd:
d9:52:6a:e5:41:76:59:ed:6c:74:72:2a:e6:22:d9:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E9:6B:55:C8:59:AE:95:5D:38:1E:F4:BE:A9:4C:0B:D2:B8:FA:FD
X509v3 Authority Key Identifier:
keyid:0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/963924b8526ff7d30560cb0a3adba41f19c34582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/a431b12cbb45857ee37540244e236b5fe1793e26.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.216.0/22
IPv6:
2801:1c:f000::/48
Signature Algorithm: sha256WithRSAEncryption
43:83:31:c7:c8:3e:b1:7a:49:d3:9a:b1:4d:07:32:af:86:b1:
44:34:ac:0c:e5:5d:a3:a2:f4:10:d1:9e:7e:c5:77:36:85:50:
8b:06:28:ba:74:05:5a:9c:d0:d3:a8:94:f3:34:13:7d:0b:33:
e5:37:8a:7a:ac:e1:b4:ae:ea:da:b5:af:54:1e:5b:ad:13:d1:
a5:d2:9f:3b:df:e2:8d:2e:16:d7:fe:39:c5:16:a6:25:78:07:
21:f4:d4:ad:3e:98:16:2b:11:05:25:52:18:be:04:3f:68:8e:
47:51:5b:19:16:93:f0:80:48:fd:d7:8e:53:56:fd:31:15:c4:
a1:b4:56:71:34:13:35:b3:9f:29:73:bf:13:94:c9:5c:69:cd:
6d:96:b2:b4:0b:5a:e6:33:ec:3e:f0:7c:96:42:98:7d:b8:b6:
4b:3c:68:1a:5c:16:ff:2a:62:2f:91:65:09:3b:c0:88:1c:3a:
47:1c:e2:d5:af:15:fa:02:08:7f:ae:1a:89:ea:db:42:62:42:
bf:1f:0d:18:e7:12:af:45:62:08:c3:23:26:03:39:7a:27:f6:
3d:85:dc:43:6b:18:b8:23:aa:d5:72:79:96:4f:01:37:35:4b:
96:0b:db:e8:83:c7:3e:4a:28:9b:6d:bb:cc:0a:86:61:bb:70:
9a:cf:96:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:56 2024 by rpki-client on console-ams.rpki-client.org