Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/06fc3392ff80900dd07e170bae196fbe06e176d1.roa
File: 06fc3392ff80900dd07e170bae196fbe06e176d1.roa (raw, json)
Hash identifier: I2D8lkRpMeahpvFUxApBsc8Fr117vJApO4MO5aqM0u0=
Subject key identifier: 3A:41:16:FA:DA:4F:EC:F8:07:9D:AA:2C:9B:A9:B4:3C:E8:98:FF:0E
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 1456C4
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/06fc3392ff80900dd07e170bae196fbe06e176d1.roa
Signing time: Tue 17 Oct 2023 17:22:57 +0000
ROA not before: Mon 16 Oct 2023 17:22:57 +0000
ROA not after: Fri 17 Oct 2025 17:22:57 +0000
asID: 23243
IP address blocks: 45.229.40.0/24 maxlen: 24
45.229.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332932 (0x1456c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Oct 16 17:22:57 2023 GMT
Not After : Oct 17 17:22:57 2025 GMT
Subject: CN=06fc3392ff80900dd07e170bae196fbe06e176d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:0d:08:31:a2:84:d2:c4:ce:45:19:40:ee:
5b:61:3e:0c:5a:7e:8e:83:8c:d0:73:36:7d:8b:87:
70:f1:37:8f:65:f1:1e:4a:31:2c:12:5d:85:d5:bb:
28:64:df:dd:4a:78:6d:76:7f:9e:07:f9:e0:07:59:
13:af:44:0e:2e:2b:58:3b:3d:ce:3e:58:c9:12:b5:
c1:61:c2:94:7a:f0:f6:72:e1:d1:fd:2f:72:1d:2f:
e8:1c:e4:10:d0:32:e4:eb:38:16:62:a9:1a:14:b2:
c5:25:95:a0:6e:24:f4:07:a6:a3:0f:84:f7:19:70:
42:57:70:a1:86:ed:ed:dd:1c:2e:7f:f7:8c:f3:00:
4b:63:d4:78:1e:87:64:89:7b:15:78:af:3b:53:7e:
91:ef:f8:10:95:35:0a:d9:65:4d:1b:a6:85:b9:17:
0d:24:83:d6:de:ef:13:aa:08:e9:9d:68:77:71:a6:
55:cb:91:7e:49:9c:3d:62:ef:17:37:93:7e:d9:30:
48:50:90:34:ed:fb:b5:4a:f2:1e:66:ba:b4:b2:eb:
93:ac:f7:95:39:20:f4:fb:85:0a:4e:92:f8:02:e6:
d1:49:c3:7c:7d:d9:48:d2:eb:48:42:27:7d:8b:b4:
96:38:74:45:97:10:d5:99:02:be:de:dd:a6:7b:28:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:41:16:FA:DA:4F:EC:F8:07:9D:AA:2C:9B:A9:B4:3C:E8:98:FF:0E
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/06fc3392ff80900dd07e170bae196fbe06e176d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.40.0/24
45.229.43.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:85:5d:64:c8:f0:27:47:c4:27:80:94:37:56:9e:68:e1:c6:
8d:58:42:f3:33:85:d5:80:a6:b4:1f:03:fd:d9:75:24:38:ec:
7b:ac:0d:41:f7:19:31:eb:44:01:70:a9:88:89:de:33:07:15:
91:7f:4d:02:63:6b:1b:1a:9c:54:fc:ac:f8:f2:c6:ad:43:62:
da:c0:2b:08:d7:62:d0:18:b9:e1:57:45:d7:cd:65:e1:1f:9e:
cb:7a:4b:8e:a8:d6:36:df:56:d2:c4:04:53:26:06:41:b8:f9:
89:98:d8:e4:d4:af:96:0d:f0:09:c3:0c:05:7e:b6:88:31:5a:
33:fd:8f:ec:0d:bb:c6:1f:9c:0b:b3:48:8e:34:39:00:17:99:
a0:89:3a:e8:78:8e:44:47:7d:cb:fc:63:ec:04:a1:58:e8:41:
7b:72:6d:c1:fb:5d:d4:e2:30:16:81:11:4e:ee:5e:5a:85:1e:
4b:3e:4e:1f:3a:f1:2a:55:70:00:a7:03:01:7c:80:40:92:4f:
ba:43:98:ee:2f:9a:64:2f:7e:c0:c3:df:ba:1b:a6:00:3d:cd:
ab:98:ed:ca:9a:92:17:78:fc:8a:77:ab:6b:2a:7b:2a:44:80:
fb:90:65:7c:2d:65:96:3b:57:af:93:92:be:5e:a4:02:b8:34:
e0:07:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org