Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a678740-8ac1-47c7-b58c-a4cb39744822/780ac92dbc93dd7a17886b21964cf45dedac7ccf.roa
File: 780ac92dbc93dd7a17886b21964cf45dedac7ccf.roa (raw, json)
Hash identifier: TDRyCxFWAM2OCY5S9inyw/6/F15gvAn/9mPE0+GHlwI=
Subject key identifier: 5E:A1:87:9F:35:BD:A9:08:47:1C:82:ED:F8:6E:B6:64:6F:B5:A8:58
Certificate issuer: /CN=6ca421d8201c0d5cac7b87fe4268639c6bbb56c0
Certificate serial: 25AFFC
Authority key identifier: 63:22:50:14:7E:0B:14:EF:80:73:95:3E:7A:30:BB:B1:41:B3:0E:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca421d8201c0d5cac7b87fe4268639c6bbb56c0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a678740-8ac1-47c7-b58c-a4cb39744822/780ac92dbc93dd7a17886b21964cf45dedac7ccf.roa
Signing time: Wed 31 Jan 2024 03:19:22 +0000
ROA not before: Wed 31 Jan 2024 03:19:22 +0000
ROA not after: Sat 31 Jan 2026 03:19:22 +0000
asID: 266789
IP address blocks: 45.234.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2469884 (0x25affc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca421d8201c0d5cac7b87fe4268639c6bbb56c0
Validity
Not Before: Jan 31 03:19:22 2024 GMT
Not After : Jan 31 03:19:22 2026 GMT
Subject: CN=780ac92dbc93dd7a17886b21964cf45dedac7ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:cd:b9:03:dd:81:82:80:a8:c8:a2:7a:53:
b8:86:16:c0:3d:32:55:62:dc:ca:74:46:ce:5d:f3:
5f:98:21:92:a0:65:13:ec:8a:e2:9e:65:99:9a:68:
68:b0:78:f1:54:28:8e:4a:0d:a2:91:0c:08:e4:e3:
fa:f7:1a:9f:53:33:f5:4d:08:87:da:76:e3:4f:dd:
f4:da:35:d7:29:90:15:57:ee:5e:17:88:f5:85:15:
d1:0e:a8:9f:f1:77:af:f5:6c:db:55:bd:52:fb:04:
ba:70:b8:df:6d:0b:88:33:be:aa:16:ff:4d:b9:69:
62:f2:18:06:4c:84:b6:75:e8:a7:5f:1f:d4:d9:78:
42:ad:e2:e5:ca:f1:85:53:a2:63:73:58:d9:da:d9:
4a:fd:df:1d:0e:09:ae:d4:44:9e:c3:60:89:43:f6:
ad:3c:b8:49:77:c5:56:5a:b1:4a:5e:62:d6:7b:08:
7c:65:02:1d:e3:ea:78:d0:d6:b7:d7:34:88:6c:ca:
83:7f:a3:7a:9b:a7:b4:31:a5:20:bd:c3:b5:69:56:
9e:a3:03:13:1f:b3:51:2e:22:e1:aa:52:6a:d3:1a:
b8:37:5a:6a:00:54:de:15:10:de:c4:a0:c3:50:f1:
a4:93:0d:ec:4d:b7:f1:52:03:e0:0e:cf:84:e4:56:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:87:9F:35:BD:A9:08:47:1C:82:ED:F8:6E:B6:64:6F:B5:A8:58
X509v3 Authority Key Identifier:
keyid:63:22:50:14:7E:0B:14:EF:80:73:95:3E:7A:30:BB:B1:41:B3:0E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca421d8201c0d5cac7b87fe4268639c6bbb56c0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a678740-8ac1-47c7-b58c-a4cb39744822/780ac92dbc93dd7a17886b21964cf45dedac7ccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a678740-8ac1-47c7-b58c-a4cb39744822/6ca421d8201c0d5cac7b87fe4268639c6bbb56c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.157.0/24
Signature Algorithm: sha256WithRSAEncryption
99:6a:97:13:e3:cb:d5:e0:f0:63:07:39:3f:cc:0c:52:61:80:
8d:5e:d4:86:0e:ff:92:70:6a:b1:7c:1b:ac:3a:73:16:3b:2e:
dc:a7:51:0e:c4:10:86:cf:b6:05:b3:1c:23:6d:5d:02:db:c6:
7b:61:fb:c2:7d:4a:ce:a7:5a:c3:e8:52:f0:55:2f:ce:30:4f:
71:8f:be:5f:6e:98:dd:a0:86:bd:67:e5:b1:89:a8:a2:c0:5b:
ec:ac:43:b5:e1:dd:54:d5:e2:c2:89:cc:89:6c:d2:41:5b:3a:
f5:e5:70:a4:5c:23:12:e8:7f:2a:44:35:1a:4a:a7:e7:f0:1e:
47:1a:3a:d1:d6:fd:ca:88:9b:f3:20:d5:6b:b0:c1:37:58:d9:
c8:12:f7:00:f1:da:ef:1a:b7:e7:f8:f2:27:fc:b1:25:4c:3f:
bf:e5:89:f0:10:91:57:d6:da:17:d7:38:43:a1:2a:3d:97:ff:
e5:82:fd:4e:67:ac:00:79:6d:2c:a8:b2:26:70:86:cc:79:e8:
ba:f8:99:13:68:6b:8e:fb:24:f7:06:44:77:29:47:94:a8:20:
dc:5d:2f:d8:b5:48:ff:b7:e0:bb:52:3a:86:7a:ca:39:14:34:
84:7a:9e:bb:d2:5c:8b:ea:92:ef:7a:c5:fe:23:97:eb:a4:59:
de:f0:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org