Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/e28615e32831431d6e56aada77bc6a24afb62a04.roa
File: e28615e32831431d6e56aada77bc6a24afb62a04.roa (raw, json)
Hash identifier: FaBlbEoTIFGDl0nq9c3hbSDibCWo0KzKfxITfGTjbSI=
Subject key identifier: EE:EF:D9:5C:9E:4B:65:37:E3:D1:91:AB:D5:CA:36:26:59:26:26:4A
Certificate issuer: /CN=610a073086b39384e909786d0a194418acd0bd49
Certificate serial: 273E33
Authority key identifier: D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/e28615e32831431d6e56aada77bc6a24afb62a04.roa
Signing time: Wed 03 Jan 2024 21:39:02 +0000
ROA not before: Wed 03 Jan 2024 21:39:02 +0000
ROA not after: Sat 03 Jan 2026 21:39:02 +0000
asID: 52468
IP address blocks: 45.70.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2571827 (0x273e33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610a073086b39384e909786d0a194418acd0bd49
Validity
Not Before: Jan 3 21:39:02 2024 GMT
Not After : Jan 3 21:39:02 2026 GMT
Subject: CN=e28615e32831431d6e56aada77bc6a24afb62a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:ab:dd:75:e3:e2:e7:b5:db:87:0e:ad:68:
5f:ac:45:57:ff:f7:c4:29:92:4c:a3:52:e9:43:7b:
74:95:90:5b:2f:9d:12:ff:82:eb:2e:1b:9b:b1:76:
d1:32:10:50:64:41:84:b5:cd:15:73:96:56:29:ad:
73:23:71:0d:37:46:84:6c:f8:f3:56:03:21:94:50:
b7:c4:cd:a8:db:d9:66:c9:7a:dc:86:42:ac:b4:ec:
b1:27:6d:38:d2:f9:60:17:1d:ec:e1:e3:d3:ee:00:
32:4b:c0:98:49:7d:4c:fe:d3:a9:97:ad:46:4b:fa:
6a:ff:b3:59:e8:1f:28:32:eb:00:ec:13:1d:e8:74:
63:3e:fc:82:a3:1e:78:47:c8:dd:f5:2c:3c:0f:a7:
1d:f3:71:22:41:09:01:f6:26:30:20:62:d6:33:77:
75:04:df:dc:66:c9:e5:db:ee:c2:05:1b:3e:33:71:
79:a8:a1:3f:ec:3a:f4:b5:70:39:14:5c:ad:7a:9b:
56:da:da:4a:ff:c1:da:4c:23:f5:2c:ad:e5:6f:9a:
cd:85:df:09:61:11:56:d7:b2:4b:c3:71:40:b4:07:
e2:33:d0:de:a2:6d:19:30:a4:c2:44:a0:84:6e:d4:
18:3c:0e:ea:53:6b:6f:af:70:83:05:c0:7e:b2:a5:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EF:D9:5C:9E:4B:65:37:E3:D1:91:AB:D5:CA:36:26:59:26:26:4A
X509v3 Authority Key Identifier:
keyid:D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/e28615e32831431d6e56aada77bc6a24afb62a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.56.0/22
Signature Algorithm: sha256WithRSAEncryption
89:d4:63:e5:e1:9e:b8:d7:ba:29:fd:fc:75:57:3c:66:51:37:
46:0c:49:36:1e:82:1e:8e:5c:2e:58:cc:f1:12:83:3d:f3:87:
77:1d:6d:6b:3e:6a:8c:db:b6:22:67:fd:b5:23:85:4b:09:b6:
91:f4:a6:73:94:8d:94:b3:d2:52:3c:92:81:a1:20:d4:7a:f0:
28:06:bf:c1:f5:19:a7:01:7a:98:26:af:b1:95:76:4b:4f:27:
58:1f:35:db:6d:c2:18:e7:47:10:1c:d5:90:01:cf:ac:4e:99:
24:10:87:7e:6c:3c:b5:2d:d3:fb:c1:92:8a:cd:4f:9c:73:4f:
cf:7c:94:7a:5a:e0:9a:6c:95:98:da:a6:e8:c6:ea:64:d9:15:
89:cd:b2:26:0f:40:55:80:ef:c5:7d:08:e0:55:db:2f:33:f3:
7c:7a:8d:40:68:70:75:73:3f:4e:a7:c8:06:19:71:41:20:ea:
89:ac:c2:4a:0a:da:5b:77:79:f6:8c:9a:f8:f2:32:87:37:4b:
a4:00:ac:eb:10:ea:3c:b4:98:f5:2b:46:16:53:e8:22:ef:50:
9a:af:fd:e6:fd:8f:11:a8:40:f6:31:f3:f2:d3:2d:4b:5f:dd:
f3:f0:be:5a:75:f0:96:68:b0:47:52:64:6a:25:e2:82:94:a5:
ec:c8:0d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org