Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/604e059ca457fd5c237b6a27d63e32e05c07b64c.roa
File: 604e059ca457fd5c237b6a27d63e32e05c07b64c.roa (raw, json)
Hash identifier: 6SVrLqRhn7DJVT29/MkAPcCIZv0q4r/rJejJ2LfYgGA=
Subject key identifier: 5C:EA:B7:FC:7C:2A:E0:48:6A:8D:C3:6C:A0:B4:88:41:14:4C:B0:6D
Certificate issuer: /CN=155b538c76786066deee9490cef7008c3829598e
Certificate serial: 03228F
Authority key identifier: 16:CA:3F:12:15:05:8A:99:58:0B:3F:E2:E8:1D:86:05:A4:33:B2:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/155b538c76786066deee9490cef7008c3829598e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/604e059ca457fd5c237b6a27d63e32e05c07b64c.roa
Signing time: Thu 04 Jan 2024 16:04:55 +0000
ROA not before: Thu 04 Jan 2024 16:04:54 +0000
ROA not after: Sun 04 Jan 2026 16:04:54 +0000
asID: 273074
IP address blocks: 45.239.107.0/24 maxlen: 24
200.33.28.0/24 maxlen: 24
2803:2f90::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205455 (0x3228f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=155b538c76786066deee9490cef7008c3829598e
Validity
Not Before: Jan 4 16:04:54 2024 GMT
Not After : Jan 4 16:04:54 2026 GMT
Subject: CN=604e059ca457fd5c237b6a27d63e32e05c07b64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:c4:dc:a3:21:c6:ee:0a:d4:1b:e8:dc:7b:
4a:41:9f:b9:b1:fe:8b:86:33:ac:30:49:3a:8f:9c:
7d:02:b3:83:91:00:93:8c:d4:fb:ed:f5:0d:22:7f:
04:88:8b:0d:a8:14:a5:64:f1:a9:26:3b:14:f5:3d:
b6:2c:4f:63:5a:37:06:4d:56:eb:b2:90:23:11:19:
56:ee:2b:00:57:04:7f:f0:4c:c3:40:fd:80:33:59:
57:f0:1b:3b:a6:5b:f0:57:8e:47:d3:c6:52:6a:c7:
d3:1b:01:76:48:da:39:43:9d:94:9a:8e:93:bf:9d:
94:b2:74:f3:d0:5e:b6:cf:d6:c1:a8:cb:7b:53:9e:
df:a7:e2:68:d4:84:81:02:1f:df:d6:a8:c8:92:74:
16:54:b2:a2:22:c8:b3:5e:5e:51:f0:1f:92:aa:37:
c1:bb:36:5b:86:c8:9a:fd:d9:2d:d3:0a:d1:1a:cc:
ac:42:83:a6:a1:ff:a7:43:48:30:42:94:d3:83:85:
1a:6b:b6:0d:6f:a3:02:57:de:dc:3a:1a:21:3d:d0:
7c:14:43:ab:80:cd:f3:01:5e:e9:0b:38:9f:85:b8:
eb:79:6e:e8:95:8e:d5:be:1c:1d:fa:af:27:65:59:
b3:c2:2e:b3:be:c9:1b:7b:e3:94:1f:c7:f7:fc:8e:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:B7:FC:7C:2A:E0:48:6A:8D:C3:6C:A0:B4:88:41:14:4C:B0:6D
X509v3 Authority Key Identifier:
keyid:16:CA:3F:12:15:05:8A:99:58:0B:3F:E2:E8:1D:86:05:A4:33:B2:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/155b538c76786066deee9490cef7008c3829598e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/604e059ca457fd5c237b6a27d63e32e05c07b64c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/155b538c76786066deee9490cef7008c3829598e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.107.0/24
200.33.28.0/24
IPv6:
2803:2f90::/32
Signature Algorithm: sha256WithRSAEncryption
57:85:06:d4:e8:c2:8e:7f:d3:1b:a0:7a:76:1a:c5:a3:3c:ba:
75:96:c9:4d:22:e4:ad:44:15:37:fc:ad:52:8d:d2:a9:23:e2:
8d:ff:45:d4:e8:7c:45:bc:fb:b8:76:d5:00:d1:12:3f:e0:fb:
31:f0:29:54:8a:ea:1b:f7:5e:8b:1a:2e:f8:8d:d2:9c:96:8e:
04:12:5c:be:d6:7b:ca:b8:f2:57:02:6e:f1:bb:8f:53:28:c0:
a5:31:cf:44:0d:46:c6:98:f7:50:e8:64:6c:9d:8a:cd:60:da:
d4:4a:c7:98:fc:d2:c5:53:6a:3c:df:b6:34:ef:87:3b:cd:ae:
79:b9:2e:66:ca:0a:49:c9:0f:29:81:3b:42:c3:c4:b3:c4:ed:
b4:7c:51:42:f2:23:58:8b:74:da:61:f6:eb:67:de:7e:78:aa:
12:19:79:6b:3d:16:7a:f8:45:ce:d6:db:f2:96:69:3a:a2:90:
2d:54:b5:a2:92:69:97:c3:51:1f:b8:4d:e6:f9:e6:81:fe:c0:
f9:45:ed:f9:37:fe:d0:24:8e:b3:52:5c:ae:5e:dc:78:bc:64:
ce:f9:0a:61:23:38:33:2e:84:e1:5a:64:f7:d8:fe:ae:bb:eb:
c5:a2:72:6b:43:90:27:d3:25:95:99:5f:41:41:42:42:a4:04:
57:60:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org