Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24e2da27-0407-46d5-9bc1-9abb195aca53/537aa2f55646519558771b53dfe76507846ba869.roa
File: 537aa2f55646519558771b53dfe76507846ba869.roa (raw, json)
Hash identifier: fijuNHCC2o8ECBXnx4Jh/rbTcfObo7nW9deQ/T8RJoc=
Subject key identifier: 04:9B:FD:4A:94:E8:9A:CC:D1:AB:D6:52:A4:63:C3:9F:5D:92:76:5E
Certificate issuer: /CN=ae449b0c47ca297ad20bb51916e2d92c6d34ac38
Certificate serial: 010C4F
Authority key identifier: 66:F2:2F:1D:86:F9:43:C6:40:95:45:9E:3C:38:45:7A:9C:FF:B4:B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae449b0c47ca297ad20bb51916e2d92c6d34ac38.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/24e2da27-0407-46d5-9bc1-9abb195aca53/537aa2f55646519558771b53dfe76507846ba869.roa
Signing time: Mon 14 Aug 2023 13:43:55 +0000
ROA not before: Sun 13 Aug 2023 13:43:55 +0000
ROA not after: Thu 14 Aug 2025 13:43:55 +0000
asID: 265697
IP address blocks: 45.6.132.0/22 maxlen: 24
2803:49c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68687 (0x10c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae449b0c47ca297ad20bb51916e2d92c6d34ac38
Validity
Not Before: Aug 13 13:43:55 2023 GMT
Not After : Aug 14 13:43:55 2025 GMT
Subject: CN=537aa2f55646519558771b53dfe76507846ba869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:42:d2:ad:77:e2:d7:d7:b2:cf:1e:86:1c:
4f:6b:49:87:fe:4f:87:a7:19:b3:c9:46:c3:1e:c5:
dc:6e:9f:07:a1:b5:d3:16:13:6d:0d:57:fb:e3:45:
d7:b2:4a:be:49:41:67:23:a1:7c:42:9f:9c:c9:ef:
cc:02:2f:b7:2c:b6:8f:65:02:ac:0c:45:03:aa:2d:
44:77:99:13:d6:ec:67:04:12:39:45:35:09:b1:c1:
8d:99:90:89:22:d0:db:49:e3:3a:77:45:71:e4:f3:
08:2c:0d:d6:c9:08:88:98:38:89:71:b1:39:a0:bd:
b9:e2:37:ec:cd:ff:09:44:50:18:a2:13:9a:96:05:
ca:12:7b:38:3b:0a:f9:a7:88:9a:8d:70:fc:24:bf:
ec:46:04:7f:6e:4a:f9:9a:9f:71:20:e3:d1:eb:0d:
26:7e:3e:a6:b5:3f:af:3a:67:35:7c:6b:2e:cb:a2:
fe:66:c6:b9:69:b8:44:68:47:d1:a2:0e:20:24:44:
f7:04:d8:8c:65:f1:dd:aa:88:70:a0:63:13:71:99:
9d:9a:55:02:88:d3:78:6f:05:b6:e4:36:3d:ed:8b:
25:90:6f:f5:83:ce:1a:86:66:2f:60:02:08:8d:bd:
00:77:7b:62:cc:f1:12:97:eb:dc:f6:f1:64:fe:ba:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9B:FD:4A:94:E8:9A:CC:D1:AB:D6:52:A4:63:C3:9F:5D:92:76:5E
X509v3 Authority Key Identifier:
keyid:66:F2:2F:1D:86:F9:43:C6:40:95:45:9E:3C:38:45:7A:9C:FF:B4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae449b0c47ca297ad20bb51916e2d92c6d34ac38.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24e2da27-0407-46d5-9bc1-9abb195aca53/537aa2f55646519558771b53dfe76507846ba869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/24e2da27-0407-46d5-9bc1-9abb195aca53/ae449b0c47ca297ad20bb51916e2d92c6d34ac38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.132.0/22
IPv6:
2803:49c0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:6b:97:f7:1b:64:96:45:45:a0:46:e5:04:80:08:e8:26:c5:
2a:22:ad:4d:5f:d9:d2:73:b6:e2:f1:1f:2c:17:02:42:be:d9:
2c:45:f9:e0:8e:7f:91:cd:fa:28:03:19:e2:63:25:be:45:81:
cc:12:d2:38:fc:8b:72:bf:c0:e0:4d:47:f3:fb:4e:04:c7:fd:
92:03:17:6d:8d:aa:fc:9b:b9:f2:b3:ac:9c:59:af:a8:5e:03:
40:92:51:27:75:cb:ad:28:bd:76:f9:89:e9:79:df:85:bb:27:
4a:12:2e:4d:d4:32:31:ae:08:4b:71:bc:80:b3:11:1f:26:b0:
be:45:17:d2:d6:8e:7f:16:e5:56:ea:ce:ad:fa:9b:6a:63:0a:
11:c5:b2:a2:8f:b7:1d:89:9b:fb:4e:c7:5a:a6:9a:3c:1d:34:
1d:bf:0e:59:c2:07:66:55:f4:d3:44:f6:fa:b1:98:80:03:1a:
b5:0f:cf:67:28:a5:3e:f8:8a:aa:84:56:97:61:77:22:80:36:
03:dd:db:45:e3:3c:97:29:93:25:7a:27:d7:8b:3b:b3:b5:c9:
a5:a4:f5:7e:c9:1b:76:20:75:51:c1:9c:59:c3:6c:d5:ca:4c:
33:ff:72:80:7a:e1:3e:7d:36:4f:e0:e5:fe:31:87:74:00:5a:
a7:4a:0f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org