Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/33678929b33e0c608b5e12fc572163985aadf702.roa
File: 33678929b33e0c608b5e12fc572163985aadf702.roa (raw, json)
Hash identifier: XC2ooYx1+9IAuJUU3f8IR5seoQaOVcEiBdcTx8AN0P8=
Subject key identifier: 60:66:F5:FE:29:87:EE:7C:6B:60:E0:27:1D:77:F5:AA:8E:55:5D:B2
Certificate issuer: /CN=5a87907b9ef24cb59648e8fd0b029232a460cf62
Certificate serial: 0536E9
Authority key identifier: 68:C9:C5:12:15:BD:53:F1:82:36:9B:AA:00:C6:72:D4:EE:17:00:AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a87907b9ef24cb59648e8fd0b029232a460cf62.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/33678929b33e0c608b5e12fc572163985aadf702.roa
Signing time: Tue 05 Dec 2023 19:11:01 +0000
ROA not before: Tue 05 Dec 2023 19:11:01 +0000
ROA not after: Fri 05 Dec 2025 19:11:01 +0000
asID: 267802
IP address blocks: 45.173.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341737 (0x536e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a87907b9ef24cb59648e8fd0b029232a460cf62
Validity
Not Before: Dec 5 19:11:01 2023 GMT
Not After : Dec 5 19:11:01 2025 GMT
Subject: CN=33678929b33e0c608b5e12fc572163985aadf702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:35:43:e6:2b:3c:4f:bb:da:96:e2:d4:c1:
bc:1a:f5:f3:df:f1:98:d3:14:80:c5:aa:52:8b:56:
0f:1d:76:d1:90:c0:6d:a0:0b:33:32:00:33:2a:1a:
df:de:52:65:7f:03:9b:b0:eb:0d:ad:f2:07:76:4d:
7f:59:68:e6:14:fd:37:ea:51:20:d1:6a:71:53:20:
37:d5:7a:c7:49:67:11:c5:9b:b3:db:11:28:7e:7f:
e0:38:6a:e4:34:b1:90:a5:96:73:b7:cf:88:8c:4f:
e9:f0:ba:07:84:4f:50:34:5e:4d:f5:29:14:c1:4e:
f7:b1:da:ec:0e:a0:fc:a8:6d:14:a0:6a:01:0e:c4:
27:88:70:4b:a0:d4:86:25:6e:26:a3:68:33:0f:46:
9e:39:58:ea:5f:5b:82:8c:84:5a:4d:84:5a:09:40:
2a:1a:01:dc:d0:6a:40:28:e1:db:9e:a9:bb:04:1e:
95:4e:55:85:d4:47:bc:f4:34:11:05:ca:4f:cf:11:
6f:95:7f:ef:d8:f7:40:b4:d9:3f:51:6f:98:29:d8:
db:f1:06:d5:dd:77:03:61:56:92:09:67:b6:6f:76:
ea:a1:f4:e7:cf:a6:23:3c:2d:bf:3b:47:5c:53:b3:
99:40:00:7b:68:ca:ac:fe:ea:99:41:9a:49:8c:bb:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:66:F5:FE:29:87:EE:7C:6B:60:E0:27:1D:77:F5:AA:8E:55:5D:B2
X509v3 Authority Key Identifier:
keyid:68:C9:C5:12:15:BD:53:F1:82:36:9B:AA:00:C6:72:D4:EE:17:00:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a87907b9ef24cb59648e8fd0b029232a460cf62.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/33678929b33e0c608b5e12fc572163985aadf702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/5a87907b9ef24cb59648e8fd0b029232a460cf62.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:a6:5f:91:38:48:91:08:be:47:a4:8c:99:6b:9f:7f:3c:07:
ca:26:e2:0b:39:8c:64:ce:d4:40:e3:16:c1:c7:55:55:8f:37:
6c:0b:af:c3:f1:1b:c6:ef:98:75:78:a0:cd:63:a3:5b:22:ec:
d4:95:65:3c:c2:bb:20:41:cf:04:d6:64:aa:fe:7e:69:b3:df:
ce:4e:ad:cf:52:31:90:a6:a5:db:5f:6f:7a:e3:14:4d:30:d0:
23:66:a4:64:34:59:80:32:4c:1e:20:48:e0:03:83:e9:61:ed:
52:5c:8f:a6:1f:72:a4:89:e0:b2:d2:af:8b:e5:66:7a:ce:94:
fd:06:68:37:de:89:58:0a:54:67:ad:d4:55:9d:c7:46:c6:65:
01:69:f8:1a:d8:b5:a8:af:2b:6c:26:8e:0c:29:62:b9:c4:dd:
42:b4:fe:4f:d4:ec:f5:79:c3:88:c8:a4:9e:1f:98:73:60:51:
6c:f8:db:62:b5:5c:4f:6d:88:c0:b7:b2:e6:59:dc:10:4e:36:
8d:a1:58:15:3d:35:13:a3:81:32:ba:7b:88:a0:35:66:aa:58:
e1:7d:73:88:a3:03:b6:66:87:49:a1:c0:05:6d:f8:72:fd:06:
c1:6d:7b:ab:18:a4:22:25:01:9c:52:86:ed:7c:35:8e:8b:29:
28:eb:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org