Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/000a35b0125d8cb5fa8d178c7d70fec57a5eebcb.roa
File: 000a35b0125d8cb5fa8d178c7d70fec57a5eebcb.roa (raw, json)
Hash identifier: Em2qU9guVbbaPI1tjpZVq/taGVMrXDvJbOpLP86q/Ds=
Subject key identifier: 49:26:2C:5C:B8:F8:97:89:82:27:13:F8:40:C6:40:EE:15:B8:D7:5D
Certificate issuer: /CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
Certificate serial: 1FA26A
Authority key identifier: EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/000a35b0125d8cb5fa8d178c7d70fec57a5eebcb.roa
Signing time: Mon 17 Apr 2023 07:30:15 +0000
ROA not before: Sun 16 Apr 2023 07:30:15 +0000
ROA not after: Thu 17 Apr 2025 07:30:15 +0000
asID: 266784
IP address blocks: 45.235.120.0/22 maxlen: 24
2803:a0::/32 maxlen: 36
2803:a0::/35 maxlen: 36
2803:a0:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073194 (0x1fa26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
Validity
Not Before: Apr 16 07:30:15 2023 GMT
Not After : Apr 17 07:30:15 2025 GMT
Subject: CN=000a35b0125d8cb5fa8d178c7d70fec57a5eebcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:69:8a:66:6c:e0:01:8f:30:0b:a2:53:68:
58:98:0c:a9:b8:e0:69:40:19:60:47:7a:87:56:d3:
c4:4f:18:39:c6:58:48:93:6e:c3:2a:72:fd:f9:90:
a0:be:70:09:33:76:7d:69:30:cf:98:80:7f:46:05:
5f:9c:80:63:61:cf:0e:4e:20:0c:83:81:5a:42:d1:
04:96:b6:98:4e:c1:45:be:db:97:eb:4f:a4:27:db:
80:48:28:df:06:4f:71:81:6e:1c:6b:cf:ec:53:69:
4b:69:be:a8:e8:38:aa:96:21:64:f1:aa:2c:ce:6a:
32:73:64:c5:31:47:a4:31:33:de:bb:60:86:2a:33:
0f:5c:27:65:3c:ca:4a:85:7e:a4:0d:d0:bf:91:52:
bf:20:71:79:3e:18:fd:5a:f0:15:61:7d:66:ac:0c:
cd:53:30:f2:ea:7d:b2:79:1c:04:3f:2e:c4:da:e1:
9a:a2:1c:ea:1a:18:9f:0c:b3:25:9c:2a:7e:7e:05:
35:b0:78:f6:f2:d6:87:03:d2:bf:9b:47:bc:00:19:
f5:4c:9c:39:e7:35:fd:44:d8:25:30:93:65:f8:bc:
27:7b:f0:f7:4b:08:74:5e:f2:d3:1f:8c:78:5f:1d:
90:db:76:d8:9a:6a:d5:0f:c9:02:fc:1a:c2:50:5d:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:26:2C:5C:B8:F8:97:89:82:27:13:F8:40:C6:40:EE:15:B8:D7:5D
X509v3 Authority Key Identifier:
keyid:EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/000a35b0125d8cb5fa8d178c7d70fec57a5eebcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.120.0/22
IPv6:
2803:a0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:a6:ab:98:7f:8b:f6:90:2c:5e:4b:eb:f3:cb:d3:7b:3d:3f:
44:86:9b:55:4f:d1:da:7a:12:86:fe:e9:25:4d:86:67:c0:30:
7c:ed:35:67:b4:0d:52:4f:28:13:a1:93:f7:51:7f:b1:1b:79:
10:a4:77:8c:8a:a5:44:11:43:ef:89:c1:c6:7a:a0:ac:67:ac:
86:b1:7b:96:3b:86:72:22:47:08:6e:1b:39:cd:8d:24:bd:ba:
fe:3b:d7:16:f6:9e:78:cc:7b:84:d1:41:e9:15:55:0f:c1:e0:
e3:05:ca:d6:d6:bd:0b:46:73:8e:aa:cf:00:a0:33:4b:92:e7:
41:8c:5e:9a:63:5f:39:0e:eb:e6:3f:04:34:c2:df:6a:3f:23:
77:7c:77:e0:43:d6:bd:37:8f:39:48:93:cd:c5:cc:f9:b9:22:
21:da:2f:20:3a:3e:0f:7d:31:90:8c:87:92:c1:54:cd:bc:8a:
d8:5e:32:54:aa:81:15:d1:51:69:3f:51:e9:3d:dc:8e:ed:65:
a0:f4:94:3a:8b:fe:d7:18:9d:7d:34:8e:b3:3b:50:bf:17:7b:
0a:53:a6:9a:68:20:0a:4b:ba:44:4c:96:4e:c3:e7:d4:0e:65:
dc:51:1f:f4:0c:10:4d:2e:0a:15:99:5b:a2:ea:91:30:ba:72:
59:47:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org