Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b358a31-34fb-4033-ab79-bca7803844b0/107ca4762c6a2803603d536b7b13f8ed1919095a.roa
File: 107ca4762c6a2803603d536b7b13f8ed1919095a.roa (raw, json)
Hash identifier: zxsuvMwjFo5+0t2m2Jp3PPj3bJq499Ll6JFQaJnNllI=
Subject key identifier: 22:8C:39:11:8A:C5:07:6F:ED:58:6B:38:B3:13:89:50:AD:26:CC:B0
Certificate issuer: /CN=ba1dbe9d5589464b94c771e420a4b5a5d8eaaff5
Certificate serial: 010C85
Authority key identifier: 23:11:D2:26:9B:C6:31:48:DC:31:90:2B:14:1A:21:92:0A:05:6D:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba1dbe9d5589464b94c771e420a4b5a5d8eaaff5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3b358a31-34fb-4033-ab79-bca7803844b0/107ca4762c6a2803603d536b7b13f8ed1919095a.roa
Signing time: Fri 26 Jan 2024 19:52:15 +0000
ROA not before: Fri 26 Jan 2024 19:52:14 +0000
ROA not after: Mon 26 Jan 2026 19:52:14 +0000
asID: 266771
IP address blocks: 45.166.73.0/24 maxlen: 24
45.166.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68741 (0x10c85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1dbe9d5589464b94c771e420a4b5a5d8eaaff5
Validity
Not Before: Jan 26 19:52:14 2024 GMT
Not After : Jan 26 19:52:14 2026 GMT
Subject: CN=107ca4762c6a2803603d536b7b13f8ed1919095a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:9b:bf:aa:3f:6b:53:f5:c0:d3:80:f6:0e:
ca:69:d2:0f:cf:70:5d:d6:5d:a5:38:7a:2c:e8:ab:
ec:22:4f:ac:c6:35:00:a3:cc:48:23:ea:cb:f6:c3:
42:ac:ad:cc:49:ca:da:87:5e:1d:73:16:45:8a:60:
82:33:8c:bc:5c:c7:15:f5:df:7e:47:64:4c:02:fc:
7c:a6:b9:67:a2:c4:f3:15:98:94:5c:1f:94:ee:92:
1c:e1:61:66:30:cb:da:72:39:ba:43:67:f5:3f:8b:
b5:b1:3c:1c:9e:32:18:3d:f6:d0:38:8d:a2:61:1e:
21:22:b7:54:a8:7e:38:0d:b4:d1:cf:13:9d:82:24:
83:1b:d6:9f:fb:dc:d4:d9:04:61:26:d4:be:c4:3b:
68:08:b7:30:aa:53:de:79:13:a8:80:8b:3a:0f:4a:
43:a7:5a:34:ce:e6:ec:48:19:61:db:17:07:47:c2:
a6:76:44:b7:b9:86:7e:28:39:71:1b:35:6b:7f:ba:
bf:30:58:36:ed:4a:ae:51:ad:a5:a8:ca:61:26:66:
a6:7a:18:b2:b5:2f:81:5c:7d:d5:2f:39:46:d0:7f:
4c:f4:2c:08:2f:60:64:32:78:5e:93:1d:ee:72:8c:
b8:7a:69:b7:53:59:f4:9b:b6:13:c1:78:38:2b:a7:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8C:39:11:8A:C5:07:6F:ED:58:6B:38:B3:13:89:50:AD:26:CC:B0
X509v3 Authority Key Identifier:
keyid:23:11:D2:26:9B:C6:31:48:DC:31:90:2B:14:1A:21:92:0A:05:6D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba1dbe9d5589464b94c771e420a4b5a5d8eaaff5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b358a31-34fb-4033-ab79-bca7803844b0/107ca4762c6a2803603d536b7b13f8ed1919095a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3b358a31-34fb-4033-ab79-bca7803844b0/ba1dbe9d5589464b94c771e420a4b5a5d8eaaff5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.73.0-45.166.75.255
Signature Algorithm: sha256WithRSAEncryption
77:4f:6f:b0:f7:82:e2:d9:07:c8:44:bf:07:f4:d1:09:d7:0a:
85:99:41:87:4c:21:a3:b7:43:7f:84:ef:9c:02:8a:aa:05:6b:
47:4f:39:20:56:e4:d4:3f:75:e5:50:4a:79:e4:a4:ac:08:b3:
04:3b:72:2d:fe:19:99:a0:8e:21:96:68:1c:3a:50:ab:a6:4a:
04:4a:2c:66:7a:34:92:26:b5:4b:48:dd:d8:c2:e4:52:85:68:
4f:31:d1:60:f4:5b:8e:59:ae:a9:6e:fd:b9:c1:e5:56:e4:2a:
c7:55:4a:90:e8:08:d4:8e:3a:e4:8a:04:cb:83:9d:f8:de:66:
b5:c6:9e:30:17:bc:d6:f7:3d:94:86:b4:d5:5e:91:cb:e5:44:
a8:69:ac:c8:60:06:0b:fa:01:5b:a3:a6:df:d5:80:ac:82:c3:
b3:71:aa:f5:b2:d5:9b:db:1f:9e:36:5d:ad:3a:15:a5:6c:26:
d6:ce:06:2f:4d:f0:49:db:ec:a7:a0:c7:c5:95:bc:bd:06:86:
98:5c:3d:6f:40:4e:79:d3:3c:60:44:c0:86:4d:b8:77:06:db:
cc:e8:c5:58:20:b7:e7:b4:83:f1:56:bc:49:f1:10:7d:5b:44:
ff:a6:03:4e:5e:cf:7d:da:92:2a:f4:81:96:f8:8e:99:20:6a:
12:44:48:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org