Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/9612ddbab89d1af35cc09c85c9a8b1d18210eab8.roa
File: 9612ddbab89d1af35cc09c85c9a8b1d18210eab8.roa (raw, json)
Hash identifier: qIgGa5fTOpKUQcn3U9rblFDudlk80scQ+LL+7C1z8sM=
Subject key identifier: E0:D2:9F:93:50:0D:66:1B:9A:B4:9E:8C:09:DB:8D:58:67:59:8D:85
Certificate issuer: /CN=23604b73c22ca1f7419d3ca4dccb9ce28f4435a8
Certificate serial: 20E004
Authority key identifier: D7:E8:15:32:35:AE:58:6B:50:47:7F:AC:6D:E7:E4:FA:79:9E:6C:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/9612ddbab89d1af35cc09c85c9a8b1d18210eab8.roa
Signing time: Sat 08 Jul 2023 12:04:15 +0000
ROA not before: Fri 07 Jul 2023 12:04:15 +0000
ROA not after: Tue 08 Jul 2025 12:04:15 +0000
asID: 264732
IP address blocks: 45.177.144.0/22 maxlen: 24
170.233.68.0/22 maxlen: 24
2803:8a60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2154500 (0x20e004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23604b73c22ca1f7419d3ca4dccb9ce28f4435a8
Validity
Not Before: Jul 7 12:04:15 2023 GMT
Not After : Jul 8 12:04:15 2025 GMT
Subject: CN=9612ddbab89d1af35cc09c85c9a8b1d18210eab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:0a:48:af:f7:c1:1f:52:8d:0b:6a:3a:5f:
31:89:a2:6f:14:c4:b5:40:22:03:a2:6a:c0:9f:ad:
36:fc:d4:e4:93:18:df:0a:94:e0:b4:cd:6f:db:94:
69:d4:72:36:eb:61:54:73:0c:e8:14:6a:b0:3a:c5:
e4:79:7e:46:0f:0d:16:38:5f:d6:cb:05:5f:b9:07:
7d:b5:ef:c2:09:68:f7:f3:e8:24:c5:b5:82:5b:e0:
9c:54:a7:d0:4d:e0:08:de:91:d7:68:57:54:64:b1:
56:8f:df:99:36:1b:26:dc:c4:58:dc:57:97:28:4a:
2b:f9:e8:94:3e:ac:b0:d7:08:5e:6c:41:ef:f5:4b:
97:ae:50:82:24:9d:f4:d7:94:a1:0c:e1:27:88:99:
c0:58:65:32:c8:1a:ff:22:5b:46:91:66:41:eb:e8:
64:b7:51:b0:78:a0:35:6f:27:00:5e:e4:1d:2e:95:
e1:f6:b3:8d:46:c6:eb:fb:f5:d6:42:98:e3:d8:6c:
5f:b7:30:2e:e7:79:1f:a4:ab:d9:e3:8b:51:c1:a9:
3e:74:26:05:68:16:ec:d4:52:3c:35:9d:80:73:87:
56:28:4d:79:b1:80:ed:d5:d4:34:69:70:cd:7a:57:
91:49:7d:d1:16:22:1c:a1:55:52:f2:6f:c0:9f:fe:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:9F:93:50:0D:66:1B:9A:B4:9E:8C:09:DB:8D:58:67:59:8D:85
X509v3 Authority Key Identifier:
keyid:D7:E8:15:32:35:AE:58:6B:50:47:7F:AC:6D:E7:E4:FA:79:9E:6C:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/9612ddbab89d1af35cc09c85c9a8b1d18210eab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.144.0/22
170.233.68.0/22
IPv6:
2803:8a60::/32
Signature Algorithm: sha256WithRSAEncryption
6f:ec:43:19:c0:fe:19:e7:b8:6e:7e:8d:90:a4:5d:50:53:0d:
f9:e8:2e:11:e1:59:7e:19:2e:42:75:c0:16:67:e4:88:9b:36:
f2:98:c9:d0:03:3e:0a:3b:91:3b:37:f6:fe:64:d0:f6:8f:36:
a7:81:ed:d5:0b:2c:5a:13:72:5a:72:e8:ed:3f:32:19:8e:bf:
d0:f7:4f:d5:0d:59:8a:df:f1:67:fd:67:c7:7f:66:8e:1c:80:
f3:9a:66:52:33:42:26:d0:fe:5e:a4:87:a4:3d:55:29:0c:61:
66:e2:ff:80:27:94:06:05:e0:c9:07:50:8b:94:e1:05:2d:ec:
ca:c3:dc:20:ce:e5:0b:c5:80:4e:e4:4f:53:ce:6a:6c:b9:77:
d4:27:88:91:c1:b0:7f:18:58:65:92:22:b2:75:73:96:5f:99:
d7:37:8b:fd:17:a7:f1:85:00:3c:d8:1e:15:20:ac:c1:6d:bb:
e5:03:36:b3:85:91:46:be:7e:27:5d:31:b3:59:be:38:a0:87:
a7:01:46:98:ca:b4:13:50:4b:91:8e:6a:31:28:22:12:60:51:
ac:43:39:dd:40:bc:e1:24:a4:6b:49:35:c1:93:19:30:5a:fb:
44:f6:93:85:6b:6e:8c:a1:39:30:7a:36:e1:fd:27:e0:d7:35:
4a:8b:29:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:19 2024 by rpki-client on console-ams.rpki-client.org