Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/51daa4bf95f76bd5a1660e2f89159b25864a7396.roa
File: 51daa4bf95f76bd5a1660e2f89159b25864a7396.roa (raw, json)
Hash identifier: KBsxL4Xtl8SosLhoujJbYhTQMjj02YYWHnNiLKwa/+I=
Subject key identifier: 1F:AB:34:89:95:50:1B:1F:C1:42:76:15:7D:35:A8:0A:71:DB:84:C0
Certificate issuer: /CN=b237ad19586522bd4228c8593de2f297c35868d7
Certificate serial: 1F3C04
Authority key identifier: EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/51daa4bf95f76bd5a1660e2f89159b25864a7396.roa
Signing time: Wed 13 Dec 2023 04:40:39 +0000
ROA not before: Wed 13 Dec 2023 04:40:38 +0000
ROA not after: Sat 13 Dec 2025 04:40:38 +0000
asID: 266845
IP address blocks: 45.239.32.0/22 maxlen: 22
45.239.34.0/24 maxlen: 24
45.239.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2046980 (0x1f3c04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b237ad19586522bd4228c8593de2f297c35868d7
Validity
Not Before: Dec 13 04:40:38 2023 GMT
Not After : Dec 13 04:40:38 2025 GMT
Subject: CN=51daa4bf95f76bd5a1660e2f89159b25864a7396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:3d:be:29:6e:a6:36:ec:31:fa:70:94:f0:
e4:29:9f:cf:37:c0:c5:f4:6b:67:a1:a0:eb:39:71:
f7:fd:13:03:7c:90:90:f0:b4:71:a4:95:3b:4b:14:
2d:48:2d:22:19:cc:b0:de:b9:ab:8c:10:4a:8a:73:
b1:a3:d6:89:35:dd:a2:48:76:fe:d3:a5:33:a1:5e:
4b:b0:b9:f5:6b:5d:7a:e4:01:89:05:b0:7d:51:2e:
f0:62:2a:12:b8:6b:c1:ea:88:01:56:38:6f:7e:4c:
0d:b2:9f:56:a4:de:1f:db:80:6f:f4:47:7a:1d:3a:
3a:81:64:c3:69:7f:ca:d9:b5:ac:9d:44:30:44:e2:
1d:e2:91:a8:52:2c:e9:0c:9f:e4:90:eb:53:97:a6:
57:42:95:99:7d:f6:6c:a8:48:fc:38:0c:d5:82:f0:
f8:89:95:38:6e:94:ca:58:ec:44:a3:1a:ac:2b:0f:
e5:63:5e:20:d7:99:8e:0a:b1:cd:39:38:e7:fb:27:
c0:cb:e0:1f:cb:59:77:1b:b8:69:2a:17:a7:67:46:
a1:d9:c0:d3:b2:2b:20:14:d7:7d:d2:46:96:d3:eb:
6c:24:f1:c0:ae:07:33:8b:9a:4b:e3:1c:1c:00:ee:
98:65:80:bf:1e:17:6b:a4:8a:ef:b2:47:eb:cd:c3:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AB:34:89:95:50:1B:1F:C1:42:76:15:7D:35:A8:0A:71:DB:84:C0
X509v3 Authority Key Identifier:
keyid:EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/51daa4bf95f76bd5a1660e2f89159b25864a7396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.32.0/22
Signature Algorithm: sha256WithRSAEncryption
58:9b:b7:36:87:ec:52:f7:02:1b:c5:b0:b6:24:26:8a:70:6a:
b2:49:b2:fa:d3:67:db:a0:99:fb:67:94:94:c9:d6:ee:62:d6:
41:9b:c5:ce:d9:96:39:7a:a9:91:f0:86:49:35:62:53:d7:17:
2e:b3:17:2a:33:7a:42:87:10:45:40:74:b6:4b:3e:39:6e:ab:
e7:94:fb:80:ff:47:e0:d7:6e:ba:ff:94:94:f0:a6:a7:3f:7d:
79:c5:03:a5:85:3f:67:4d:41:4e:0f:32:2d:11:7e:24:f8:7d:
26:7e:a7:91:76:96:86:24:81:97:89:39:13:fe:81:d3:f2:c5:
48:49:2c:95:62:8c:78:0c:82:20:f8:5c:19:ff:67:2b:17:fb:
6a:b4:f5:b0:d7:43:29:5b:73:6a:9a:64:21:ba:5d:1f:7e:0d:
e6:7e:bb:8b:15:6c:21:74:30:cd:af:54:0b:0e:30:61:e6:72:
55:2d:11:94:ec:8c:2c:3c:ac:c8:e4:d3:5a:9b:a0:fa:5d:cf:
b7:ca:45:1a:a4:57:f9:ad:21:8c:70:ac:a0:bd:3f:1b:63:eb:
9b:27:78:41:b3:3d:15:ff:59:29:73:ce:89:c1:ca:54:26:5b:
5c:8c:00:01:5e:39:07:e4:fa:b5:5e:f6:f0:8b:99:f8:2b:5a:
9d:8b:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org