Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/4d2377345b1a7ae38cc16a7b28cfaf8e328919b9.roa
File: 4d2377345b1a7ae38cc16a7b28cfaf8e328919b9.roa (raw, json)
Hash identifier: R3odr2fMl26YzIk41hLYOPKduQmuYcGfQx4JRuYpNbU=
Subject key identifier: 48:2C:0C:73:B5:59:AF:1F:F6:60:C4:B1:0F:F1:47:7B:38:43:FD:70
Certificate issuer: /CN=2cb72688104ed29264f079ae92d8d441e6eb06a9
Certificate serial: 1A0868
Authority key identifier: 3A:A9:68:CD:02:9F:30:FD:1E:1B:0C:C6:8B:B0:D9:A5:48:8D:7C:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cb72688104ed29264f079ae92d8d441e6eb06a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/4d2377345b1a7ae38cc16a7b28cfaf8e328919b9.roa
Signing time: Fri 06 Oct 2023 19:54:29 +0000
ROA not before: Thu 05 Oct 2023 19:54:29 +0000
ROA not after: Mon 06 Oct 2025 19:54:29 +0000
asID: 269886
IP address blocks: 45.191.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1706088 (0x1a0868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb72688104ed29264f079ae92d8d441e6eb06a9
Validity
Not Before: Oct 5 19:54:29 2023 GMT
Not After : Oct 6 19:54:29 2025 GMT
Subject: CN=4d2377345b1a7ae38cc16a7b28cfaf8e328919b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:b2:14:4d:85:72:ca:86:d4:d8:f3:79:aa:
6a:92:d9:c4:58:92:d8:93:c0:d7:ff:98:f1:53:65:
12:1e:29:c9:03:eb:f7:07:19:84:dc:3e:d0:a7:4a:
58:7a:ee:a6:e9:4d:ea:7f:cf:82:2a:b3:e9:c6:33:
b9:58:b8:55:3d:93:1c:8c:e4:4c:0f:27:45:b6:e2:
55:b2:bd:79:54:aa:2b:41:ba:30:b3:49:de:af:30:
3f:ac:ef:cd:e0:4d:41:28:d2:8d:bd:43:22:40:4c:
c6:a6:dd:e4:4d:fd:eb:44:39:c2:4f:c4:23:f8:14:
ef:f3:9c:01:3a:91:d8:37:1b:a7:c1:1b:44:1a:53:
58:16:1f:0d:b2:da:55:b8:80:7a:b0:be:2f:f0:0a:
4a:38:2a:d0:f2:84:d5:d8:e6:7e:c7:2c:87:c1:d3:
d6:fd:06:bd:fe:75:e7:5d:81:e0:ee:af:ba:24:e3:
27:88:b6:07:0c:73:94:ab:71:db:c2:40:58:10:a6:
85:02:43:ee:14:4e:30:09:d3:92:c8:fc:81:af:e5:
e4:32:4f:8e:15:03:d6:b8:e5:22:55:a7:bd:e7:b3:
ac:97:2b:0a:29:df:1e:57:4f:52:a8:e8:7c:fe:3d:
dd:e6:3c:91:22:ef:87:26:67:13:9c:78:2c:17:d2:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2C:0C:73:B5:59:AF:1F:F6:60:C4:B1:0F:F1:47:7B:38:43:FD:70
X509v3 Authority Key Identifier:
keyid:3A:A9:68:CD:02:9F:30:FD:1E:1B:0C:C6:8B:B0:D9:A5:48:8D:7C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cb72688104ed29264f079ae92d8d441e6eb06a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/4d2377345b1a7ae38cc16a7b28cfaf8e328919b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/2cb72688104ed29264f079ae92d8d441e6eb06a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:21:51:29:c7:f3:13:96:91:ea:02:69:3d:f7:26:79:6e:86:
7e:59:c8:c4:67:d3:91:36:a1:37:8e:aa:82:c9:ed:fe:31:99:
da:0d:71:f6:1b:f7:e6:b8:5c:01:3c:c3:24:a2:57:75:17:75:
75:92:7e:ad:1e:ec:f8:95:53:08:f1:96:69:fc:91:e5:f5:2f:
69:c0:f4:00:39:ec:e6:e0:41:aa:07:4c:44:02:e8:2b:54:37:
92:01:3f:cf:0c:42:c2:0b:9c:a9:51:94:1a:12:07:8a:23:f6:
f8:fa:79:eb:72:3a:5e:c5:7e:85:4a:91:bb:f3:5e:b1:4e:2b:
39:0b:f8:bd:76:0e:6c:78:16:42:e1:29:c8:6f:cd:96:75:f1:
b0:53:41:1a:96:de:ce:82:15:64:83:a7:6e:3d:6c:3c:1a:18:
c7:a8:a8:21:f5:42:e6:8b:b5:35:e2:56:a1:52:1a:bb:5c:27:
12:b0:b0:47:d2:ec:cb:78:e7:47:f6:b8:ca:da:de:ee:27:e9:
d8:7d:b6:64:ff:18:94:2c:5f:be:e4:0e:93:a0:ec:2a:c2:25:
d4:d4:24:1c:37:3b:33:55:e5:d0:ab:1e:bf:53:43:39:ac:4b:
4c:9a:5a:dd:70:23:15:75:a8:1c:1d:57:f3:a4:b6:f0:96:20:
f0:46:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:16 2024 by rpki-client on console-fra.rpki-client.org