Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/94c568b61a4fa049aeac4007569f474c3872b4ed.roa
File: 94c568b61a4fa049aeac4007569f474c3872b4ed.roa (raw, json)
Hash identifier: vgoAfifQ7jSUOKk0uEHhKpEqa1RoABZNy5/nOhNPY58=
Subject key identifier: 7B:B5:32:1A:CF:1A:8D:4C:2C:F4:2F:B4:B5:C7:AA:C4:3C:49:A7:E2
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 11E07D
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/94c568b61a4fa049aeac4007569f474c3872b4ed.roa
Signing time: Wed 29 Nov 2023 14:15:27 +0000
ROA not before: Wed 29 Nov 2023 14:15:27 +0000
ROA not after: Sat 29 Nov 2025 14:15:27 +0000
asID: 272945
IP address blocks: 179.40.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1171581 (0x11e07d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 14:15:27 2023 GMT
Not After : Nov 29 14:15:27 2025 GMT
Subject: CN=94c568b61a4fa049aeac4007569f474c3872b4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:95:a0:f4:2c:f7:14:82:bf:dc:86:96:78:
a3:4e:5d:8b:3c:8b:6a:92:8d:59:29:c7:4c:22:55:
d1:63:f3:4a:69:b7:78:a2:14:0d:b2:bb:e9:e3:f8:
e6:0f:b0:9f:2c:a7:1d:89:d7:b5:df:48:cc:89:42:
77:8c:8d:fc:b9:02:df:cb:54:1c:57:e4:ce:85:d6:
fb:cf:18:11:89:d8:cd:f5:5f:38:64:e6:14:17:e2:
a4:52:b3:82:1a:e6:a6:e4:87:17:f4:47:40:51:d1:
fb:14:d8:8f:7c:c1:36:48:6a:6f:e5:0c:86:bd:c9:
dc:a8:7d:89:78:77:9c:16:d8:86:75:f7:e8:98:8e:
c9:9b:04:7d:0d:71:20:ce:b5:f5:66:94:02:cb:ff:
29:94:12:bc:48:2c:f8:45:f1:f4:2a:25:98:49:40:
3d:b0:c5:3a:d7:14:5a:cb:d7:7d:e5:dd:b9:fc:ac:
1d:ed:ed:01:f6:89:d1:f8:c6:a2:7f:71:bd:5e:81:
05:72:65:78:11:8e:ed:a4:f6:45:f3:9c:cc:85:68:
65:c9:6e:00:bc:9b:1b:4b:7b:59:86:c8:c3:31:8c:
33:76:f6:05:df:d6:71:02:bd:c5:61:79:54:19:78:
30:8c:d1:2b:32:0f:81:71:20:46:24:b6:f5:e6:34:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B5:32:1A:CF:1A:8D:4C:2C:F4:2F:B4:B5:C7:AA:C4:3C:49:A7:E2
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/94c568b61a4fa049aeac4007569f474c3872b4ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.40.45.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e7:18:99:8d:fc:4f:5f:ad:ce:24:a6:c1:60:8a:75:23:fd:
69:6c:72:fd:76:73:ad:ef:7a:30:3f:75:e6:31:16:0d:d0:e6:
25:94:5e:3e:29:20:93:2c:02:dd:22:df:cf:a2:48:5a:c2:aa:
5c:83:6e:bb:2c:87:af:82:95:25:a3:8e:6f:ad:c2:37:29:9d:
a4:39:b6:a6:b2:d2:65:4d:65:64:a7:79:23:b4:e7:d8:fa:4f:
6a:24:6a:36:a3:63:a6:0d:07:fd:67:fb:4e:f6:71:bd:4a:bd:
e5:7d:0f:8e:fe:ff:df:e2:50:b9:27:74:1e:c6:b7:79:48:9b:
f6:30:f2:6b:6b:a2:46:54:2f:58:c6:56:97:df:34:21:20:3e:
89:68:e5:bb:28:02:cc:9e:05:24:9d:a5:2f:2f:16:1e:e3:c9:
8a:0f:06:2c:9a:4f:ac:0d:14:d9:bd:24:d7:76:df:1d:82:bb:
47:e4:e4:93:cf:d7:6a:42:5d:3e:5c:00:d7:c9:e3:a6:d5:5a:
df:81:d5:c2:2e:8a:52:53:7a:be:5b:a1:e1:14:7f:7f:84:67:
6d:cf:05:8f:59:af:0f:76:af:97:49:73:48:87:80:fd:0a:82:
4a:26:f1:d1:2d:d1:7e:49:9d:59:45:69:52:0f:d3:38:ef:eb:
1c:69:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----