Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/904b266d77e256ea3bf52c87a71b160e5180d74f.roa
File: 904b266d77e256ea3bf52c87a71b160e5180d74f.roa (raw, json)
Hash identifier: DAqznEMCvOf1iCYTe1ItzI+cGgwEBLjkabW2YlQhLtw=
Subject key identifier: 9B:4C:A6:38:CD:8F:6A:2C:11:18:FD:7A:B4:16:DD:B9:D8:B1:1D:24
Certificate issuer: /CN=4d446954aafa3d753308d3a0466a8574d0f27367
Certificate serial: 1B75FC
Authority key identifier: 54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d446954aafa3d753308d3a0466a8574d0f27367.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/904b266d77e256ea3bf52c87a71b160e5180d74f.roa
Signing time: Tue 10 Oct 2023 16:46:31 +0000
ROA not before: Mon 09 Oct 2023 16:46:31 +0000
ROA not after: Fri 10 Oct 2025 16:46:31 +0000
asID: 270173
IP address blocks: 45.164.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799676 (0x1b75fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d446954aafa3d753308d3a0466a8574d0f27367
Validity
Not Before: Oct 9 16:46:31 2023 GMT
Not After : Oct 10 16:46:31 2025 GMT
Subject: CN=904b266d77e256ea3bf52c87a71b160e5180d74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:1c:d0:fb:51:e4:69:82:a6:4d:dd:2e:cb:
a9:33:68:91:fc:95:96:df:70:69:e6:ee:7a:a2:69:
11:53:79:92:c1:e1:f1:74:b2:a7:75:49:7a:29:0e:
c9:4f:b9:ac:11:3b:ba:46:86:78:8c:24:c8:e6:29:
55:2a:83:96:30:78:04:4e:ee:7d:70:1a:96:70:e1:
a4:bc:c5:5b:d4:a7:8a:ae:70:63:38:fc:00:25:b6:
a0:c2:2c:90:8a:b5:ef:6b:ff:e0:7e:19:cc:55:78:
71:37:03:aa:f9:d4:20:b2:18:f1:67:64:86:f3:57:
a0:27:b1:55:0c:0a:bf:97:de:9e:95:da:40:1f:0a:
d1:9a:90:11:fe:bb:83:58:98:76:23:88:a1:80:09:
1e:e6:7a:ad:07:6f:0c:d4:ac:e0:f2:72:42:34:7d:
11:7b:14:18:30:0a:03:9a:b9:c7:e5:5d:00:a6:ce:
6c:6c:24:d1:e3:ad:1d:10:a2:3b:dc:43:e0:b8:00:
ea:7d:b2:ad:a0:24:00:ee:d9:7c:cc:66:da:7d:09:
b0:ba:3d:8e:f5:01:c2:f9:39:08:7d:5f:1d:55:1a:
0d:b7:ab:52:59:15:b0:23:05:0b:bb:23:9d:4a:51:
9e:df:25:a3:0c:ad:10:78:73:c8:61:50:3d:61:6e:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:A6:38:CD:8F:6A:2C:11:18:FD:7A:B4:16:DD:B9:D8:B1:1D:24
X509v3 Authority Key Identifier:
keyid:54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d446954aafa3d753308d3a0466a8574d0f27367.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/904b266d77e256ea3bf52c87a71b160e5180d74f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/4d446954aafa3d753308d3a0466a8574d0f27367.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.108.0/22
Signature Algorithm: sha256WithRSAEncryption
79:1d:6d:f1:21:50:f0:37:69:54:dd:36:32:77:6c:75:a9:7f:
bf:86:c9:cc:78:00:28:ca:6d:41:55:f5:04:17:5a:0d:d3:f3:
1b:dd:3a:8e:18:ac:db:33:82:4e:6c:0e:12:89:8a:2e:63:67:
e6:50:75:10:95:e3:51:d9:13:f6:14:bf:89:25:6f:7e:84:e9:
e8:5d:e1:d6:6e:af:e0:ad:64:aa:66:67:6a:df:1c:3d:48:13:
5e:f4:0e:94:13:57:16:92:d4:00:a0:a4:a3:22:70:bb:09:97:
81:b9:c3:21:1f:64:ab:fb:b6:fe:98:91:84:ce:3b:97:35:74:
eb:39:69:50:a7:7b:a8:07:21:5f:eb:06:d2:cc:72:97:97:4f:
21:cc:6c:32:1f:4b:37:e0:92:e2:83:86:04:b5:b5:89:23:38:
f6:67:2b:21:3c:73:b5:41:0d:95:f6:ba:47:4e:40:cb:af:29:
28:56:51:96:54:e6:84:5b:6e:dc:75:b2:97:94:12:b7:73:30:
ac:01:c9:fa:ff:f5:61:ca:fe:1c:62:99:cf:11:ec:20:5e:32:
9c:1b:81:e6:72:ce:e3:df:36:ff:23:03:17:46:f4:07:ab:09:
48:a7:03:13:6b:99:dd:f5:44:2a:58:6e:37:17:96:4f:b2:e2:
16:53:9b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org