Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/63dd6fe8901c7af941498a10828b51a86fe16a89.roa
File: 63dd6fe8901c7af941498a10828b51a86fe16a89.roa (raw, json)
Hash identifier: R9QF50IomOJp1KzmdB+f/YJROvv5PXcY3as1q4GX0nA=
Subject key identifier: 5A:2F:7F:0C:78:0F:B3:81:60:DB:63:EB:05:CD:FA:4D:73:53:A5:D4
Certificate issuer: /CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
Certificate serial: 269812
Authority key identifier: EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/63dd6fe8901c7af941498a10828b51a86fe16a89.roa
Signing time: Fri 01 Mar 2024 17:23:12 +0000
ROA not before: Fri 01 Mar 2024 17:23:12 +0000
ROA not after: Sun 01 Mar 2026 17:23:12 +0000
asID: 267775
IP address blocks: 45.171.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2529298 (0x269812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
Validity
Not Before: Mar 1 17:23:12 2024 GMT
Not After : Mar 1 17:23:12 2026 GMT
Subject: CN=63dd6fe8901c7af941498a10828b51a86fe16a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:02:07:09:5e:64:dc:56:86:09:6e:d5:39:
ae:ac:bc:bf:f3:82:f6:98:60:55:63:f8:23:34:e9:
c3:52:0f:31:97:4b:c1:fd:30:68:1b:16:6f:a1:05:
d8:be:20:bd:21:08:05:38:b1:96:90:56:00:56:79:
dc:43:89:23:11:d0:78:14:69:4e:3a:7a:3a:3c:05:
5a:05:a0:ca:83:80:dc:86:93:af:cd:51:5c:a3:83:
56:9a:0d:da:3f:3e:6b:3a:f2:25:09:39:a1:36:db:
92:60:a3:17:f7:c8:e4:e0:fa:5c:b4:9e:4d:e7:8b:
6b:ef:c5:1e:55:01:be:7f:47:e6:6d:f9:1e:9a:86:
07:10:d1:68:c4:7a:65:8a:dd:2c:86:08:0e:6b:fd:
d6:39:dd:3e:8d:79:87:18:df:b1:b5:88:20:22:f7:
d7:69:26:8c:a4:f1:3a:b9:59:c6:d9:a5:0d:d4:7b:
a4:82:d6:c7:97:50:97:bb:a5:b9:f0:a1:aa:7b:74:
fb:d9:a6:8d:b1:b9:31:b6:c1:04:94:69:79:7d:87:
3c:bf:ee:e6:42:f7:57:72:b1:8c:d6:89:9f:14:a3:
b2:c8:bb:05:8a:1a:0b:d5:74:61:21:13:97:17:5c:
3e:51:01:e9:4f:af:63:67:f2:87:ac:33:9c:91:11:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:7F:0C:78:0F:B3:81:60:DB:63:EB:05:CD:FA:4D:73:53:A5:D4
X509v3 Authority Key Identifier:
keyid:EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/63dd6fe8901c7af941498a10828b51a86fe16a89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.48.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:29:c4:e9:20:88:f9:e5:1c:cb:f0:ac:02:32:7c:ee:9b:6c:
56:a5:a3:0e:3d:71:10:bc:b8:8e:17:ed:09:02:4b:c3:4f:b3:
66:94:0c:33:96:bb:6a:80:6d:27:bd:dc:8e:50:88:36:59:dc:
68:fa:48:50:b7:04:2f:f9:f5:5a:e3:e3:9b:2e:9a:dc:c9:83:
d1:04:78:d1:f4:c1:b4:bd:19:2d:69:d8:57:ee:cc:d0:85:d4:
d0:65:ac:55:b6:21:ec:e6:4d:cf:0f:7e:0b:8d:fc:b8:19:ba:
e5:90:e2:48:b2:14:51:96:2a:12:d3:34:d0:13:14:ec:4a:8f:
5a:1b:12:e3:45:9a:7c:35:3a:51:2d:62:39:36:e7:68:64:a9:
70:ff:76:0f:c6:87:b1:41:a4:24:3e:7c:3a:05:30:fd:1c:fc:
2d:f8:87:66:b6:a2:45:73:e7:a0:ea:46:b3:a4:06:4f:93:58:
29:c1:a7:78:b9:7c:39:fd:93:55:2c:31:db:e3:5b:b9:8a:b0:
01:08:ee:53:14:33:66:57:cf:48:52:20:9e:a9:1a:fd:8e:5e:
85:cd:4c:d5:9d:2e:29:2f:e4:36:94:7a:cf:f5:2f:72:be:cb:
74:27:57:88:e1:81:48:6f:5e:ad:8d:0a:f8:c4:cc:c5:e0:93:
8b:5c:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org