Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/641307acb28cb93e37f4f166a42e16f5a79ffb21.roa
File: 641307acb28cb93e37f4f166a42e16f5a79ffb21.roa (raw, json)
Hash identifier: wVBnBQZSq8v618MCr9AP+dCltH0MgvjaV9pcChVa6Fo=
Subject key identifier: 51:8B:E7:83:19:F1:34:0F:27:29:3C:92:8C:4C:9F:43:67:AD:2A:1F
Certificate issuer: /CN=5be393491eb2c03f14214a706c7be3bb76a02485
Certificate serial: 14C444
Authority key identifier: 81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/641307acb28cb93e37f4f166a42e16f5a79ffb21.roa
Signing time: Wed 09 Feb 2022 15:48:49 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 264668
IP address blocks: 45.236.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1360964 (0x14c444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be393491eb2c03f14214a706c7be3bb76a02485
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=641307acb28cb93e37f4f166a42e16f5a79ffb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:be:30:db:b3:16:61:d4:6c:61:3d:aa:b2:
c1:1d:e8:8c:03:83:4c:00:b7:61:d0:90:e7:e8:65:
7e:90:38:6c:6c:a2:41:d3:2c:e1:90:e8:db:73:c2:
24:a1:94:39:15:ed:36:3f:42:7a:d5:24:e2:80:93:
de:35:29:8d:0d:b8:f6:2c:11:bf:d2:0d:fd:88:7d:
02:ba:81:51:5e:db:9e:8d:19:f4:1c:51:27:c5:24:
eb:8c:6c:12:b8:87:65:68:1a:53:b7:3c:62:e7:25:
ea:3b:fc:52:c6:17:57:82:9c:83:2c:b6:2b:44:96:
27:ee:10:3f:a0:b5:06:90:a2:c6:5d:6a:2b:aa:8e:
bc:e2:f4:16:eb:c6:15:f6:27:18:b6:2d:0a:03:cc:
49:1d:87:5e:39:61:49:b3:d4:f8:10:67:2a:7f:fe:
6a:62:9e:47:b0:50:28:50:f8:14:9c:57:98:8a:7e:
47:ac:42:70:96:7d:b2:64:bf:02:9e:dc:b7:2c:7f:
8e:a5:ac:cb:2b:5a:d2:a1:b3:d7:91:ab:b6:24:51:
2c:41:a7:c3:6a:b3:44:34:fa:05:f4:08:a9:27:d7:
09:43:44:7e:0a:94:94:34:48:31:b8:f5:f9:45:fe:
db:72:aa:f1:d7:0e:01:84:2d:ec:a7:bd:e2:4a:86:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8B:E7:83:19:F1:34:0F:27:29:3C:92:8C:4C:9F:43:67:AD:2A:1F
X509v3 Authority Key Identifier:
keyid:81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/641307acb28cb93e37f4f166a42e16f5a79ffb21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/5be393491eb2c03f14214a706c7be3bb76a02485.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:9f:ad:bf:4c:64:c0:d3:28:68:cd:95:a2:ea:d7:4b:5d:ea:
0e:e6:f8:8a:cf:ce:e0:e9:63:38:a5:5e:95:38:c9:c6:de:0f:
91:3c:9f:28:86:3c:74:c3:b8:a6:23:f4:ef:71:fd:53:90:a9:
a0:04:29:03:81:ec:52:b8:c7:7c:e3:87:95:15:ce:82:0b:18:
d4:8c:a2:45:9d:35:c4:ce:77:d4:64:16:ec:12:30:e6:29:a7:
97:79:a0:22:61:0a:ce:98:1a:ef:45:47:39:4c:b3:04:4a:be:
3f:39:9c:3f:49:07:6c:94:af:a7:70:df:bf:20:34:79:03:00:
a1:1d:12:b5:dd:bc:79:d8:b2:e6:f6:cf:56:0e:f5:aa:a3:fe:
bb:13:c4:be:e0:b1:a5:e4:7f:4a:72:24:b6:af:90:b4:2d:a2:
1c:0e:cd:de:cd:74:f8:0d:49:08:2b:c7:40:7e:31:f4:3c:f1:
e2:d3:f6:17:f6:30:fb:cc:3c:e6:af:5d:44:1b:04:b2:20:cc:
5a:27:36:6d:97:cf:88:30:fd:04:4f:0b:20:7b:b8:5a:c5:5c:
78:28:60:94:0b:af:1a:92:b4:27:c6:7d:a1:2b:f6:b7:de:e0:
1d:09:d9:e1:2e:19:f0:1c:49:0d:2e:a0:9e:33:4b:c4:ea:7b:
f3:c5:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:31:36 2025 by rpki-client