Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/25877f9b7472b5ce7e6d068bac764522ffd3264a.roa
File: 25877f9b7472b5ce7e6d068bac764522ffd3264a.roa (raw, json)
Hash identifier: qClpoDhIyIX6LF9xZ6MLkI34Fyd9r4+cV5iy4cb3/XU=
Subject key identifier: F5:18:2E:74:D2:43:1D:8F:D9:37:E7:D1:E6:05:42:8A:02:66:7B:55
Certificate issuer: /CN=9a70223a7072e26ee6c67536cef9197634c52008
Certificate serial: 1DA833
Authority key identifier: 41:DB:4D:7B:9D:45:A4:ED:D2:24:27:B1:A1:CC:85:94:81:95:1E:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a70223a7072e26ee6c67536cef9197634c52008.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/25877f9b7472b5ce7e6d068bac764522ffd3264a.roa
Signing time: Sat 25 Feb 2023 12:40:43 +0000
ROA not before: Tue 21 Feb 2023 12:39:03 +0000
ROA not after: Tue 25 Feb 2025 12:39:03 +0000
asID: 265662
IP address blocks: 45.4.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1943603 (0x1da833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a70223a7072e26ee6c67536cef9197634c52008
Validity
Not Before: Feb 21 12:39:03 2023 GMT
Not After : Feb 25 12:39:03 2025 GMT
Subject: CN=25877f9b7472b5ce7e6d068bac764522ffd3264a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:ba:12:3a:11:03:b3:0e:2e:6d:1b:4c:8f:
42:5d:ba:06:4d:75:05:b6:f0:d6:0b:d2:5b:db:20:
d3:9e:b3:6d:58:17:2a:5b:de:90:2f:e8:39:41:0d:
29:7d:9e:8a:6f:b9:8b:13:5b:b0:3b:16:18:a3:54:
58:39:a0:8c:c7:f9:0d:82:0b:8b:5e:f1:fc:32:88:
6b:95:62:e6:77:00:5b:04:77:87:80:b1:73:bc:69:
07:cf:2f:29:84:00:45:c4:13:4a:60:87:f5:ff:68:
19:b7:95:ec:da:81:86:85:2b:12:29:cd:fb:7e:88:
a9:84:0e:93:26:6d:bd:0b:86:a7:2d:80:a5:88:ec:
54:95:60:6c:cc:77:ab:34:75:99:32:2f:33:8c:1b:
bf:1f:f9:57:c8:35:ea:18:fe:e1:ae:a1:9b:49:7e:
a2:80:a7:a2:c9:be:a3:71:1f:15:4d:0e:56:f3:21:
45:3c:f1:d9:aa:12:a0:83:0e:90:0b:d5:4e:89:11:
f7:7c:7f:a0:67:3b:71:86:64:07:d0:69:60:72:38:
67:f9:7d:c8:1d:5b:cf:b5:83:db:7e:9a:34:87:fc:
8b:d6:6f:32:c1:bf:41:68:1c:d3:71:d8:b7:2a:0d:
43:84:fe:07:d7:f1:08:ee:87:54:92:11:f0:73:5c:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:18:2E:74:D2:43:1D:8F:D9:37:E7:D1:E6:05:42:8A:02:66:7B:55
X509v3 Authority Key Identifier:
keyid:41:DB:4D:7B:9D:45:A4:ED:D2:24:27:B1:A1:CC:85:94:81:95:1E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a70223a7072e26ee6c67536cef9197634c52008.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/25877f9b7472b5ce7e6d068bac764522ffd3264a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/9a70223a7072e26ee6c67536cef9197634c52008.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.3.0/24
Signature Algorithm: sha256WithRSAEncryption
29:1f:8f:9f:4a:0f:0e:56:a9:67:68:0c:4a:88:1c:9a:e7:ae:
0e:30:84:71:74:4e:27:16:67:e3:4a:96:75:5d:d9:ad:b8:be:
63:42:59:7c:51:7d:33:b9:83:3e:56:40:af:7a:ec:26:ba:67:
97:6c:f0:03:91:8a:5f:9c:3e:72:4a:84:9a:35:5c:4b:d1:ff:
6e:f0:dd:75:db:37:c2:dc:37:fc:ce:41:11:76:11:b2:c2:63:
b6:fd:5a:95:38:a1:d2:f1:fe:36:d3:fe:cf:48:4e:84:4b:16:
2e:a5:eb:c8:d6:e5:11:72:6b:c4:1d:78:30:21:3d:7a:57:ad:
f4:f9:03:fc:31:14:9b:7e:87:1c:bb:03:d5:40:c6:b6:e4:c7:
15:5d:3c:f7:e0:93:f2:b9:57:b3:bc:35:17:7d:d1:9d:88:18:
db:4c:38:27:b2:4c:30:86:50:f7:88:e4:c0:84:1f:56:f1:ab:
5e:40:77:66:c1:ae:b3:5b:01:20:c3:1b:24:75:98:ff:f9:91:
2d:b6:22:25:73:7c:0f:e5:fa:eb:dc:56:60:f9:e6:37:b9:fb:
98:10:4c:ea:e3:33:e8:73:31:b4:fd:b6:90:a9:85:37:8c:e3:
3c:80:3b:29:ae:60:4f:40:da:d0:db:b4:f6:c5:bf:34:be:79:
0a:af:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org