Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/6a65172d185a92fb8b2218aab157241eeb00887d.roa
File: 6a65172d185a92fb8b2218aab157241eeb00887d.roa (raw, json)
Hash identifier: uK+ZXhJrNfg9ZG7vxJT+RahPnG+Pt2Zx4vx//9ZwhZs=
Subject key identifier: 8F:6A:B8:86:9B:79:D2:2E:28:D9:EE:08:96:56:66:10:4F:6A:43:1A
Certificate issuer: /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial: 199961
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/6a65172d185a92fb8b2218aab157241eeb00887d.roa
Signing time: Wed 31 May 2023 20:13:44 +0000
ROA not before: Tue 30 May 2023 20:13:44 +0000
ROA not after: Sat 31 May 2025 20:13:44 +0000
asID: 266684
IP address blocks: 45.228.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1677665 (0x199961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
Validity
Not Before: May 30 20:13:44 2023 GMT
Not After : May 31 20:13:44 2025 GMT
Subject: CN=6a65172d185a92fb8b2218aab157241eeb00887d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:d6:e5:a8:a7:7a:ef:97:c4:b8:e5:d1:3d:
0f:ed:6d:e8:05:9c:49:7f:55:d0:02:c5:60:b2:ae:
a4:f3:e5:7f:1d:ef:57:a4:92:5b:55:07:04:f6:34:
85:9e:ec:a2:e3:6d:7e:32:c7:bf:5b:77:a6:28:8a:
eb:2a:72:75:b9:db:4e:82:f0:e0:1e:5d:b7:a1:e1:
ee:87:ba:be:ee:80:1e:13:af:5f:cd:1b:df:8b:23:
02:e8:b0:60:02:f8:89:2f:e9:14:36:ef:4f:ae:0b:
5d:e2:a4:d4:64:aa:bd:ed:a5:fa:f5:69:5e:69:cb:
0c:95:1e:5f:9c:42:61:b1:35:66:09:f9:13:f1:2d:
4f:b8:a9:25:a4:ac:b5:5c:01:13:04:61:c5:cc:d4:
06:0b:48:77:4c:ce:b6:03:21:03:f9:78:87:00:52:
65:68:fe:c7:62:7e:f2:5a:8f:04:db:6d:3e:9f:2c:
78:81:e6:17:c1:e8:f9:7b:e9:83:a8:20:52:e2:7b:
74:fa:88:e6:3f:87:d5:f7:03:ba:ac:97:18:99:b6:
84:3a:df:b1:4f:95:45:61:db:d7:07:c1:41:95:98:
dd:4c:f9:52:89:9f:8e:43:56:08:01:05:18:a0:79:
ab:d1:1c:c7:cc:72:2f:56:09:3f:b1:7a:86:25:0d:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6A:B8:86:9B:79:D2:2E:28:D9:EE:08:96:56:66:10:4F:6A:43:1A
X509v3 Authority Key Identifier:
keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/6a65172d185a92fb8b2218aab157241eeb00887d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.223.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7a:e8:5c:b6:96:ca:98:a2:da:29:1d:d7:1a:be:35:e1:6f:
f2:9e:35:0f:58:68:07:79:6f:df:78:5f:86:55:0f:23:ab:68:
04:5a:e2:b3:fd:38:98:55:6f:9f:02:3d:7e:ab:bf:6b:ae:1d:
82:de:1d:1d:95:b0:60:46:97:88:74:ca:25:29:2a:38:b1:2c:
08:bc:5e:d4:89:20:25:4d:8f:b3:ec:93:ee:19:77:a0:6f:15:
72:72:8e:81:ee:6e:e8:74:7d:25:d0:fa:30:e9:3c:c5:5b:c4:
9c:08:cd:e5:7e:39:6f:cb:77:0b:e6:ed:a0:1c:fa:23:e1:5e:
ac:84:09:ff:d8:1c:eb:f5:04:6c:ff:54:ba:23:38:1a:67:6f:
f8:2b:4b:2a:95:5f:45:5d:77:cc:ae:c7:8b:e8:1b:ad:87:93:
21:99:6c:50:11:27:bb:fb:a7:be:b1:4c:3c:e4:ea:ef:e7:3a:
6d:12:71:b2:b9:5c:08:26:1e:13:38:2a:e3:34:45:00:f9:21:
6a:c9:58:5e:82:30:3c:66:d0:3b:52:1b:bc:13:e4:c1:81:50:
12:b8:9d:70:df:41:8c:8a:67:2f:3b:04:17:c3:57:a5:b3:ba:
f4:af:69:98:72:cb:31:93:94:f5:d6:e1:0c:e6:46:e5:d0:78:
2e:e0:7b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org