Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/49159c097c4e081b8113085cfdbd9c2eaeab50e9.roa
File: 49159c097c4e081b8113085cfdbd9c2eaeab50e9.roa (raw, json)
Hash identifier: +sSAlGeF69kOqbIhmb2KPSw1obX/WgPpcWN/z6wi/yA=
Subject key identifier: 84:20:47:7A:8C:C6:64:C6:9B:7D:21:0D:FA:4A:99:12:F3:BB:37:33
Certificate issuer: /CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
Certificate serial: 091C13
Authority key identifier: 09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/49159c097c4e081b8113085cfdbd9c2eaeab50e9.roa
Signing time: Fri 21 Apr 2023 01:43:47 +0000
ROA not before: Thu 20 Apr 2023 01:43:47 +0000
ROA not after: Mon 21 Apr 2025 01:43:47 +0000
asID: 270143
IP address blocks: 45.7.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597011 (0x91c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
Validity
Not Before: Apr 20 01:43:47 2023 GMT
Not After : Apr 21 01:43:47 2025 GMT
Subject: CN=49159c097c4e081b8113085cfdbd9c2eaeab50e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:1f:57:27:0a:4d:25:6a:6d:f6:1f:03:67:
44:c9:02:ea:ac:6b:0c:3b:08:61:a8:4d:95:eb:49:
bb:9e:f8:5e:6b:94:67:4f:2e:28:7c:73:9d:32:3b:
98:e8:88:08:15:da:f5:cd:5e:c4:b7:3d:88:a1:a5:
d6:03:d9:65:e4:cf:26:a5:2f:2c:c2:db:56:e1:13:
10:16:65:91:3c:5d:b9:ee:c0:c9:28:d3:89:10:a8:
d1:c5:cf:0b:5d:77:7c:75:4c:e9:72:ff:e5:a7:a6:
61:6d:ea:76:42:d1:56:b8:2d:75:94:41:a6:f0:4b:
8d:19:2e:0a:2d:e9:a0:8e:56:83:e0:00:17:90:14:
19:43:ae:8b:37:25:50:2d:97:fe:16:89:db:10:fe:
1d:df:47:43:9e:dd:4f:e3:92:47:59:0e:9c:6e:82:
2e:4b:5b:c0:dd:b8:55:f5:62:fb:5e:6b:a3:48:41:
3c:55:4c:4c:f9:ca:cd:72:02:88:d4:ce:c4:76:ca:
50:39:cb:1c:9d:f0:ec:a2:41:e9:f5:fe:4e:2d:86:
3b:4f:ad:e1:50:a4:7f:40:98:ec:5d:9f:7f:f6:7d:
38:3e:6c:16:3f:98:45:8a:b2:78:25:44:de:3b:88:
b5:60:33:93:79:89:24:23:9d:94:47:50:36:70:0b:
2d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:20:47:7A:8C:C6:64:C6:9B:7D:21:0D:FA:4A:99:12:F3:BB:37:33
X509v3 Authority Key Identifier:
keyid:09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/49159c097c4e081b8113085cfdbd9c2eaeab50e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.64.0/22
Signature Algorithm: sha256WithRSAEncryption
50:8a:5a:81:ff:db:4d:bd:eb:5e:ed:e7:9f:1d:72:cb:f0:98:
ef:66:c5:41:22:3b:9e:15:c4:92:d0:50:cb:3b:05:6f:f2:84:
8e:59:bb:9f:82:72:87:3e:38:b2:b4:4a:00:86:b8:a9:c4:44:
75:8b:34:97:22:da:b6:bd:d2:a2:57:9b:5e:3b:4a:41:ed:cd:
50:db:e3:59:fe:da:ee:91:eb:ba:d3:94:9f:4e:5d:83:a2:31:
90:f8:b1:54:fd:99:f7:e9:b3:6f:99:65:e4:7a:21:05:0f:09:
4b:52:d2:35:6a:f9:e4:bb:c2:68:cf:15:1b:ac:e3:ab:34:f8:
e2:4d:5c:31:02:57:23:dc:09:01:14:b9:83:40:18:70:53:6f:
69:16:df:ec:59:1f:50:41:e0:6a:b4:1d:3f:89:b3:71:4d:83:
86:49:53:af:7d:65:90:96:37:0e:0e:41:15:12:a5:04:b5:80:
8a:24:7e:d1:b0:bd:5c:8f:4d:4c:9a:0b:1e:cb:5b:57:ec:6e:
64:96:79:5a:ff:38:ca:13:1d:a3:a6:b5:ed:49:7c:71:ce:24:
13:88:19:24:b9:5e:0b:ef:bc:3e:19:bb:8b:c2:80:de:5e:83:
b7:8e:4e:57:3f:7a:ce:43:5f:2d:19:14:ae:8c:3b:68:4f:9d:
6e:41:b7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org