Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/44909251171109e77f71e53a7b0cd890849e85e8.roa
File: 44909251171109e77f71e53a7b0cd890849e85e8.roa (raw, json)
Hash identifier: czIGew1sqXY3q0eRP9F4wqzkcCHfCx3hJVijWY6yJKE=
Subject key identifier: AB:76:DA:61:B3:D2:2E:83:3A:80:02:58:28:B5:FC:94:6D:CF:39:9E
Certificate issuer: /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial: 23BD75
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/44909251171109e77f71e53a7b0cd890849e85e8.roa
Signing time: Mon 25 Sep 2023 15:28:16 +0000
ROA not before: Sun 24 Sep 2023 15:28:11 +0000
ROA not after: Thu 25 Sep 2025 15:28:11 +0000
asID: 20312
IP address blocks: 150.188.0.0/15 maxlen: 24
150.186.0.0/15 maxlen: 19
150.185.0.0/16 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342261 (0x23bd75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
Validity
Not Before: Sep 24 15:28:11 2023 GMT
Not After : Sep 25 15:28:11 2025 GMT
Subject: CN=44909251171109e77f71e53a7b0cd890849e85e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:65:57:67:00:68:42:ef:a4:98:05:f3:f2:
10:72:16:4a:a1:b7:7c:69:75:0b:8a:35:da:36:f7:
52:e6:c7:7c:bc:fc:ec:77:f0:e1:ed:21:3e:d8:55:
a8:df:16:14:10:f5:61:52:4e:50:e4:a4:2e:6c:29:
2a:fb:95:91:13:dc:e3:e7:1b:21:6d:f3:3b:11:91:
b4:76:78:d1:48:0e:74:d0:96:4f:6e:b7:b6:3e:38:
77:99:25:8b:a6:08:5e:7e:f1:00:be:1a:ae:6d:1a:
43:0c:f0:92:fd:a9:be:c6:26:18:b8:94:0a:42:3d:
7f:89:6a:71:e8:c0:13:b6:c1:75:b3:32:89:86:6d:
fb:c6:3d:68:cb:81:c9:4a:23:7a:51:57:aa:1a:b6:
6e:e7:ca:69:35:73:a6:3c:68:a6:1b:20:01:c7:ca:
4e:a7:c9:82:02:ad:b9:7f:f1:a3:29:76:ac:47:a3:
74:3f:ba:05:7d:98:ad:ba:f0:e5:fe:e0:d2:5b:8d:
11:13:9c:01:e6:8b:3c:9d:0f:b7:e6:cc:da:f9:7e:
7e:d3:59:41:87:27:64:5f:52:db:1d:64:75:26:d4:
ee:21:6f:f9:cc:36:9c:ba:41:f9:b5:08:2a:95:f7:
5c:9e:ca:0b:dd:f6:c9:76:b2:f3:88:cd:df:d2:5a:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:76:DA:61:B3:D2:2E:83:3A:80:02:58:28:B5:FC:94:6D:CF:39:9E
X509v3 Authority Key Identifier:
keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/44909251171109e77f71e53a7b0cd890849e85e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.185.0.0-150.189.255.255
Signature Algorithm: sha256WithRSAEncryption
78:68:11:4e:06:88:3f:13:ad:0a:07:1d:f9:f3:2b:79:0a:6b:
32:0a:5f:4a:7b:50:dc:a5:e2:5c:20:50:2f:64:94:ba:c9:67:
66:13:c9:8b:61:46:d2:8b:59:1e:60:cb:2b:8a:c3:c4:ed:19:
8e:08:6b:b8:d9:68:52:f4:bf:4f:3c:a0:88:b3:97:9d:7d:da:
0f:94:9d:67:a4:d3:0b:53:4f:6f:84:e2:20:c8:db:7c:76:f7:
33:13:35:ed:c9:08:b5:06:d1:5b:00:98:74:ea:fe:f7:dc:4d:
3e:97:38:81:5c:41:c9:bb:79:d1:b3:09:a8:19:61:8b:18:bc:
7e:bf:d0:cb:2a:53:37:4e:6f:c9:1b:80:61:c2:67:ed:d6:f6:
33:a8:6b:25:7e:2e:45:7b:1b:63:90:f4:81:89:23:6a:5b:70:
67:7f:84:81:a1:7d:46:67:a4:a0:69:f9:5c:08:ce:e6:67:33:
a0:d9:54:76:36:54:08:fb:3c:93:e6:eb:ac:f6:2a:34:09:f3:
dd:f1:bc:01:c9:84:b0:94:07:5f:ee:89:65:a1:47:28:7b:8e:
74:76:82:cd:9d:00:83:60:c2:c0:37:52:e5:c5:7f:18:90:f0:
81:76:30:db:3d:62:06:62:dd:e6:fd:ae:7e:c6:34:3c:5b:2e:
e9:e2:6d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:14:36 2025 by rpki-client