Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/23e76051685d7a054014b7e323f15b43efe4cf53.roa
File: 23e76051685d7a054014b7e323f15b43efe4cf53.roa (raw, json)
Hash identifier: CmMyIZRfgL+miWCZSGllop0Ay3x+hcPfvVj3bX1L69k=
Subject key identifier: E5:5A:5F:B4:38:EB:B3:64:BE:9E:C1:27:C3:01:8F:50:B1:6C:F7:4B
Certificate issuer: /CN=9fe1b4ced70a812ae4cb948c754ed69ba0affff5
Certificate serial: 0521AD
Authority key identifier: D8:90:64:ED:82:CC:6C:14:3C:BA:DB:B9:54:3D:CD:41:D9:0C:8B:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/23e76051685d7a054014b7e323f15b43efe4cf53.roa
Signing time: Sat 04 Nov 2023 02:11:20 +0000
ROA not before: Sat 04 Nov 2023 02:11:19 +0000
ROA not after: Tue 04 Nov 2025 02:11:19 +0000
asID: 270096
IP address blocks: 170.245.132.0/23 maxlen: 23
170.245.132.0/24 maxlen: 24
170.245.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336301 (0x521ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe1b4ced70a812ae4cb948c754ed69ba0affff5
Validity
Not Before: Nov 4 02:11:19 2023 GMT
Not After : Nov 4 02:11:19 2025 GMT
Subject: CN=23e76051685d7a054014b7e323f15b43efe4cf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:c9:7d:39:78:c0:e0:9e:1a:32:97:41:bb:
65:cb:5a:47:45:ad:9b:27:03:0a:b6:73:65:7e:60:
66:6d:05:74:71:0b:13:4c:3f:03:fc:53:dc:3a:95:
6c:51:da:90:1e:be:2f:b1:ca:e8:7f:78:d5:2c:f1:
bb:30:14:36:56:c0:db:6e:aa:80:64:f2:dd:80:aa:
09:a7:f8:3e:ea:67:6b:de:b9:33:48:53:13:a7:25:
40:19:2d:11:81:f0:33:bb:04:ab:9e:6e:ef:1c:f4:
4c:cd:c1:47:4f:33:8f:71:5c:c2:fb:20:55:ca:f5:
02:60:e5:5f:b2:58:66:e7:56:ce:af:56:f3:7b:cd:
a0:26:d6:a3:41:45:6d:16:fd:98:24:6f:d6:fa:2d:
2f:11:b3:19:88:94:c1:64:b4:46:1e:05:1d:9e:85:
c2:56:e7:ff:77:71:d2:0c:8c:87:6a:2d:6e:39:d7:
6c:27:81:e5:f7:24:0a:20:a1:00:7c:c5:6e:ae:da:
e3:b4:75:9e:f4:f9:f5:b6:06:6a:16:6d:89:de:bb:
f3:d4:28:3a:c0:50:a7:d9:8e:a3:17:f0:f9:d3:75:
e2:24:18:99:3e:a6:67:c7:c9:bc:d0:dc:1d:47:f7:
89:bd:11:46:15:b1:19:4a:b8:de:03:c6:1b:f0:f3:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5A:5F:B4:38:EB:B3:64:BE:9E:C1:27:C3:01:8F:50:B1:6C:F7:4B
X509v3 Authority Key Identifier:
keyid:D8:90:64:ED:82:CC:6C:14:3C:BA:DB:B9:54:3D:CD:41:D9:0C:8B:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/23e76051685d7a054014b7e323f15b43efe4cf53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.132.0/23
Signature Algorithm: sha256WithRSAEncryption
83:75:05:7d:f0:27:d8:05:d4:0c:68:17:af:fc:68:fb:23:e7:
14:d7:25:47:36:44:7f:70:34:91:d9:e4:26:aa:34:29:44:e8:
67:85:6b:e3:d2:43:a6:cf:6b:c8:84:47:cb:bc:79:ac:dc:eb:
eb:1f:48:96:96:bc:cc:a9:42:d2:d8:68:fb:54:51:cd:dc:3a:
72:e8:d3:cb:dc:68:6b:76:e0:2b:6e:11:fb:3c:3e:a0:65:a1:
ad:c5:ad:67:20:ba:26:f7:3a:3a:d3:d2:98:20:98:16:39:47:
65:0d:cb:ea:3b:a1:c1:c8:e7:5c:36:d7:bb:38:85:7c:c7:ef:
ab:b9:d8:d3:48:08:b1:e2:d9:6f:7b:96:8f:b6:15:d4:32:35:
1b:09:40:17:e2:da:34:4d:26:8a:cd:b7:07:1d:40:b7:5e:8b:
80:2c:1a:27:94:ef:44:9b:99:72:15:69:e2:e2:c0:81:57:04:
38:37:1e:c8:c5:41:72:cc:dc:29:77:1d:c6:0d:50:db:1e:9b:
19:30:9c:07:b8:cd:f4:a1:36:6c:5f:5d:da:07:2a:69:44:94:
e2:be:1f:d5:82:e7:0d:f7:43:f2:c7:bf:78:06:0e:30:da:dc:
70:ff:a2:4e:2e:5d:94:e0:81:53:42:ea:cd:c5:b1:c4:b4:a7:
fb:fa:3d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org