Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a5c5dd02-dbae-4dd6-8847-568b666c48f9/40a287a433cf09bacd80bddaeb34dbe17e828766.roa
File: 40a287a433cf09bacd80bddaeb34dbe17e828766.roa (raw, json)
Hash identifier: e+miPAvJfqh+z9+Ao3FZJXOpPRAoHjHaQ2WonGHQYmg=
Subject key identifier: AA:5B:2E:06:6A:D6:79:6D:A3:7C:31:5D:4E:D7:CE:99:FA:BF:9A:B7
Certificate issuer: /CN=d49d1779d87f6d8672b75b0322239640861b2611
Certificate serial: 0BBCBA
Authority key identifier: 85:60:1B:70:90:D5:50:FB:46:81:98:C8:0F:7B:98:7E:38:79:88:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d49d1779d87f6d8672b75b0322239640861b2611.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a5c5dd02-dbae-4dd6-8847-568b666c48f9/40a287a433cf09bacd80bddaeb34dbe17e828766.roa
Signing time: Wed 06 Sep 2023 18:57:47 +0000
ROA not before: Tue 05 Sep 2023 18:57:47 +0000
ROA not after: Sat 06 Sep 2025 18:57:47 +0000
asID: 265827
IP address blocks: 45.71.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769210 (0xbbcba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49d1779d87f6d8672b75b0322239640861b2611
Validity
Not Before: Sep 5 18:57:47 2023 GMT
Not After : Sep 6 18:57:47 2025 GMT
Subject: CN=40a287a433cf09bacd80bddaeb34dbe17e828766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:f9:f5:9b:eb:27:fd:78:b1:b9:19:a0:9e:
e9:4a:29:5d:09:bf:d6:c8:c8:4b:f3:b2:a2:92:04:
4e:f2:ef:2e:eb:e3:31:6e:2c:6a:73:54:03:c5:47:
a1:c9:0c:8b:6d:12:3c:65:7c:22:de:1e:3a:80:f5:
0e:02:c5:8e:8d:ad:93:3d:2c:db:ff:92:3a:78:73:
ac:a1:49:88:0b:48:d4:01:69:bc:64:82:c3:12:a8:
55:b0:02:a6:db:98:25:92:40:64:14:7d:e1:de:b8:
56:51:4a:75:3d:f4:66:c6:05:13:85:67:e5:10:62:
c3:96:ef:97:98:55:9f:5f:38:00:fa:13:59:f2:80:
92:a4:96:3f:b2:ee:e3:47:3f:0c:a0:bb:29:c2:02:
29:50:96:0d:ca:bc:5f:69:ea:98:ca:76:07:1d:de:
b2:35:1e:a2:da:6b:60:3a:67:f7:fc:a8:53:38:2b:
b0:f3:14:28:82:0c:3d:bd:5b:f3:9d:b4:36:64:bf:
72:8f:84:c5:0f:3f:ab:b7:91:bf:2a:6a:f8:5a:bc:
92:f9:b3:28:bc:c5:7c:40:9d:0c:dd:19:b9:db:72:
ed:53:31:24:df:a1:04:14:c0:99:0d:4a:71:f8:67:
5a:01:64:1b:b7:5a:b7:72:97:cf:b4:ec:7c:91:d0:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5B:2E:06:6A:D6:79:6D:A3:7C:31:5D:4E:D7:CE:99:FA:BF:9A:B7
X509v3 Authority Key Identifier:
keyid:85:60:1B:70:90:D5:50:FB:46:81:98:C8:0F:7B:98:7E:38:79:88:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d49d1779d87f6d8672b75b0322239640861b2611.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a5c5dd02-dbae-4dd6-8847-568b666c48f9/40a287a433cf09bacd80bddaeb34dbe17e828766.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a5c5dd02-dbae-4dd6-8847-568b666c48f9/d49d1779d87f6d8672b75b0322239640861b2611.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.16.0/22
Signature Algorithm: sha256WithRSAEncryption
31:f6:44:85:06:06:1c:f4:72:0e:90:26:58:66:7b:37:52:bf:
dc:ba:e8:c0:94:c5:78:99:06:3f:c2:06:5c:19:af:98:51:b0:
28:1a:e6:14:eb:7f:5b:b4:0d:fa:aa:35:d7:6c:80:bb:60:70:
aa:0f:34:90:b9:6a:d7:d2:a9:8e:14:6e:49:ec:bb:cb:ec:10:
9b:70:d6:62:ae:9d:a6:45:21:f2:c6:16:58:cb:ae:8f:ab:d4:
ae:d9:21:02:cc:e5:f1:17:7d:25:4e:93:de:d5:ca:ff:20:bb:
bc:d6:77:be:20:dd:c6:b1:7f:58:6a:8a:f2:ec:8e:74:8c:9e:
6e:95:19:6a:1b:65:73:c9:0b:88:5d:87:c1:90:4e:0b:bc:bb:
3e:24:10:1c:f5:ce:10:bd:34:24:9f:68:6e:17:c6:6a:04:f6:
be:a8:7c:20:88:bc:71:38:24:32:f8:52:0c:70:70:e6:ef:e9:
1c:0e:9e:e5:fa:a9:63:f7:2c:a9:b3:06:2d:0b:8a:e3:54:66:
58:7c:33:ea:b6:0e:d2:f6:c9:55:1f:f2:56:0d:40:72:f5:8e:
35:1d:c1:1c:12:7b:82:c4:a3:a7:e4:44:a4:b2:30:b4:77:f9:
08:98:2b:59:c4:db:89:9a:61:26:38:73:35:ee:ac:43:ba:8f:
d1:70:98:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org