Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/822b500e27c052ccd1f871769731f0ac16e27471.roa
File: 822b500e27c052ccd1f871769731f0ac16e27471.roa (raw, json)
Hash identifier: EZKnI4TS5ex/ewgveDoHjKPfTAxQc2bBt2+wNMzE/LU=
Subject key identifier: A1:DC:C0:77:78:9C:C9:38:0A:B5:4B:8F:63:80:5E:A0:AA:AB:80:8C
Certificate issuer: /CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Certificate serial: 033BA2
Authority key identifier: A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/822b500e27c052ccd1f871769731f0ac16e27471.roa
Signing time: Thu 12 Jan 2023 16:38:11 +0000
ROA not before: Sun 08 Jan 2023 14:01:07 +0000
ROA not after: Fri 10 Jan 2025 14:01:07 +0000
asID: 265679
IP address blocks: 45.4.216.0/22 maxlen: 22
2803:c1c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211874 (0x33ba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Validity
Not Before: Jan 8 14:01:07 2023 GMT
Not After : Jan 10 14:01:07 2025 GMT
Subject: CN=822b500e27c052ccd1f871769731f0ac16e27471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:a5:ac:98:f3:2c:f6:9c:e7:e7:7a:4c:8c:
8a:04:30:d7:3a:a4:a0:bc:d2:e1:d6:02:a7:d6:e2:
14:b6:b4:db:f5:63:d2:46:fe:0b:87:0d:17:43:79:
89:c7:d0:bc:d0:a5:97:30:de:ee:37:ac:01:3d:90:
e6:a5:fb:1d:ec:ec:c5:25:4d:64:ef:9f:fa:83:d2:
ae:c5:74:0b:fa:02:fb:14:c1:b5:54:f5:fb:bc:6c:
db:fe:90:b1:37:4a:ae:4f:07:b6:20:10:9b:20:97:
c3:06:4a:76:93:80:6f:59:87:60:28:51:30:04:8f:
c3:a2:21:38:45:fd:45:d5:9e:62:bc:f1:21:55:67:
2b:58:ed:63:3b:51:ea:d0:ac:bd:e5:f6:35:12:cd:
66:f3:8c:e8:15:2c:4c:8e:be:84:d5:49:bf:be:d2:
45:7a:81:96:6f:9e:24:cd:40:47:92:76:9d:64:b1:
10:6a:9a:20:4a:d4:83:95:5e:6b:bb:95:6c:ba:9d:
1e:93:71:a6:f9:be:c8:4f:e7:99:90:3d:48:86:23:
97:09:ca:3d:45:5c:bc:a9:b3:8a:b0:66:79:3b:52:
90:47:63:76:8d:26:c8:ce:5e:42:b7:05:7f:bb:98:
e4:d8:03:9b:43:6c:53:8e:6d:f7:38:c1:69:2d:5d:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DC:C0:77:78:9C:C9:38:0A:B5:4B:8F:63:80:5E:A0:AA:AB:80:8C
X509v3 Authority Key Identifier:
keyid:A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/822b500e27c052ccd1f871769731f0ac16e27471.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.216.0/22
IPv6:
2803:c1c0::/32
Signature Algorithm: sha256WithRSAEncryption
a1:4d:c7:37:bd:9c:0e:f2:08:cd:0e:13:e6:63:6e:2f:f8:6e:
f9:07:c5:f3:cb:41:6d:54:06:ef:6b:9e:4e:24:ae:27:8b:3f:
f1:bb:c0:0d:46:10:96:72:6a:f1:1d:65:f5:39:af:92:18:9f:
92:31:21:b3:84:be:b2:d5:87:02:28:f3:ef:7b:dc:4d:5d:fb:
d2:8e:6c:01:71:b9:17:20:c9:21:5d:33:38:37:3b:20:e4:66:
91:72:0a:b3:51:ae:6c:c5:c3:19:af:57:52:76:2a:85:81:e9:
bd:f5:d4:b6:65:5e:ea:ff:6d:ce:d4:a2:ba:01:bf:62:1d:b7:
ae:64:29:3b:ea:16:28:ac:38:bd:ac:0f:bd:80:31:c1:3d:40:
72:f3:82:78:56:bb:52:25:37:ab:b1:35:e2:b4:a9:b5:c2:6b:
fe:f1:b3:de:38:14:c5:20:ff:6b:3f:fa:8c:74:e6:51:23:0d:
9e:ce:22:ac:2a:16:67:29:a0:fa:f8:7d:5d:9c:a1:a1:82:f7:
41:7f:5b:e7:fd:7d:fe:e7:c9:de:3c:01:2a:a0:bb:73:a5:a0:
df:8d:82:4c:c8:95:d4:46:96:03:78:73:49:e0:aa:57:cf:e0:
83:fb:10:b4:34:26:a3:23:68:57:a5:5b:bd:9b:7f:b5:25:9c:
d5:38:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org