Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/9268b7fc517921ef77f9abfd0a970a24a4d52fa4.roa
File: 9268b7fc517921ef77f9abfd0a970a24a4d52fa4.roa (raw, json)
Hash identifier: PIS4rGDz82lAd+OK5aI3xsw/cZekqwhlDUZz3bVfQAo=
Subject key identifier: F0:2B:0D:A9:26:9A:6A:95:54:79:00:E9:03:EC:FB:DE:3F:46:D4:5B
Certificate issuer: /CN=ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8
Certificate serial: 22E7F6
Authority key identifier: 63:D0:1E:66:9E:CA:C8:56:7B:7E:A3:8D:12:F2:9E:1E:E4:2E:30:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/9268b7fc517921ef77f9abfd0a970a24a4d52fa4.roa
Signing time: Fri 27 Oct 2023 14:02:51 +0000
ROA not before: Fri 27 Oct 2023 14:02:51 +0000
ROA not after: Mon 27 Oct 2025 14:02:51 +0000
asID: 269833
IP address blocks: 45.188.20.0/22 maxlen: 22
2803:cf60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2287606 (0x22e7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8
Validity
Not Before: Oct 27 14:02:51 2023 GMT
Not After : Oct 27 14:02:51 2025 GMT
Subject: CN=9268b7fc517921ef77f9abfd0a970a24a4d52fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:0c:30:42:26:0c:96:6f:3c:e5:59:95:6a:
34:78:87:e2:95:7d:41:5d:05:45:79:f1:59:67:4f:
00:50:64:90:c6:34:b9:53:85:e6:d8:46:88:31:a6:
e8:67:63:f3:64:76:c2:de:e3:dc:69:11:e7:8c:35:
84:f3:43:aa:34:d8:90:20:23:dd:2e:26:11:34:67:
7c:66:eb:bd:57:67:df:2a:df:a2:c6:e5:80:3a:20:
f9:66:78:d4:20:2b:2b:40:5b:52:5c:16:64:62:8c:
92:8c:e0:b0:e1:d1:16:f2:77:df:76:34:fa:64:09:
52:55:98:22:74:14:be:06:8e:fe:e5:5f:c5:9d:32:
1c:57:9a:7c:23:b7:b5:4e:32:75:cf:1f:26:95:67:
33:48:4c:c8:e5:1c:b7:0e:cf:2d:2c:eb:d7:ba:35:
9a:ab:5a:bd:9d:20:c8:4e:c0:7b:47:5b:ca:24:0e:
b0:97:55:e7:6a:23:f1:9f:53:cf:b6:9c:44:eb:88:
64:44:3f:f6:dd:3a:14:d6:ba:f9:fa:7d:e6:4d:95:
b9:e5:a1:8f:0a:9b:5d:92:fc:de:c5:2a:39:9c:3c:
6e:0e:13:e8:8e:d1:e5:5c:8b:61:ab:26:8f:3a:b0:
6a:a0:fe:03:4a:da:c5:74:17:b7:21:8d:97:f5:5b:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2B:0D:A9:26:9A:6A:95:54:79:00:E9:03:EC:FB:DE:3F:46:D4:5B
X509v3 Authority Key Identifier:
keyid:63:D0:1E:66:9E:CA:C8:56:7B:7E:A3:8D:12:F2:9E:1E:E4:2E:30:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/9268b7fc517921ef77f9abfd0a970a24a4d52fa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.20.0/22
IPv6:
2803:cf60::/32
Signature Algorithm: sha256WithRSAEncryption
08:71:2b:a3:a6:ca:44:47:ed:c3:22:99:39:16:84:5b:3e:01:
9e:0d:4e:dc:13:67:ef:fc:db:d7:bc:22:34:ae:05:06:4d:1b:
86:bf:fa:16:1e:d6:af:30:95:01:9d:85:d5:43:fa:1b:7b:e3:
d8:b1:e0:ee:c2:63:b8:75:5f:ad:5a:1f:52:1b:4c:e2:4b:21:
af:16:8e:a6:44:f4:c5:67:53:59:8d:8e:99:58:49:24:55:d2:
a8:a3:14:bd:a4:9a:3b:5a:75:e0:07:e8:71:54:2a:4e:24:4c:
ae:15:80:dc:30:65:c1:d2:a4:c0:f1:bb:a2:2b:78:d4:19:c8:
62:5a:6e:a3:86:5f:d8:42:cb:de:29:df:56:bf:93:3f:4c:9b:
65:76:7b:cd:9c:0d:e9:35:8e:88:db:4f:b1:70:66:c6:1f:f1:
06:70:4d:12:cf:28:9f:04:21:76:fa:42:5b:92:6f:69:6c:a5:
32:2d:fa:1f:c6:05:3e:8d:1b:bf:6d:53:a8:5f:e6:e5:fc:fe:
e2:bb:c2:ab:b4:51:28:c1:4b:e2:96:53:dd:dd:7c:d8:b0:d5:
e5:9a:88:c4:eb:9f:1c:03:f6:c0:c5:11:5e:fb:f7:c5:0a:0b:
15:62:2a:86:9b:a6:15:67:ed:e6:3e:fc:7f:c6:d0:a7:a5:f5:
38:cc:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:58:39 2025 by rpki-client