Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/9c9b35bf3f4768d42fa3e3dc200d47fd3eafe6d6.roa
File: 9c9b35bf3f4768d42fa3e3dc200d47fd3eafe6d6.roa (raw, json)
Hash identifier: aeWq9+j971s5zY9c8qm4uFkeAe3mxqUyegLnvrLhejE=
Subject key identifier: ED:38:04:B6:FB:47:B5:05:2B:0D:18:AC:17:56:EA:99:C6:EF:04:DA
Certificate issuer: /CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
Certificate serial: 28FE36
Authority key identifier: F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/9c9b35bf3f4768d42fa3e3dc200d47fd3eafe6d6.roa
Signing time: Thu 04 Apr 2024 17:20:49 +0000
ROA not before: Thu 04 Apr 2024 17:20:48 +0000
ROA not after: Sat 04 Apr 2026 17:20:48 +0000
asID: 266698
IP address blocks: 45.229.73.0/24 maxlen: 24
45.230.33.0/24 maxlen: 24
2803:4d20:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2686518 (0x28fe36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
Validity
Not Before: Apr 4 17:20:48 2024 GMT
Not After : Apr 4 17:20:48 2026 GMT
Subject: CN=9c9b35bf3f4768d42fa3e3dc200d47fd3eafe6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:81:e6:ac:31:09:18:49:42:a3:2c:23:2a:84:
e5:b9:1c:55:03:e2:c2:10:58:ab:1c:7e:20:10:f6:
a3:5d:7e:be:4d:15:8c:b0:ab:40:91:8c:10:62:e8:
20:ed:6f:3b:b4:4f:31:9a:b8:38:aa:49:6d:55:1c:
8a:d4:07:76:79:77:e6:e5:7c:bd:7e:5e:5f:e0:01:
5b:4b:5f:4a:24:33:be:58:ed:e8:2a:bf:76:07:e2:
f2:80:f9:8c:7d:e2:d8:6d:21:29:72:ce:30:b4:6c:
55:3a:ff:81:b4:b0:58:e0:5d:b0:0e:0a:e5:48:9d:
b8:df:cf:41:76:d2:88:f1:eb:68:26:27:82:1d:01:
c4:c7:f0:89:8f:fc:63:f8:62:34:7c:17:8c:6a:f6:
43:03:60:90:03:1c:d3:bd:cd:f5:20:07:fd:6c:d8:
7d:41:7f:da:ca:af:77:c6:4a:f8:6a:d4:f9:9c:67:
15:f8:c8:21:c5:ba:49:23:a5:30:6e:71:7c:f1:26:
d1:a9:2d:0c:10:f1:36:02:6c:00:81:b1:3f:18:52:
44:e0:8e:5b:b9:44:55:0c:1d:ed:64:c6:f0:2f:fd:
d0:85:dc:55:cc:8c:7e:bb:30:20:83:a6:1b:dd:4f:
0e:71:72:65:35:6b:18:90:5c:d5:dd:1c:0d:01:c0:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:38:04:B6:FB:47:B5:05:2B:0D:18:AC:17:56:EA:99:C6:EF:04:DA
X509v3 Authority Key Identifier:
keyid:F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/9c9b35bf3f4768d42fa3e3dc200d47fd3eafe6d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/7f0c6ca567a621ac3630c71d89a326071ce724c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.73.0/24
45.230.33.0/24
IPv6:
2803:4d20:2::/48
Signature Algorithm: sha256WithRSAEncryption
1c:32:b9:00:c2:0a:91:f8:3e:1f:e7:ce:ad:71:e9:88:32:60:
02:60:9b:82:69:39:b3:77:c2:39:4c:73:bf:54:14:51:e3:fb:
0a:ec:09:f7:ee:44:4a:fe:e9:57:17:f9:6a:99:82:c0:61:0e:
e4:0c:9c:f6:81:87:f6:9b:7e:1a:4a:bf:e4:2e:72:2a:12:29:
f9:8c:e4:b7:8b:d3:2f:9d:81:3c:63:78:56:e6:a2:a8:c5:76:
b2:5b:cc:00:94:97:b9:06:0b:a9:3b:9e:2a:ef:9f:cb:c3:10:
f3:7e:00:9f:25:f6:6e:5c:78:b9:d3:a1:61:c9:c8:2a:d5:61:
cd:90:e5:b2:4d:65:64:b2:e7:7f:6a:0b:27:19:3d:20:1b:77:
df:e1:b3:d2:63:bc:b5:2c:68:79:a9:e6:11:69:96:c0:73:33:
ff:bf:cf:a4:d7:28:22:c8:68:d9:85:f1:74:ad:0a:e2:54:9c:
c8:c6:9b:d0:65:52:e9:16:02:ad:56:6b:89:af:32:68:fd:20:
77:61:33:74:4c:7b:9a:99:e5:2a:17:f8:7e:3e:c2:6a:5f:8c:
73:ef:38:8b:8f:7e:45:80:80:26:a2:8b:7d:d5:d7:65:3d:53:
f2:2a:63:14:f5:26:0c:3b:7f:c8:f8:aa:ad:bd:e9:17:4d:6f:
5b:39:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org