Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/df021d3a639e2a11c88c670153492d37ea5530cf.roa
File: df021d3a639e2a11c88c670153492d37ea5530cf.roa (raw, json)
Hash identifier: 0tRy0XlYTYjRtOMd9qgR7FYn64UcjZVWhq+lZkuxbBg=
Subject key identifier: 93:0B:E5:37:CD:9C:3C:89:88:7E:C8:BD:1E:68:79:9C:B1:CF:39:5B
Certificate issuer: /CN=5e5ceaadf571a00b99a9944ca5eeab8a563da150
Certificate serial: 24AFBB
Authority key identifier: 37:6E:61:7C:20:79:1B:E0:13:01:AE:88:A8:5A:F7:82:38:4F:ED:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e5ceaadf571a00b99a9944ca5eeab8a563da150.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/df021d3a639e2a11c88c670153492d37ea5530cf.roa
Signing time: Tue 31 Oct 2023 21:38:03 +0000
ROA not before: Tue 31 Oct 2023 21:38:03 +0000
ROA not after: Fri 31 Oct 2025 21:38:03 +0000
asID: 266814
IP address blocks: 45.237.44.0/22 maxlen: 24
2803:b8a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2404283 (0x24afbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5ceaadf571a00b99a9944ca5eeab8a563da150
Validity
Not Before: Oct 31 21:38:03 2023 GMT
Not After : Oct 31 21:38:03 2025 GMT
Subject: CN=df021d3a639e2a11c88c670153492d37ea5530cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:82:9f:84:5d:f1:e8:67:e7:d3:07:6e:f4:
c8:0a:6e:80:75:48:35:b0:4d:ff:c6:45:20:4a:f1:
81:57:a9:0e:6b:7d:ce:9c:65:5a:49:92:b4:a7:6c:
32:d0:92:ef:c6:5f:b1:a2:30:70:5e:ff:a3:15:c7:
9b:d4:18:f7:4e:18:ba:1b:31:cd:bf:c0:ef:df:50:
be:f8:b7:de:ad:93:09:da:d5:47:d4:2a:17:aa:32:
3b:3d:f2:1f:41:e9:3e:ef:c9:46:b5:fa:60:f5:a4:
4f:5a:ff:c1:19:4f:f6:32:ec:c3:94:e8:ab:17:e3:
c0:8f:46:50:56:0c:62:3f:c3:fa:50:cc:3f:68:b4:
6a:b2:c6:ad:b3:32:8e:26:59:88:c1:07:0e:f7:7a:
47:93:d2:4b:1e:f6:9b:79:31:8d:68:a7:3d:5e:d4:
4d:99:c3:16:0c:48:b7:48:34:a4:f7:8f:49:12:09:
f8:4b:b7:d4:bd:96:88:3b:de:b7:f6:1c:c9:8e:2f:
32:01:85:88:8a:30:f7:d0:ad:14:3c:57:ec:f9:af:
58:ad:a0:25:db:a6:a6:b8:af:39:94:80:c0:d3:be:
cb:b5:da:c6:38:0d:b7:89:57:1b:59:1d:3d:45:37:
41:da:8b:bd:e8:7a:2e:ff:ea:6a:bb:3f:d3:ac:51:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0B:E5:37:CD:9C:3C:89:88:7E:C8:BD:1E:68:79:9C:B1:CF:39:5B
X509v3 Authority Key Identifier:
keyid:37:6E:61:7C:20:79:1B:E0:13:01:AE:88:A8:5A:F7:82:38:4F:ED:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e5ceaadf571a00b99a9944ca5eeab8a563da150.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/df021d3a639e2a11c88c670153492d37ea5530cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/5e5ceaadf571a00b99a9944ca5eeab8a563da150.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.44.0/22
IPv6:
2803:b8a0::/32
Signature Algorithm: sha256WithRSAEncryption
04:ae:3a:b3:96:9b:93:41:a3:ea:a3:1f:d2:1b:3c:25:e5:5a:
19:c2:1b:5b:91:8c:76:b6:b3:51:c9:33:fb:d6:32:8f:b6:48:
62:ed:d2:53:1d:7c:8e:ff:75:53:bf:65:00:e2:c7:ff:e7:39:
ed:26:ba:cd:33:81:ce:c7:66:cb:1f:9f:fb:f0:53:9c:d5:dc:
66:e2:9e:f9:c8:76:18:26:ab:f3:a9:f4:d8:ac:0d:d2:83:8f:
fd:4c:c3:f9:5f:dc:d5:b7:e1:c2:ce:38:cf:f3:51:f9:0f:a6:
75:fc:d7:58:d3:56:4f:60:bb:f0:23:fa:b5:2d:d8:2e:fc:51:
f3:e8:4c:0e:b5:b4:68:4f:12:bb:cb:36:72:d0:2e:db:30:99:
10:c3:3b:b9:db:70:0a:82:1d:eb:db:48:70:ee:fe:e0:59:fa:
77:3f:f7:b4:af:39:5e:af:64:f4:83:41:55:98:f0:48:7b:55:
c7:2b:7a:a2:26:c4:c7:06:1d:93:b4:13:f7:dd:e6:76:71:f3:
dd:3f:c3:98:e1:86:59:ab:65:ae:aa:4d:33:c5:79:b6:8f:f5:
ee:bb:73:51:82:55:9c:c6:37:78:97:ab:96:73:16:7e:45:73:
b8:dc:0a:e6:a7:71:20:21:f9:33:a0:ca:d7:47:96:1a:96:44:
c2:37:dd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:39:21 2025 by rpki-client