Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/e23e6edabbd30b0e10cff7f0c564e619e36f92d7.roa
File: e23e6edabbd30b0e10cff7f0c564e619e36f92d7.roa (raw, json)
Hash identifier: GJBpr9WApUDvPmkiujR3ZX03ARoFB1qtrEc3QRObZPs=
Subject key identifier: D0:FA:5E:32:31:78:73:FD:83:B5:B4:E8:BB:00:38:05:EE:6E:C0:D3
Certificate issuer: /CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Certificate serial: 21CAF1
Authority key identifier: 71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/e23e6edabbd30b0e10cff7f0c564e619e36f92d7.roa
Signing time: Fri 16 Jun 2023 16:54:29 +0000
ROA not before: Thu 15 Jun 2023 16:54:29 +0000
ROA not after: Mon 16 Jun 2025 16:54:29 +0000
asID: 262186
IP address blocks: 45.65.136.0/22 maxlen: 22
2803:a5c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214641 (0x21caf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Validity
Not Before: Jun 15 16:54:29 2023 GMT
Not After : Jun 16 16:54:29 2025 GMT
Subject: CN=e23e6edabbd30b0e10cff7f0c564e619e36f92d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:7c:d1:c3:f8:fe:95:17:88:87:3d:49:56:
ab:43:a5:ee:cb:92:7b:cc:d4:8e:2d:6e:3e:bc:b4:
ed:8f:2e:49:8e:2e:34:d1:9f:da:b6:d6:2b:b0:71:
5c:04:43:b8:85:c8:a5:db:50:91:c8:cf:9a:91:51:
2a:26:21:6c:b7:6f:5b:00:c1:3d:24:45:d8:2c:cb:
95:c2:fa:a8:bb:ff:9a:f4:9f:d9:bb:17:17:46:26:
ec:67:30:df:df:ef:1a:f8:53:e4:aa:1a:c1:6f:43:
96:7b:54:a9:aa:4d:1e:e8:05:1a:e2:a5:e4:3b:c3:
00:1f:00:52:1c:e0:ec:c3:f9:92:5c:a6:7e:0b:06:
40:23:9b:76:37:19:fb:e9:0b:b7:73:3e:65:5d:f8:
21:96:fd:fd:c1:cb:b1:e0:a0:02:07:d5:a4:9f:31:
38:ce:03:ee:5e:cc:ec:3b:92:2b:08:31:8a:b1:d6:
d2:2b:e1:93:e5:66:b1:60:fb:3c:2b:15:3e:b4:17:
44:77:cf:40:3f:6f:00:06:24:87:24:bf:3f:ac:10:
68:cd:e2:f5:f2:d8:16:06:58:66:a6:32:e8:9e:45:
6b:bb:31:27:4b:1e:8e:84:81:55:f7:f9:36:c1:0b:
9f:70:97:d9:95:f2:2a:d3:73:c8:b8:0c:71:04:6b:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:5E:32:31:78:73:FD:83:B5:B4:E8:BB:00:38:05:EE:6E:C0:D3
X509v3 Authority Key Identifier:
keyid:71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/e23e6edabbd30b0e10cff7f0c564e619e36f92d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.136.0/22
IPv6:
2803:a5c0::/32
Signature Algorithm: sha256WithRSAEncryption
02:4a:2b:9a:db:46:67:64:03:d5:13:15:e7:88:fb:08:b9:1b:
fa:42:95:be:92:42:5f:95:43:70:c0:d5:3c:02:7a:dd:b2:2b:
4b:7c:73:fa:20:5d:8a:6b:72:02:12:3c:71:2f:64:b9:18:4b:
d0:d4:d7:4a:50:ee:46:06:a6:9d:1e:20:3a:31:ee:a3:36:26:
cf:cc:48:36:94:47:d6:e5:2f:25:56:fd:b2:f2:cf:68:4d:bf:
71:81:f8:ff:0a:df:ea:f6:1c:35:1a:44:e6:f4:27:35:c2:81:
41:fb:53:ed:68:a9:88:10:0b:a2:88:32:ae:fa:a4:83:53:8c:
6a:c6:15:82:6a:d9:1c:fc:e4:18:b4:e5:8e:74:f6:5c:4d:39:
7e:cb:c4:43:32:0b:18:ec:cf:da:2e:24:84:05:c0:86:af:68:
0b:93:98:ff:4a:75:87:31:c7:dc:4e:75:30:b0:2f:d4:05:6d:
bb:9a:17:93:25:8b:93:76:76:d4:f1:ee:a0:d0:ee:2a:39:6b:
16:c3:09:6f:7c:9c:47:b6:e7:7e:df:7f:ac:d6:e4:07:1e:00:
c2:68:ee:be:5c:66:b1:dc:86:74:e8:b7:9c:a2:eb:2b:cd:f1:
3e:54:4b:66:f1:c2:ae:ca:26:fc:ac:44:3e:a8:01:84:7f:37:
63:e9:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:00:56 2025 by rpki-client