Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/a3a307caf309e07cca513b3bb705c4e0eecd016d.roa
File: a3a307caf309e07cca513b3bb705c4e0eecd016d.roa (raw, json)
Hash identifier: SzLn1+PL30vcY1h5i0YToBqyL1+NEwI/sASjomz2v0Q=
Subject key identifier: 4E:88:A6:7A:91:E0:9F:03:8C:C0:5A:2A:C4:8B:99:75:88:1D:68:E1
Certificate issuer: /CN=96da91711589e877379a24b4e7e81faaa3d64334
Certificate serial: 085888
Authority key identifier: CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96da91711589e877379a24b4e7e81faaa3d64334.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/a3a307caf309e07cca513b3bb705c4e0eecd016d.roa
Signing time: Tue 04 Apr 2023 18:44:28 +0000
ROA not before: Wed 27 Apr 2022 03:00:00 +0000
ROA not after: Thu 28 Apr 2044 03:00:00 +0000
asID: 269978
IP address blocks: 189.45.176.0/22 maxlen: 24
2803:ee0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546952 (0x85888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96da91711589e877379a24b4e7e81faaa3d64334
Validity
Not Before: Apr 27 03:00:00 2022 GMT
Not After : Apr 28 03:00:00 2044 GMT
Subject: CN=a3a307caf309e07cca513b3bb705c4e0eecd016d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:bb:94:e0:81:52:e1:bf:b3:21:7d:7e:48:
b9:7a:30:33:59:ce:d0:98:79:93:25:42:ef:69:3f:
4a:fe:5b:bf:29:03:5c:f7:6c:94:b6:aa:16:c6:3c:
e4:83:03:0f:30:de:ba:45:bb:a4:c3:6c:ed:03:e2:
c5:10:3e:8b:47:b4:88:9a:b5:e5:93:97:d4:f4:35:
77:a4:89:e3:82:71:c0:2b:3a:64:b6:a2:c5:a1:c3:
cc:c8:5f:46:50:06:ec:57:20:d5:4d:4b:a9:5f:87:
e2:a9:d0:3b:34:a0:6a:ca:45:ff:5e:c7:b3:4f:f9:
6c:af:dd:9a:f5:67:79:1b:c9:33:5c:2e:cd:57:b3:
8b:95:b8:35:9c:3d:e9:b7:5e:a2:7b:d9:b2:e3:68:
ff:8e:0b:67:8c:46:25:ee:e2:68:7a:9b:4d:6f:2b:
2f:e3:fb:4a:f8:6a:63:42:e9:d0:13:31:01:9a:a4:
16:d7:bd:9d:62:14:41:6c:d7:26:fc:7e:fb:84:9d:
e3:85:b6:46:5b:c8:54:d1:b4:b1:1e:05:a8:e3:d9:
50:a3:8e:8b:b5:fc:a2:a9:46:84:6e:ee:2f:b8:f4:
35:23:f0:52:45:39:ea:ba:5e:91:71:6d:9f:60:fb:
d3:b8:19:c2:48:65:5a:0d:9a:e3:e8:5d:93:d2:1c:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:88:A6:7A:91:E0:9F:03:8C:C0:5A:2A:C4:8B:99:75:88:1D:68:E1
X509v3 Authority Key Identifier:
keyid:CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96da91711589e877379a24b4e7e81faaa3d64334.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/a3a307caf309e07cca513b3bb705c4e0eecd016d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/96da91711589e877379a24b4e7e81faaa3d64334.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.176.0/22
IPv6:
2803:ee0::/32
Signature Algorithm: sha256WithRSAEncryption
71:28:6f:db:d1:f8:66:60:94:7a:ce:e5:55:55:0c:17:bb:3c:
02:71:2f:2f:b7:90:c0:c3:9b:98:42:50:ca:3a:1b:18:30:2e:
ee:8f:14:13:c8:d0:26:f9:ff:84:1f:37:db:bd:bf:f6:50:9e:
05:7e:2b:1c:57:c1:e2:f9:32:53:70:85:27:4e:d1:6f:6c:fa:
de:f0:bb:99:2d:dd:76:b4:3c:8e:8b:98:ad:d1:84:e7:fa:6b:
67:d0:b4:13:96:33:52:7a:29:0f:ce:3f:f9:69:29:ff:9d:2c:
c6:bb:18:14:02:6d:02:93:d0:13:ae:c6:cb:2b:92:c0:fe:bd:
85:2e:e7:54:ab:b2:5d:b5:1e:e5:80:60:12:1b:77:1a:f3:71:
33:d8:06:8b:4e:ac:40:7a:0e:66:19:a8:5b:13:ff:bd:b9:7d:
87:1e:57:35:1f:10:d4:d2:c5:ec:a0:f7:48:8a:10:81:dd:6d:
be:15:7e:f8:41:93:dc:9a:eb:46:09:d3:bc:76:a3:3c:8f:88:
a0:ce:05:c4:c7:8b:74:bd:6e:44:6c:b0:05:31:ef:da:d5:a5:
80:6c:cc:01:63:de:39:53:f1:9c:8f:8a:4c:89:e8:90:3d:5e:
b7:1f:24:32:29:4f:e9:74:fe:be:9d:a2:b0:d1:58:96:ba:64:
67:b5:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:00:47 2025 by rpki-client