Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/3cd44846e74eba024e3b25e12e8a3683a6ea7eea.roa
File: 3cd44846e74eba024e3b25e12e8a3683a6ea7eea.roa (raw, json)
Hash identifier: sW452JeZ3vMApPLLm3dC7Cn0b5X/ImxSViQnKAoZXFk=
Subject key identifier: 0B:D2:F1:D7:CB:5C:E3:DD:7C:64:95:15:19:00:5F:F2:6D:95:A0:EC
Certificate issuer: /CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4
Certificate serial: 0D9DCA
Authority key identifier: D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/3cd44846e74eba024e3b25e12e8a3683a6ea7eea.roa
Signing time: Thu 15 Apr 2021 13:15:03 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 61522
IP address blocks: 45.68.16.0/22 maxlen: 22
200.23.206.0/24 maxlen: 24
2801:14:9000::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892362 (0xd9dca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=3cd44846e74eba024e3b25e12e8a3683a6ea7eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:8b:d2:07:0f:0c:c2:da:0b:26:54:ee:d9:
90:d8:1d:a4:73:c1:7e:b7:c1:89:c4:33:78:2e:ef:
45:99:bd:d6:0d:e2:1c:d7:c7:8d:08:8b:16:0f:4a:
6c:24:02:06:e8:ec:74:0a:cf:25:e6:a7:df:25:bc:
f7:d2:6f:e0:ef:8a:50:1f:11:cd:0e:49:a6:1e:6f:
5a:c3:10:eb:9d:35:d5:e6:61:bf:b0:34:27:37:56:
ec:56:91:84:58:ca:88:4a:3e:9b:d7:61:17:fa:08:
46:4a:4a:5a:41:db:b3:a2:6a:71:4a:75:d4:b9:8a:
09:2c:d5:cd:e9:e5:ac:6c:4d:9a:e8:e9:f2:d4:ce:
72:9d:6d:b0:69:fa:e7:db:92:91:48:06:8a:71:3a:
65:ee:9a:fb:0d:5d:24:a6:24:1b:74:ad:57:e5:2d:
4c:9f:69:20:4b:a3:b9:14:ea:c2:8b:c0:97:3a:d8:
be:46:2b:9b:20:38:6e:2e:fb:e8:cb:9b:98:5a:da:
80:cf:95:f5:d0:b6:c7:d7:40:f2:2c:83:ac:bb:89:
08:73:e4:f4:69:b9:aa:12:e7:e3:70:d6:bb:af:df:
16:6a:ec:34:7e:f5:4d:9e:4a:d9:1f:b7:33:e2:81:
dd:20:dc:45:f5:12:8b:7e:21:00:f0:8a:67:67:c9:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:F1:D7:CB:5C:E3:DD:7C:64:95:15:19:00:5F:F2:6D:95:A0:EC
X509v3 Authority Key Identifier:
keyid:D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/3cd44846e74eba024e3b25e12e8a3683a6ea7eea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/f81aa2de9d81221fefa524fd694489ce8b67c8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.16.0/22
200.23.206.0/24
IPv6:
2801:14:9000::/64
Signature Algorithm: sha256WithRSAEncryption
3a:18:aa:60:41:6b:b5:3a:30:40:d5:e4:c1:6a:5f:58:8d:77:
61:05:f0:3a:2a:d8:14:cd:fd:a3:c5:cd:52:eb:59:1d:26:a4:
48:9b:19:64:fd:81:7d:80:f9:b2:8f:e8:fc:e9:bb:99:d2:fe:
dd:7d:a4:be:7e:b9:f7:6a:b6:3e:68:dd:67:58:e8:54:6a:a9:
9b:7d:1c:e3:a2:6c:6f:0b:96:2d:a3:d1:8e:4a:a9:0e:84:e3:
73:16:80:e6:53:ce:0f:eb:09:16:18:2c:b7:09:00:fb:5d:b4:
4d:e0:a3:05:3f:61:42:2b:14:7b:33:6b:30:13:f5:51:22:0a:
ce:e9:2f:3f:e8:61:49:39:f7:cf:47:28:61:71:a2:57:06:2a:
28:61:89:4f:eb:45:ae:ec:1c:03:f5:7b:86:70:2b:83:18:e7:
34:24:78:5f:04:fc:d8:00:6c:77:90:7f:fc:d9:d2:3e:db:7e:
f5:07:c0:f4:82:d0:73:ef:0b:8f:46:30:f3:48:4b:56:15:90:
71:45:c7:bb:48:f2:6b:49:c3:41:24:36:a8:a1:ae:4c:35:70:
88:f2:c4:7e:f0:20:fa:e2:24:07:28:95:a5:69:73:7e:a1:54:
cb:37:d6:e6:e0:c9:e1:21:97:f8:20:1c:1b:c7:3c:9b:38:3e:
51:ff:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org