Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/8cfa8c59c303baa4417bf5a27021f260fcb2518c.roa
File: 8cfa8c59c303baa4417bf5a27021f260fcb2518c.roa (raw, json)
Hash identifier: YfL33FloatLr6NHndjPYUyaecjzmoueabbeM+4ZHc1A=
Subject key identifier: B4:D5:71:AD:AF:38:30:15:25:21:AE:23:0A:F7:72:AD:6B:08:D7:8F
Certificate issuer: /CN=de1d132dcee440b2c8e49412f22186fb39f7c848
Certificate serial: 021360
Authority key identifier: 4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/8cfa8c59c303baa4417bf5a27021f260fcb2518c.roa
Signing time: Sat 04 Feb 2023 19:04:53 +0000
ROA not before: Tue 08 Nov 2022 18:43:28 +0000
ROA not after: Mon 11 Nov 2024 18:43:28 +0000
asID: 267768
IP address blocks: 45.170.232.0/22 maxlen: 24
2803:bba0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136032 (0x21360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1d132dcee440b2c8e49412f22186fb39f7c848
Validity
Not Before: Nov 8 18:43:28 2022 GMT
Not After : Nov 11 18:43:28 2024 GMT
Subject: CN=8cfa8c59c303baa4417bf5a27021f260fcb2518c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1c:c4:b2:bc:69:e1:2d:5d:f2:3a:27:d9:9c:
11:f9:04:c8:ce:62:72:d8:c6:0f:15:5b:f9:f4:cc:
d2:6e:d9:01:f3:99:be:ea:51:22:d0:65:8d:ee:2b:
63:e9:7f:7a:be:13:11:f1:b1:3b:29:8a:d0:37:18:
0a:aa:d0:64:95:2d:d0:5d:06:c0:56:74:9b:61:00:
82:c0:f5:79:c5:b5:88:8e:f4:e4:cf:9b:f7:82:3b:
70:2c:5c:25:b4:89:21:a3:6e:78:e0:38:c3:62:9e:
d2:30:5b:a8:c9:70:a6:78:bb:85:f6:df:93:7e:f2:
46:ae:83:4f:ab:e2:59:b8:2a:32:b1:8d:94:83:db:
6e:26:fa:73:ec:63:a5:6e:c9:0e:a4:ea:b9:04:4a:
d1:a3:4e:02:16:be:b4:e7:da:df:9f:eb:52:2c:30:
ad:05:5a:f4:a6:b5:3a:bd:08:c4:cb:d3:90:80:53:
f0:9e:b2:4c:2d:bc:51:61:af:e2:1d:3f:d3:e2:ba:
35:4f:fd:26:51:93:90:fd:f6:83:43:6a:1b:ee:92:
80:fb:3e:ee:f5:b6:0e:4f:46:a8:92:e3:fb:93:a2:
dd:da:7e:0e:03:be:c8:2e:75:84:9a:3b:69:df:7d:
05:03:1b:15:01:c2:65:b7:c2:bf:07:a9:d6:5f:0c:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D5:71:AD:AF:38:30:15:25:21:AE:23:0A:F7:72:AD:6B:08:D7:8F
X509v3 Authority Key Identifier:
keyid:4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/8cfa8c59c303baa4417bf5a27021f260fcb2518c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/de1d132dcee440b2c8e49412f22186fb39f7c848.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.232.0/22
IPv6:
2803:bba0::/32
Signature Algorithm: sha256WithRSAEncryption
39:65:ed:e7:5f:32:24:a9:9f:57:29:2b:a3:fa:7e:b1:c1:8d:
5f:89:18:8d:bb:e5:d1:d9:ec:0f:a8:63:d6:fc:5d:2d:d9:9c:
cf:c3:17:94:ba:5e:73:89:13:d2:fa:31:54:3d:f2:34:6e:c5:
ae:06:3c:f2:5b:c3:d3:58:af:17:62:ab:71:70:6b:54:5e:7a:
9e:b5:40:0e:50:d8:40:d6:17:9b:d7:d3:33:6d:3a:0f:86:3b:
67:d6:5a:42:41:db:67:a1:df:87:8b:9a:2e:d0:e4:53:c2:78:
d6:10:ee:17:01:8b:64:03:b8:ac:41:60:15:75:82:bc:8d:ee:
ea:ce:cb:b8:9f:9c:84:1a:af:b5:53:83:d4:34:8d:79:e2:37:
c5:16:a9:46:3c:95:50:ff:4c:74:69:f5:57:06:96:3f:9d:c0:
99:c2:d5:d3:ca:8f:c7:8d:10:8c:9e:02:d3:0d:b8:d6:0b:83:
59:94:d3:75:44:90:a0:38:c2:2c:90:cf:48:2e:19:4f:f4:58:
f2:94:77:71:75:85:a4:aa:ee:5d:24:48:fc:26:29:50:f4:9a:
a4:07:08:84:2b:d8:8b:55:0b:e9:5e:94:0e:26:57:e2:ea:2d:
7e:52:72:96:c3:cc:e2:46:e9:70:13:82:cf:8c:18:6f:e4:8f:
c0:f0:36:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org