Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/f3799457b8928370a9238ced1fb1677e7e6d5e9d.roa
File: f3799457b8928370a9238ced1fb1677e7e6d5e9d.roa (raw, json)
Hash identifier: QlkSvmoqp8tjX5To7LwUWTm0yoDzEOyBDmOipDriqPo=
Subject key identifier: 52:A9:EE:DD:EC:3C:A7:45:10:5E:FD:F9:74:D4:A3:23:33:F0:8E:9A
Certificate issuer: /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial: 038E4D
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/f3799457b8928370a9238ced1fb1677e7e6d5e9d.roa
Signing time: Wed 04 May 2022 13:41:55 +0000
ROA not before: Wed 04 May 2022 03:00:00 +0000
ROA not after: Tue 04 May 2027 03:00:00 +0000
asID: 262186
IP address blocks: 189.85.40.0/22 maxlen: 25
2803:21e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233037 (0x38e4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Validity
Not Before: May 4 03:00:00 2022 GMT
Not After : May 4 03:00:00 2027 GMT
Subject: CN=f3799457b8928370a9238ced1fb1677e7e6d5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:db:29:53:fb:17:6f:92:4b:c2:de:ae:fd:
9d:01:6d:3c:cd:24:dd:30:9f:5d:b0:2e:3c:15:e5:
11:33:2e:82:d7:ad:d8:e1:47:a2:5f:8e:bc:bf:37:
88:f8:f7:0d:de:03:ef:69:29:97:9e:9f:55:ae:08:
a3:45:a6:4b:ce:c1:14:a1:50:f9:88:f6:40:ff:73:
3c:0a:4f:83:9d:de:90:20:9a:30:0a:fe:bb:04:69:
fb:ab:23:e0:f9:cd:ff:54:40:0e:11:b3:c8:eb:6d:
c7:b0:04:3b:c8:b4:46:bb:5c:0f:45:da:9c:1a:a1:
b2:54:e4:72:fe:8b:ac:04:88:35:fd:89:10:5d:c1:
5b:02:de:27:f0:70:c0:6e:73:01:b8:5d:f8:2d:60:
25:cb:9c:ce:e1:94:eb:11:c2:98:11:5f:8a:9e:d4:
00:7a:c7:6e:74:4e:57:f7:07:6e:2d:e1:8a:81:84:
46:59:ed:62:97:58:b3:5f:2b:90:f4:fd:f9:4b:bc:
c1:39:6c:ad:ef:6c:14:81:62:d8:3e:f0:56:51:a2:
39:72:9f:4a:16:f8:b3:b1:38:ed:4e:ca:78:f9:39:
12:05:8b:2c:e7:4b:35:07:3b:35:ba:70:f7:9a:b7:
ad:51:6b:f5:39:69:a0:0a:76:a2:22:eb:c7:ef:7f:
b0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:EE:DD:EC:3C:A7:45:10:5E:FD:F9:74:D4:A3:23:33:F0:8E:9A
X509v3 Authority Key Identifier:
keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/f3799457b8928370a9238ced1fb1677e7e6d5e9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.40.0/22
IPv6:
2803:21e0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:e8:a1:e9:33:03:91:10:54:8a:30:49:af:88:49:64:9e:86:
fd:68:68:18:cb:70:62:1e:f2:f8:1c:26:ac:7e:e6:40:5c:aa:
50:d7:ca:75:45:92:e7:db:2c:d5:81:19:ab:b6:60:83:f3:b0:
00:e0:90:1d:83:59:ec:f8:b2:a0:a6:e7:48:32:41:b0:57:2b:
7a:b3:82:c8:51:55:87:f5:f8:85:e6:94:b9:f7:1b:03:1b:82:
f5:34:b7:7a:0d:43:10:22:98:7c:d7:56:a2:6a:d7:e8:4c:27:
77:79:7d:ea:67:a4:13:b4:4a:76:91:1b:f0:e4:e8:ff:ca:de:
62:69:4d:3e:ab:39:21:16:31:69:a4:1e:b7:44:37:d8:5a:5a:
53:ae:f8:7f:2b:58:cd:ed:58:f7:3c:ae:6d:17:8f:db:84:38:
f9:18:1e:f5:2f:88:2b:d9:62:5d:7d:65:84:e9:4d:f8:9e:49:
9e:b4:aa:ba:9c:3c:cf:57:42:5c:9b:7c:84:2b:cf:bd:32:97:
28:31:57:8b:37:1c:c2:19:5e:ff:c3:b1:df:ae:16:69:b0:b8:
fd:12:50:2d:5f:b4:3c:f4:aa:23:e8:df:ae:48:08:65:04:35:
77:ca:28:5d:22:11:d1:54:c9:e9:46:d6:1f:2e:17:76:47:ce:
92:ab:c4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org