Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3facb025baf68e7841481aa93b97fb03690154b7.roa
File: 3facb025baf68e7841481aa93b97fb03690154b7.roa (raw, json)
Hash identifier: 0UC19POrQf0LF2+HKF2tBC+xMpImV5nyRtKDVgJa+8o=
Subject key identifier: 7A:BB:46:B2:02:D9:A1:B3:86:9D:F8:B1:3F:87:55:F5:09:B3:77:67
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 15B42C
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3facb025baf68e7841481aa93b97fb03690154b7.roa
Signing time: Thu 03 Feb 2022 16:57:44 +0000
ROA not before: Tue 28 Sep 2021 03:00:00 +0000
ROA not after: Thu 28 Sep 2023 03:00:00 +0000
asID: 49999
IP address blocks: 181.215.73.0/24 maxlen: 24
181.215.53.0/24 maxlen: 24
179.61.217.0/24 maxlen: 24
191.101.185.0/24 maxlen: 24
191.96.36.0/24 maxlen: 24
181.214.160.0/24 maxlen: 24
181.215.186.0/23 maxlen: 24
181.215.77.0/24 maxlen: 24
181.214.176.0/23 maxlen: 24
181.214.178.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422380 (0x15b42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Sep 28 03:00:00 2021 GMT
Not After : Sep 28 03:00:00 2023 GMT
Subject: CN=3facb025baf68e7841481aa93b97fb03690154b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7b:c8:c9:91:42:8c:3b:3f:dc:42:b3:99:02:
5f:f0:08:6a:88:61:0e:db:f3:85:b2:c5:1f:e6:b4:
a4:fc:1b:6f:a8:9c:54:10:e4:66:36:33:30:71:51:
46:40:9a:8d:51:0c:93:43:0c:a3:6f:53:2a:0b:b9:
e6:e8:29:2c:a0:65:ac:ef:c4:55:fc:fa:2a:1f:a0:
b4:88:db:86:fe:7a:04:22:c9:78:ee:6f:00:05:88:
93:37:0e:b7:9f:3b:75:72:d9:2b:da:4e:d6:f3:9d:
a0:78:f9:b7:1f:47:57:af:ac:c2:36:e6:6e:a2:29:
c1:42:b5:5e:ee:a9:b0:8b:f4:28:cd:99:36:44:99:
2f:ac:09:3a:49:22:4f:a7:fb:47:88:19:51:a3:ce:
1d:66:e2:f2:b4:2f:f0:26:66:16:a7:63:da:e4:44:
44:36:86:23:0d:2a:9d:10:75:96:a4:75:61:03:68:
bf:95:7b:c7:db:9f:d2:78:4f:f7:bf:18:ea:d3:34:
0e:b7:9d:62:30:fd:9a:9d:c7:0e:92:f5:c0:63:48:
8f:d6:6d:3d:b8:ad:99:d1:29:01:c5:00:83:7c:52:
86:d0:75:b3:ee:ea:62:bf:44:29:a0:0f:81:3a:74:
42:62:8e:8a:7a:46:c9:3f:14:b6:a5:79:2c:b7:16:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BB:46:B2:02:D9:A1:B3:86:9D:F8:B1:3F:87:55:F5:09:B3:77:67
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3facb025baf68e7841481aa93b97fb03690154b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.217.0/24
181.214.160.0/24
181.214.176.0/22
181.215.53.0/24
181.215.73.0/24
181.215.77.0/24
181.215.186.0/23
191.96.36.0/24
191.101.185.0/24
Signature Algorithm: sha256WithRSAEncryption
73:60:5b:c2:bb:7a:28:ed:60:50:27:53:06:eb:7a:14:34:2f:
c5:ae:96:5a:f7:46:ca:43:34:62:f8:34:1c:f6:c9:b7:fd:d2:
7a:8b:27:94:68:76:ad:6c:cc:c5:97:f3:01:f4:3a:ad:49:f3:
dc:fb:cf:33:75:c6:9e:52:6a:5f:5d:88:16:4d:34:2c:34:96:
47:62:34:49:64:7d:64:e4:82:54:de:d4:f0:a9:d9:6b:7a:75:
a3:b8:61:2b:39:f9:82:19:de:f8:1a:68:68:b4:1e:31:5a:34:
53:8d:49:c9:9f:ec:c3:18:7b:a5:ca:cd:be:f7:22:3b:71:74:
1c:ba:08:48:38:de:fc:6d:8f:00:a4:0b:71:37:77:73:50:ce:
07:ce:5d:92:aa:b5:e2:07:60:09:4e:73:f0:59:c1:af:98:46:
cb:53:bc:4f:0e:b8:fa:d8:45:79:b3:7c:9d:02:4a:61:ab:05:
8d:70:b5:bd:3a:57:40:e8:6a:9d:ba:4c:cd:bc:2d:dd:24:89:
a8:78:0a:cd:a5:b6:3a:6d:f4:f0:f5:f2:1c:bf:de:91:cc:dc:
71:07:56:4b:af:7a:9f:d3:04:05:ce:a8:7d:49:d6:83:41:65:
51:43:15:8f:b3:c9:68:90:23:23:53:60:64:e9:15:43:cc:6e:
a0:fa:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org