Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/2b3e3a521625f1fe801066ca6926cd6f8a62830d.roa
File: 2b3e3a521625f1fe801066ca6926cd6f8a62830d.roa (raw, json)
Hash identifier: CPk7okxYU2H2SPAL1Q1yNhSPFZYI4XN2NcaaPg+2tLs=
Subject key identifier: A2:5B:3C:60:27:98:34:22:11:F5:A5:6C:52:50:48:FC:BE:EF:6D:36
Certificate issuer: /CN=bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8
Certificate serial: 0CEACE
Authority key identifier: AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/2b3e3a521625f1fe801066ca6926cd6f8a62830d.roa
Signing time: Wed 24 Mar 2021 14:33:07 +0000
ROA not before: Wed 24 Mar 2021 14:33:07 +0000
ROA not after: Tue 24 Mar 2026 14:33:07 +0000
asID: 266808
IP address blocks: 45.236.140.0/22 maxlen: 24
2803:98a0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846542 (0xceace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8
Validity
Not Before: Mar 24 14:33:07 2021 GMT
Not After : Mar 24 14:33:07 2026 GMT
Subject: CN=2b3e3a521625f1fe801066ca6926cd6f8a62830d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:16:77:be:af:04:92:4c:2d:32:73:4c:c0:
cf:09:55:c7:03:a8:d7:79:5c:b1:ee:d4:8b:35:c6:
72:ff:7d:4a:3a:11:72:10:eb:e9:4e:46:1f:6c:3d:
1c:af:0c:b1:1c:2c:dc:ec:ff:4f:d9:ce:48:ae:72:
45:f5:5f:7f:51:df:d5:90:97:47:6e:0b:e4:42:61:
e1:28:fc:72:8b:e8:f1:5d:ee:34:fd:65:d0:86:ff:
eb:0d:ee:52:82:28:a8:f7:6f:41:f6:fa:8f:64:1c:
fb:15:2c:00:36:f8:a0:6e:fe:e2:2f:92:16:24:82:
f4:f5:cd:f4:3a:2c:08:dc:7d:43:3e:a1:8d:7d:7f:
d2:1d:da:a7:96:65:60:59:35:6c:70:c4:f0:e3:30:
8b:9a:a6:b9:58:b2:64:9e:f1:39:8e:2b:0c:a0:7d:
85:63:12:de:90:06:71:c8:ad:68:7f:85:ec:4c:14:
b5:fe:a1:4d:fe:2e:2e:72:73:82:fb:6e:ba:06:03:
32:1d:9f:42:1a:c5:df:09:77:21:69:e7:3e:bf:06:
6f:86:23:15:3e:59:8a:ff:c6:98:75:8f:34:c1:6a:
91:14:47:60:8a:fb:ae:a8:ff:3e:80:d2:25:96:10:
50:1c:12:59:82:e0:59:18:62:cd:8c:3e:f7:c6:d6:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:3C:60:27:98:34:22:11:F5:A5:6C:52:50:48:FC:BE:EF:6D:36
X509v3 Authority Key Identifier:
keyid:AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/2b3e3a521625f1fe801066ca6926cd6f8a62830d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.140.0/22
IPv6:
2803:98a0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:ce:cf:e2:09:48:9a:16:5b:52:f0:5f:c2:c2:1d:19:aa:6a:
75:3d:e5:7c:f0:fb:33:d8:9d:f1:7c:d3:4d:14:e9:56:56:df:
d9:e2:35:30:97:92:57:6d:86:0b:75:01:bd:16:89:3b:97:a8:
68:5c:a9:9e:8b:79:36:59:56:11:0f:07:ab:dd:e5:c3:98:d4:
f5:d4:3e:6d:77:11:06:bc:fe:0f:44:81:36:58:90:dd:12:10:
0a:6e:e2:ff:71:b8:d1:33:b9:3b:a1:b5:ca:b2:bb:9d:f7:16:
8d:a8:02:ae:f7:da:60:35:a5:8c:1f:7a:49:8f:0a:32:0c:8a:
0c:82:77:4b:e4:f1:90:1d:27:ba:d8:31:5f:89:d0:6e:d1:b3:
d3:49:9e:92:c2:78:20:59:32:41:90:7c:42:91:c8:ff:b8:44:
be:db:cb:c8:47:88:5e:db:5b:b1:1d:73:62:23:4d:c4:03:99:
86:94:04:6f:6c:9d:35:1f:16:84:b0:c9:c9:69:91:b7:10:ec:
91:cd:19:d0:49:f7:9f:f9:d6:4e:65:ff:63:47:31:de:bf:09:
a1:30:82:51:79:fe:66:bc:fa:5e:cc:9a:1f:b4:97:5e:13:c0:
ae:61:4d:9d:37:01:f0:9c:03:48:bb:2b:ed:d0:dd:90:49:5c:
bf:01:b4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org