Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/eb8f80eee3f3d92d1e202264f9e7ae398745d6c2.roa
File: eb8f80eee3f3d92d1e202264f9e7ae398745d6c2.roa (raw, json)
Hash identifier: eP5b8cuaTZaBsOEd5rvlA9fqw8TxoYZ0VKqJFZ6yf/E=
Subject key identifier: DE:21:4B:76:AC:B2:76:B8:3A:D2:00:AD:ED:57:B7:61:52:71:A1:01
Certificate issuer: /CN=5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8
Certificate serial: 10C39B
Authority key identifier: D8:DD:25:F7:EF:D2:53:8D:E0:CF:A6:E3:9A:85:2B:12:6B:9E:30:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/eb8f80eee3f3d92d1e202264f9e7ae398745d6c2.roa
Signing time: Wed 13 Sep 2023 20:13:40 +0000
ROA not before: Tue 12 Sep 2023 20:13:39 +0000
ROA not after: Sat 13 Sep 2025 20:13:39 +0000
asID: 28007
IP address blocks: 45.229.32.0/22 maxlen: 24
2803:8d20::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1098651 (0x10c39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8
Validity
Not Before: Sep 12 20:13:39 2023 GMT
Not After : Sep 13 20:13:39 2025 GMT
Subject: CN=eb8f80eee3f3d92d1e202264f9e7ae398745d6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b9:68:af:e8:d2:b7:e6:12:1a:2f:b5:b2:79:
e1:27:8f:30:a2:9b:d2:6c:b8:b0:20:e0:43:82:61:
eb:63:df:33:f0:dc:27:c1:83:28:5d:2a:4b:4d:87:
83:89:53:67:26:ef:33:29:87:16:99:32:1c:3d:76:
f1:a4:0a:a1:4b:11:a0:b3:6a:cc:91:a5:47:21:48:
51:aa:ff:5f:9f:b5:77:a8:ee:37:98:28:e7:e0:78:
c5:6d:be:88:81:43:cf:c7:fd:60:a4:8b:df:35:b8:
76:97:42:68:b0:78:d0:36:3b:aa:38:13:d3:8e:14:
c9:b8:c2:a3:9d:cd:fd:80:2a:72:cc:7b:ba:d7:30:
d6:54:bd:ee:2d:1a:c5:db:0a:86:7e:ba:d6:9e:2e:
43:57:bc:8f:90:33:b4:37:16:8d:7d:9d:53:53:68:
8a:a6:c9:12:f0:b9:5c:25:d8:e0:22:12:1a:15:38:
69:93:46:44:37:86:b0:55:79:d5:39:8d:22:1f:ab:
42:6e:c9:a3:d8:6f:cd:52:27:5c:15:74:70:c0:7c:
9b:34:23:e0:b6:18:72:6c:6a:12:2f:a0:4b:4c:d3:
de:48:bc:04:4e:04:16:ac:e4:d5:d8:e1:07:10:c0:
71:c6:4f:72:39:6c:77:98:dc:a0:e5:15:7f:ed:6c:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:21:4B:76:AC:B2:76:B8:3A:D2:00:AD:ED:57:B7:61:52:71:A1:01
X509v3 Authority Key Identifier:
keyid:D8:DD:25:F7:EF:D2:53:8D:E0:CF:A6:E3:9A:85:2B:12:6B:9E:30:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/eb8f80eee3f3d92d1e202264f9e7ae398745d6c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.32.0/22
IPv6:
2803:8d20::/32
Signature Algorithm: sha256WithRSAEncryption
07:15:36:bb:40:a9:3f:c8:c7:74:00:f1:d2:c4:f0:bb:db:4f:
61:cb:5e:e8:21:d7:b0:6d:b9:6c:25:b2:25:e6:00:60:88:ec:
8a:5f:4b:f5:9e:32:5f:82:d0:23:04:f4:ea:05:c5:f3:29:7a:
da:51:ad:29:cc:dd:3d:e0:c4:24:bc:8e:8e:ae:51:c5:44:5e:
a5:19:c6:ea:b1:79:14:73:6b:11:d6:bb:c3:5b:7c:48:fd:b0:
6d:9e:a1:38:ed:89:7a:b6:bf:46:3f:49:7f:c2:26:c6:c0:07:
b5:a0:8b:5f:9f:f9:d4:e4:bf:a7:8e:b9:b9:5e:f0:a4:97:bd:
80:1d:5f:23:2a:63:f3:4e:97:0f:a1:d3:7c:7b:00:14:20:7c:
49:77:b9:28:02:a9:50:5b:7f:6c:05:ed:5b:43:d1:8e:76:33:
7f:da:0e:88:5e:12:08:71:27:d3:fc:9c:83:83:cd:00:67:4a:
62:2d:44:99:a4:a0:b9:7b:b3:32:24:f8:03:a2:a1:f1:58:2a:
25:19:c5:a3:39:0d:ad:9c:1a:f7:bd:37:6a:aa:6f:f4:29:e6:
da:85:7e:4a:f1:32:29:06:83:78:8a:1f:3b:35:20:46:c0:e3:
55:38:22:36:56:6b:96:93:e2:47:06:d7:4a:4b:6a:3f:16:ec:
de:72:c3:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEMObMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi
MmI2ZWEyZmE0MDgxNmQzMzY2Yzg5Y2IzMGQ4NWE0YTE3YmU1YjgwHhcNMjMwOTEy
MjAxMzM5WhcNMjUwOTEzMjAxMzM5WjAzMTEwLwYDVQQDEyhlYjhmODBlZWUzZjNk
OTJkMWUyMDIyNjRmOWU3YWUzOTg3NDVkNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhLlor+jSt+YSGi+1snnhJ48wopvSbLiwIOBDgmHrY98z8Nwn
wYMoXSpLTYeDiVNnJu8zKYcWmTIcPXbxpAqhSxGgs2rMkaVHIUhRqv9fn7V3qO43
mCjn4HjFbb6IgUPPx/1gpIvfNbh2l0JosHjQNjuqOBPTjhTJuMKjnc39gCpyzHu6
1zDWVL3uLRrF2wqGfrrWni5DV7yPkDO0NxaNfZ1TU2iKpskS8LlcJdjgIhIaFThp
k0ZEN4awVXnVOY0iH6tCbsmj2G/NUidcFXRwwHybNCPgthhybGoSL6BLTNPeSLwE
TgQWrOTV2OEHEMBxxk9yOWx3mNyg5RV/7Wx0jwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFN4hS3assna4OtIAre1Xt2FScaEBMB8GA1UdIwQYMBaAFNjdJffv0lON4M+m
45qFKxJrnjDdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWIyYjZl
YTJmYTQwODE2ZDMzNjZjODljYjMwZDg1YTRhMTdiZTViOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjllN2UwYmYtZGQ5ZC00NmZjLWEyYmEtMGMwNjFl
YTJmNGYzL2ViOGY4MGVlZTNmM2Q5MmQxZTIwMjI2NGY5ZTdhZTM5ODc0NWQ2YzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yOWU3ZTBiZi1kZDlkLTQ2ZmMtYTJiYS0wYzA2
MWVhMmY0ZjMvNWIyYjZlYTJmYTQwODE2ZDMzNjZjODljYjMwZDg1YTRhMTdiZTVi
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3lIDANBAIAAjAHAwUAKAONIDANBgkqhkiG9w0BAQsFAAOC
AQEABxU2u0CpP8jHdADx0sTwu9tPYcte6CHXsG25bCWyJeYAYIjsil9L9Z4yX4LQ
IwT06gXF8yl62lGtKczdPeDEJLyOjq5RxURepRnG6rF5FHNrEda7w1t8SP2wbZ6h
OO2Jera/Rj9Jf8ImxsAHtaCLX5/51OS/p465uV7wpJe9gB1fIypj806XD6HTfHsA
FCB8SXe5KAKpUFt/bAXtW0PRjnYzf9oOiF4SCHEn0/ycg4PNAGdKYi1EmaSguXuz
MiT4A6Kh8VgqJRnFozkNrZwa9703aqpv9Cnm2oV+SvEyKQaDeIofOzUgRsDjVTgi
NlZrlpPiRwbXSktqPxbs3nLDEQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org