Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/49449d714552f4f0cf1150d774fd803c0d1c6f59.roa
File: 49449d714552f4f0cf1150d774fd803c0d1c6f59.roa (raw, json)
Hash identifier: e4QCEkkQ+M3Lo1bAnLvUS1Y8I9BK9LURN3rSeL1t2S8=
Subject key identifier: 06:0C:5D:00:A8:60:61:59:0A:B5:DB:5D:A1:50:B0:35:73:30:61:48
Certificate issuer: /CN=a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3
Certificate serial: 0C768A
Authority key identifier: 4C:06:A0:A8:A7:2D:5F:8C:DE:1F:A8:79:AB:EB:12:8A:63:12:DF:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/49449d714552f4f0cf1150d774fd803c0d1c6f59.roa
Signing time: Wed 24 Mar 2021 14:38:22 +0000
ROA not before: Wed 24 Mar 2021 14:38:22 +0000
ROA not after: Tue 24 Mar 2026 14:38:22 +0000
asID: 266815
IP address blocks: 45.232.172.0/22 maxlen: 24
2803:1720::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816778 (0xc768a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3
Validity
Not Before: Mar 24 14:38:22 2021 GMT
Not After : Mar 24 14:38:22 2026 GMT
Subject: CN=49449d714552f4f0cf1150d774fd803c0d1c6f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:0e:2a:e1:9d:f6:72:07:1b:7d:77:e2:df:
00:cd:62:48:1c:1e:dd:a5:16:5a:8d:3d:2e:2d:4c:
cc:67:6b:53:ba:b5:d8:aa:0f:6c:74:46:b6:11:c4:
d1:3e:5b:48:5c:d5:44:14:75:a0:53:d5:7f:cb:e6:
5d:c7:43:93:80:e6:6c:dd:49:0b:30:11:d4:6a:56:
34:56:02:eb:1d:cb:14:e1:8a:bf:4b:28:29:7f:ba:
4a:d2:d4:96:de:18:10:41:4b:9e:be:ac:b0:8a:4a:
9a:0b:60:2f:fc:67:1a:ac:4c:47:67:bf:11:0f:3a:
59:82:01:98:29:05:6e:cd:9f:c8:56:ce:50:b7:f2:
76:1e:05:8f:63:b2:74:3b:dc:a6:51:ff:64:6d:13:
f3:25:bc:d5:36:f2:36:7d:dc:4a:b1:18:73:03:87:
19:4b:ad:de:01:51:87:b1:29:1f:e1:69:b5:47:d1:
7d:35:20:cd:8d:04:01:d9:88:0a:ed:0b:fb:7d:ac:
f3:ae:c0:6e:95:9b:85:c8:91:0e:1e:01:83:04:6c:
32:0a:44:1b:ed:c0:2a:89:26:0d:f0:58:28:08:ef:
53:bc:50:c1:20:8e:65:0f:4f:27:a8:95:08:70:23:
56:78:60:62:b2:c4:12:05:38:81:41:49:aa:44:66:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0C:5D:00:A8:60:61:59:0A:B5:DB:5D:A1:50:B0:35:73:30:61:48
X509v3 Authority Key Identifier:
keyid:4C:06:A0:A8:A7:2D:5F:8C:DE:1F:A8:79:AB:EB:12:8A:63:12:DF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/49449d714552f4f0cf1150d774fd803c0d1c6f59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.172.0/22
IPv6:
2803:1720::/32
Signature Algorithm: sha256WithRSAEncryption
08:87:45:4c:d5:68:41:89:e2:8f:50:ac:6d:b3:a1:91:c8:a2:
bf:44:80:e0:96:ae:fa:6f:99:00:92:35:28:57:85:e8:c7:23:
72:10:1d:d4:9c:f0:78:f8:61:cb:ce:32:f2:44:39:ef:85:9b:
88:4c:30:7d:7c:95:c7:9f:d0:e7:81:5f:01:21:60:0e:93:f8:
37:1a:b6:a9:76:a1:09:d2:78:af:71:2e:10:44:43:ee:bf:0a:
ba:72:e2:52:25:de:2b:65:ed:fa:c8:02:41:43:63:aa:aa:97:
47:59:67:7b:57:b0:5b:b6:3b:03:78:37:5a:0b:26:e5:b5:06:
df:af:45:d4:d3:39:49:88:8c:5a:56:da:93:dc:2e:37:30:52:
40:9e:d5:90:61:23:a4:fa:a4:77:d5:ed:28:96:11:1f:6f:b5:
7a:df:a6:3b:3b:b5:3c:7a:51:a9:b5:ba:bf:b0:e8:33:dd:ec:
71:7a:4d:4e:12:51:f3:c1:c7:a5:6d:ea:97:14:a8:93:0c:b9:
8e:3b:13:7e:48:09:c4:2a:6c:1a:34:06:e5:cf:b1:cf:ba:d5:
89:01:3a:f2:29:56:26:0b:eb:2a:44:36:83:65:15:6d:f9:16:
ce:3c:e2:60:be:2f:d7:b4:07:8e:15:6f:75:5b:60:17:9f:32:
37:55:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org