Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/3145129b235760c88e9ebd4cfdf39f7b7d92992e.roa
File: 3145129b235760c88e9ebd4cfdf39f7b7d92992e.roa (raw, json)
Hash identifier: FaA7k8qxXWf8BgG6fwqbgIeuKmAozyMYfJeLUY/7LOA=
Subject key identifier: 0C:52:60:AF:31:D4:7C:D1:72:0A:E8:21:11:6D:BC:21:DD:D6:81:3F
Certificate issuer: /CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Certificate serial: 1A04AD
Authority key identifier: 2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/3145129b235760c88e9ebd4cfdf39f7b7d92992e.roa
Signing time: Mon 24 Oct 2022 11:39:27 +0000
ROA not before: Sat 24 Sep 2022 00:36:25 +0000
ROA not after: Thu 26 Sep 2024 00:36:25 +0000
asID: 263703
IP address blocks: 45.186.208.0/22 maxlen: 24
45.186.208.0/24 maxlen: 24
45.186.209.0/24 maxlen: 24
45.186.210.0/24 maxlen: 24
45.186.211.0/24 maxlen: 24
190.97.224.0/19 maxlen: 24
143.255.84.0/22 maxlen: 24
2803:7800::/32 maxlen: 48
2803:d760::/34 maxlen: 34
2803:d760:4000::/34 maxlen: 34
2803:d760:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1705133 (0x1a04ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Validity
Not Before: Sep 24 00:36:25 2022 GMT
Not After : Sep 26 00:36:25 2024 GMT
Subject: CN=3145129b235760c88e9ebd4cfdf39f7b7d92992e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:0c:d6:08:d4:c0:7e:5e:e9:89:75:8b:9d:
31:26:4d:dd:41:d2:4d:4f:15:09:61:3c:cb:21:2f:
ef:13:d0:d2:1e:fe:ae:53:b0:e4:b8:9f:ce:c6:0e:
9f:d7:c5:60:ed:2d:c0:c1:1c:75:48:2b:ed:78:5e:
6b:27:1f:c3:47:f3:94:d4:87:ab:ac:73:9d:ba:c2:
9e:b1:dc:a3:28:b7:68:50:9b:31:96:e4:c0:26:21:
ad:aa:19:f9:51:9a:ca:d6:bf:61:85:e8:14:e3:26:
f5:fd:8e:fb:04:d2:eb:10:36:b9:10:01:03:a5:99:
f0:79:a6:fc:df:d6:c8:d0:75:c4:13:62:11:c6:2e:
96:32:af:1d:f0:6b:dd:66:aa:d3:f5:88:cd:8a:1a:
2f:e5:e8:37:1b:f7:85:8e:ac:18:8c:5c:3c:42:12:
e4:29:74:c6:35:b5:4c:5c:ba:dc:93:38:82:10:7c:
3f:4b:0f:5d:99:6a:fb:84:4c:91:e6:4b:5d:9f:01:
c6:11:f3:3a:b4:e1:32:ba:57:80:70:23:14:a8:6f:
c8:dd:71:7c:bb:05:69:ca:f7:a6:e4:1a:5d:be:a4:
f4:2e:81:77:78:47:54:f9:c5:c4:c6:26:a3:85:05:
02:e8:ce:99:b1:6e:fb:2a:6b:14:e9:64:d8:78:f5:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:52:60:AF:31:D4:7C:D1:72:0A:E8:21:11:6D:BC:21:DD:D6:81:3F
X509v3 Authority Key Identifier:
keyid:2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/3145129b235760c88e9ebd4cfdf39f7b7d92992e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.208.0/22
143.255.84.0/22
190.97.224.0/19
IPv6:
2803:7800::/32
2803:d760::-2803:d760:bfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
19:cc:2f:60:04:53:71:fc:f7:86:86:e6:c2:95:c4:80:b8:f1:
c0:f0:b9:e1:67:3f:43:37:b5:c9:41:c2:2a:35:0c:97:90:89:
7b:dd:20:7b:43:3e:a9:e1:5b:61:7d:92:6f:f8:d2:e8:79:4c:
61:14:b6:5c:3e:0f:72:5e:a3:9d:7c:3d:8b:c4:c0:d1:84:8c:
1b:bc:f1:35:76:f6:0e:fb:7a:02:b8:ba:ed:d2:72:dc:c9:00:
bf:af:a9:c5:4f:0e:1e:91:b3:37:23:24:a7:ec:b9:45:31:3e:
b7:29:e3:cb:8e:e8:e1:72:02:57:06:34:26:ef:47:bd:36:40:
48:85:f7:0a:14:8f:7a:ef:1a:3d:4d:32:2e:0a:a9:67:81:dc:
80:52:b7:e4:6d:9c:d9:b2:cf:ce:c2:dc:63:d9:f2:21:0c:d4:
95:5e:dc:7a:bf:5e:22:f1:f2:bb:1e:a1:21:8b:3b:57:f1:8e:
22:ab:1e:42:77:a2:45:7f:dd:77:e1:5a:fb:e9:ce:86:6a:b1:
ad:ad:d8:88:e3:9c:44:62:dd:09:b1:35:b6:1a:a8:d1:d3:c5:
58:89:3b:63:12:43:3f:01:5e:cc:1d:f5:4a:65:71:30:a3:dd:
0c:e4:de:0c:85:52:ff:51:89:ec:37:8b:1f:34:7b:56:62:83:
11:c4:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org