Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/3b22e9261a6a7bb08f023f43f922464cadcbcaf9.roa
File: 3b22e9261a6a7bb08f023f43f922464cadcbcaf9.roa (raw, json)
Hash identifier: lvLCmPdb0221WvMY2EbK61x8cYnrkCzuEZipM64ec2A=
Subject key identifier: E7:10:CE:91:0D:E0:07:4D:8E:77:9C:44:7F:C8:6C:6F:87:B4:55:55
Certificate issuer: /CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Certificate serial: 0C7BF3
Authority key identifier: BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/3b22e9261a6a7bb08f023f43f922464cadcbcaf9.roa
Signing time: Wed 24 Mar 2021 14:29:10 +0000
ROA not before: Wed 24 Mar 2021 14:29:10 +0000
ROA not after: Tue 24 Mar 2026 14:29:10 +0000
asID: 265862
IP address blocks: 45.224.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 818163 (0xc7bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Validity
Not Before: Mar 24 14:29:10 2021 GMT
Not After : Mar 24 14:29:10 2026 GMT
Subject: CN=3b22e9261a6a7bb08f023f43f922464cadcbcaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:ed:99:4c:8a:9f:2d:87:fe:a7:8a:32:d0:
dc:b4:85:fb:5f:2b:8f:c6:84:be:94:b5:69:34:93:
84:fb:36:57:8c:fc:54:ed:6e:f5:75:84:ca:c3:69:
f2:87:9e:7c:f4:bf:cd:45:db:61:50:b9:c6:e4:3d:
a9:ed:d6:c9:d9:5b:ba:8c:3c:b2:d2:e5:f4:62:fc:
30:28:5b:08:a6:f8:79:8a:0f:11:ae:09:6b:14:7c:
64:d0:b4:33:83:01:17:a3:cb:f7:78:ab:5f:12:3e:
8d:6e:d2:01:00:36:43:07:b9:53:dd:59:b5:19:e9:
1c:e6:27:bd:70:00:a9:8b:3c:cd:6f:f1:d0:6e:b7:
e3:ea:90:2e:b6:e9:ee:0f:04:c0:03:8b:08:f0:d6:
6b:ad:b1:9a:5f:77:ad:19:09:85:a5:e4:42:30:88:
48:82:dd:81:47:20:36:4d:f0:af:bf:39:1a:19:fd:
a1:7e:0a:72:84:90:fb:d0:72:69:59:af:f8:bd:b9:
5e:5f:f5:94:6b:d3:c7:f9:ba:26:7c:d2:83:cd:ec:
4a:e4:d9:32:c3:4f:77:f0:a1:30:d5:41:46:13:ea:
1d:34:01:1a:03:da:a9:93:24:23:2b:d4:e0:00:b5:
d4:b5:c7:ce:b0:c7:eb:94:22:a4:cd:31:48:6a:89:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:10:CE:91:0D:E0:07:4D:8E:77:9C:44:7F:C8:6C:6F:87:B4:55:55
X509v3 Authority Key Identifier:
keyid:BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/3b22e9261a6a7bb08f023f43f922464cadcbcaf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.188.0/22
Signature Algorithm: sha256WithRSAEncryption
65:f8:ff:e0:29:48:43:bb:3a:10:1b:20:f7:af:cc:76:b0:47:
76:90:c0:f2:a6:8b:06:8a:af:22:fd:f1:48:e6:c6:b0:e5:97:
d1:40:ab:a0:1f:66:43:34:86:fa:20:82:4f:b8:3b:bb:bc:24:
b0:1d:40:b7:10:88:22:50:7a:3f:57:34:a5:64:6a:4e:20:f4:
bc:a6:f4:43:9f:0d:e1:ab:88:1b:f4:95:f2:e2:d9:75:dd:64:
14:92:3d:8e:01:ad:9c:2b:69:3a:a0:5f:7c:75:6b:b0:e2:8f:
6d:e0:93:16:b6:92:b4:d7:7d:4d:e0:07:17:d1:ec:35:b7:1f:
f8:e1:97:a8:23:41:f7:81:5f:38:f3:16:18:75:a1:8c:38:d2:
ef:e3:0c:a5:fe:80:0d:38:e7:d3:d4:a5:bc:b2:fa:ca:31:ea:
be:b8:89:51:7c:ed:30:de:77:e8:2e:7e:c2:43:65:c9:4c:1f:
67:1d:6e:a1:19:57:a2:a0:50:8b:52:8f:8e:e1:52:dc:86:b6:
25:bf:d5:7f:13:cd:f7:ab:34:9e:a1:14:97:d7:40:46:6f:b0:
68:52:7b:a6:09:17:dc:27:73:28:84:ef:75:4d:0b:34:59:a0:
8e:e0:a0:de:1f:98:61:7c:2c:bc:c5:63:f8:d9:0e:1b:96:10:
33:92:01:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org