Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47f933cd-3375-4c00-9b76-8736ca90b66e/48331b341f2e0185f19e90be7162c9362060ccab.roa
File: 48331b341f2e0185f19e90be7162c9362060ccab.roa (raw, json)
Hash identifier: MiXwEmQ02PM8kjkenbWPBNOSE/JxL+YOkQ8whNUJVhc=
Subject key identifier: 77:98:B7:51:7C:01:42:18:51:43:36:60:E0:ED:70:32:88:2C:08:CE
Certificate issuer: /CN=2a75683ce870ca08f2c577dc6b9a4992193cb7f0
Certificate serial: 0209
Authority key identifier: D7:C6:38:EF:68:8D:54:0C:A9:39:29:9A:00:1F:02:30:AA:32:F9:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a75683ce870ca08f2c577dc6b9a4992193cb7f0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/47f933cd-3375-4c00-9b76-8736ca90b66e/48331b341f2e0185f19e90be7162c9362060ccab.roa
Signing time: Fri 10 Mar 2023 20:46:19 +0000
ROA not before: Thu 09 Mar 2023 20:45:44 +0000
ROA not after: Mon 10 Mar 2025 21:45:44 +0000
asID: 265709
IP address blocks: 45.6.212.0/23 maxlen: 24
45.6.214.0/24 maxlen: 24
2803:5c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a75683ce870ca08f2c577dc6b9a4992193cb7f0
Validity
Not Before: Mar 9 20:45:44 2023 GMT
Not After : Mar 10 21:45:44 2025 GMT
Subject: CN=48331b341f2e0185f19e90be7162c9362060ccab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:4f:4f:13:d3:ad:e0:8b:fb:a8:45:5c:18:
c2:84:19:42:86:a5:98:06:eb:42:35:27:8d:bf:07:
0d:ba:18:cb:bd:d8:47:1d:94:ef:e2:8e:fb:33:8b:
96:7e:d9:20:53:54:dd:ae:84:a9:f4:71:48:ad:b4:
e1:84:f5:62:c1:57:a8:95:6a:8e:bd:09:06:10:d3:
b2:d4:fd:79:4d:7b:a4:b1:9c:ad:16:fe:93:2b:b7:
7e:bb:23:f0:99:56:4c:85:60:a0:b0:23:02:35:f4:
61:40:ab:ee:b0:89:87:e5:44:df:29:2a:b8:ff:b4:
68:24:5f:b0:95:08:c7:4e:37:be:fb:9a:f6:52:8e:
aa:ad:f3:97:da:e6:39:6a:ec:be:21:27:5e:9f:94:
e6:a9:34:a6:1f:34:af:2f:f1:b3:65:fa:11:71:f8:
a4:58:b1:9e:cb:30:53:47:aa:04:3d:0a:b0:78:b5:
f9:5e:e0:3b:e2:f2:19:15:8e:60:5c:ac:59:4c:70:
cd:fb:dc:1a:fb:e2:ec:35:52:ed:af:7e:27:af:59:
06:33:75:02:d8:82:d6:af:d3:e3:85:b4:5b:50:a2:
23:c3:a8:3d:cf:79:8d:9f:3b:05:bf:85:0a:f0:f5:
e7:61:8d:cf:ff:37:cd:a5:10:88:ca:1f:01:bf:d6:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:98:B7:51:7C:01:42:18:51:43:36:60:E0:ED:70:32:88:2C:08:CE
X509v3 Authority Key Identifier:
keyid:D7:C6:38:EF:68:8D:54:0C:A9:39:29:9A:00:1F:02:30:AA:32:F9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a75683ce870ca08f2c577dc6b9a4992193cb7f0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47f933cd-3375-4c00-9b76-8736ca90b66e/48331b341f2e0185f19e90be7162c9362060ccab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/47f933cd-3375-4c00-9b76-8736ca90b66e/2a75683ce870ca08f2c577dc6b9a4992193cb7f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.212.0-45.6.214.255
IPv6:
2803:5c0::/32
Signature Algorithm: sha256WithRSAEncryption
72:c4:3a:e2:1e:39:9f:4d:00:bb:26:d3:7a:d0:74:bd:71:3e:
f8:28:b0:d1:86:7a:a9:d3:d5:76:0f:dc:e0:84:4e:fa:fb:b4:
c9:9e:42:f6:51:a4:60:f3:ca:8f:66:8e:a9:d8:da:41:cc:22:
fd:aa:06:2b:87:08:27:c9:ee:73:db:c3:e7:9f:93:2e:ac:c2:
37:ac:2e:d8:5d:a2:c8:83:42:9f:bf:9e:0c:6b:1b:21:12:c6:
af:87:05:97:d4:00:ee:b7:bd:9c:4a:ca:0f:44:0f:27:c8:16:
11:e9:fd:b3:6b:64:f9:78:72:ec:2b:39:70:f3:12:4c:19:90:
4a:e8:b8:a2:af:1f:45:67:29:bc:97:33:e5:25:a9:9b:b3:b1:
b3:04:da:fd:ae:10:6e:7f:08:70:90:8a:a2:f0:88:f7:dd:5d:
82:93:ed:8b:80:f8:a4:6d:a7:90:04:1f:67:c3:fe:bb:47:b3:
e6:5e:c6:1d:d8:28:38:1e:e3:b7:c5:7f:cf:fe:7d:84:9f:dc:
24:72:f8:f5:ad:18:ea:5a:83:47:41:97:e3:a4:88:91:3a:0b:
2a:67:e4:70:59:61:1b:72:b0:d8:82:16:ae:0e:c0:1c:3f:0f:
0f:c2:25:4e:23:10:89:a7:76:a8:37:fe:ce:f8:bd:a1:13:94:
a4:b3:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org