Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/7115943e3d141ef5045f511d7348160c087aa6a7.roa
File: 7115943e3d141ef5045f511d7348160c087aa6a7.roa (raw, json)
Hash identifier: eRQh+9mwJ6DqjHISeDZ9NFihfcw1DB4A9goAiq7MN9E=
Subject key identifier: C4:53:49:4D:9D:E9:F3:90:2B:54:83:80:06:DF:3A:EF:79:4D:64:6E
Certificate issuer: /CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
Certificate serial: 0C5AC4
Authority key identifier: B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/7115943e3d141ef5045f511d7348160c087aa6a7.roa
Signing time: Wed 24 Mar 2021 14:41:21 +0000
ROA not before: Wed 24 Mar 2021 14:41:21 +0000
ROA not after: Tue 24 Mar 2026 14:41:21 +0000
asID: 27947
IP address blocks: 45.235.140.0/22 maxlen: 22
2801:13:7000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809668 (0xc5ac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
Validity
Not Before: Mar 24 14:41:21 2021 GMT
Not After : Mar 24 14:41:21 2026 GMT
Subject: CN=7115943e3d141ef5045f511d7348160c087aa6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:85:d2:a6:63:c2:f1:b8:00:40:2c:39:47:6a:
3e:13:46:b9:a6:27:d6:99:c1:b6:98:d0:7a:aa:b2:
07:90:3b:ee:2c:32:44:78:3b:cc:90:bb:18:5a:f6:
2f:50:ec:c1:eb:46:4f:1a:28:f8:84:dc:5e:85:34:
4b:65:9a:40:d2:39:00:5e:22:33:6b:42:8f:83:f5:
b1:94:50:1b:6c:ec:62:ac:7e:30:1c:a2:4f:02:5b:
d2:1b:76:cc:3e:6a:8f:86:44:04:76:df:2b:b9:a1:
0a:37:ba:25:69:26:21:95:05:ae:25:a8:e8:a0:db:
97:07:39:88:c6:21:6b:b7:ef:e4:5f:44:41:e7:b1:
13:45:b0:21:f7:59:7d:77:06:6b:50:ba:fb:6c:46:
4b:3e:e9:d8:f0:85:3c:85:47:18:31:64:17:7f:bd:
fd:b4:07:d4:fd:da:bc:61:85:05:4d:b8:29:45:0b:
bb:88:e8:e7:85:4b:b2:5d:f4:cc:d7:7d:1b:bb:6a:
36:6c:57:ed:59:c8:fe:1b:54:b9:e3:a1:e2:5c:98:
c6:33:ce:ce:35:90:a2:fb:18:0a:6c:c2:a9:2a:47:
25:7e:0c:08:2f:90:b1:91:13:2c:c6:44:9f:9a:f0:
ec:49:2c:9a:2c:51:35:5a:2d:9e:67:09:82:52:68:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:53:49:4D:9D:E9:F3:90:2B:54:83:80:06:DF:3A:EF:79:4D:64:6E
X509v3 Authority Key Identifier:
keyid:B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/7115943e3d141ef5045f511d7348160c087aa6a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.140.0/22
IPv6:
2801:13:7000::/48
Signature Algorithm: sha256WithRSAEncryption
2a:61:05:e9:e5:7b:8f:7a:2c:8a:1e:0e:ff:26:cc:5a:cc:1a:
c6:c7:6d:91:a7:8c:48:4c:88:a9:a3:62:4f:ff:1c:71:d3:e4:
69:48:2d:25:95:af:cd:ce:f3:ad:e8:b7:99:b2:e6:7f:c1:e0:
aa:4b:57:1e:e6:4f:dc:e8:09:4d:fd:49:d8:c7:06:c3:af:2f:
98:30:48:9a:fa:51:3a:8f:6e:ca:5a:6f:c6:ee:ae:b5:3e:71:
07:98:b0:17:ad:8f:ca:b9:cc:ae:db:bf:79:c8:c6:74:5c:d3:
fa:34:a6:cc:3c:95:ac:d0:fc:c4:fe:39:7f:c9:82:13:15:d6:
be:20:e3:17:36:8b:1c:77:f8:ea:9b:a7:db:1a:47:2e:cc:27:
ba:3a:af:29:bd:65:13:66:0b:45:d4:50:1e:99:00:81:ff:2b:
bc:99:33:f4:d4:2f:48:b5:e0:81:2c:a8:e2:e8:90:10:99:b9:
be:18:92:16:cb:42:2a:73:ea:b6:a5:6f:bb:c0:23:33:82:9b:
0d:ba:bc:58:f1:63:19:3e:1d:dd:79:f6:3b:51:3a:0d:61:1a:
f1:18:08:77:06:94:39:eb:3a:9a:7f:fe:fa:e1:9a:30:99:4c:
fa:74:4c:55:4d:7c:cf:ec:f8:88:cc:ee:3d:0f:bb:84:32:ac:
1d:91:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:41 2024 by rpki-client on console-fra.rpki-client.org