Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/3ed336c98c0e4fc03fafea28049b4d0048963b29.roa
File: 3ed336c98c0e4fc03fafea28049b4d0048963b29.roa (raw, json)
Hash identifier: ndt+du1zQ3sIj9cuPUkHEsPvg2F2ce0DGtcF5gF6Lvk=
Subject key identifier: 9B:E3:B6:9B:7A:11:DD:FA:B3:68:1D:D8:A4:D1:78:A2:F7:10:89:4A
Certificate issuer: /CN=845bbeaf321291f319d25e6aad16fc99ac388e15
Certificate serial: 11C003
Authority key identifier: 6F:76:57:C1:A5:80:23:BE:79:7E:9C:DE:62:7D:63:1D:2C:BD:51:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/845bbeaf321291f319d25e6aad16fc99ac388e15.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/3ed336c98c0e4fc03fafea28049b4d0048963b29.roa
Signing time: Thu 28 Oct 2021 14:57:43 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 264780
IP address blocks: 45.165.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1163267 (0x11c003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845bbeaf321291f319d25e6aad16fc99ac388e15
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=3ed336c98c0e4fc03fafea28049b4d0048963b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:77:9b:8b:79:01:08:60:c9:7f:7d:f8:8d:
b9:00:ee:9f:5d:37:5c:3f:20:96:ab:90:8b:ff:e9:
f4:9f:6f:25:6e:65:fe:82:cd:b6:28:f7:ce:76:fb:
07:4f:40:d9:63:04:59:61:55:98:d7:f5:e6:26:a8:
eb:a3:97:37:5b:83:cc:fb:92:e7:8f:60:46:5a:96:
25:38:2e:2e:6d:e0:b2:70:e3:28:9d:1f:d9:05:d2:
ad:48:28:5e:de:3d:a1:a3:92:4b:3d:79:a2:79:a7:
eb:08:22:0e:02:63:c5:86:74:9c:09:df:9e:40:cd:
e0:55:cf:2d:39:32:c4:f4:ba:b0:3e:ed:7c:cc:df:
ae:cf:2f:d5:a6:c3:ca:5b:62:19:0e:bf:37:a8:df:
38:95:59:8f:50:5c:71:03:7b:e3:16:bd:71:27:40:
6a:ef:b0:fc:9f:0f:58:ac:f0:7e:52:5f:5f:38:0f:
1f:84:76:d6:76:be:7d:4c:8f:dc:cb:54:15:5c:98:
a9:95:16:78:fe:d2:e6:3d:20:93:41:c0:91:88:31:
5d:81:79:9e:e8:96:cd:2c:ac:3a:ff:d2:bf:f3:4f:
81:7a:6e:44:cc:cc:13:0a:9a:04:d6:68:57:cc:19:
4b:cf:d6:2a:13:98:db:6a:10:f8:ef:f0:6e:e2:99:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E3:B6:9B:7A:11:DD:FA:B3:68:1D:D8:A4:D1:78:A2:F7:10:89:4A
X509v3 Authority Key Identifier:
keyid:6F:76:57:C1:A5:80:23:BE:79:7E:9C:DE:62:7D:63:1D:2C:BD:51:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/845bbeaf321291f319d25e6aad16fc99ac388e15.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/3ed336c98c0e4fc03fafea28049b4d0048963b29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/845bbeaf321291f319d25e6aad16fc99ac388e15.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:b4:bc:4f:7d:4f:ca:71:b6:e2:b1:3a:53:fb:2b:7e:26:4e:
34:a7:40:44:54:10:cb:5f:78:e0:f8:54:89:b4:b8:f9:0c:bc:
36:d8:f2:1b:b5:26:63:38:dd:5e:2a:9c:3c:f3:bc:32:2d:95:
82:6c:65:bd:6c:b0:00:b2:6b:b3:80:e7:5b:9a:5a:ec:24:5e:
a7:e2:75:54:67:b7:18:ea:81:b1:19:8c:75:1f:ef:8f:25:80:
11:f1:8b:d5:30:88:a8:63:75:12:b7:f4:58:c7:74:8d:d7:8e:
e7:8b:93:c8:ac:f4:b6:ce:ef:0a:07:f7:c9:11:09:7c:c0:a0:
9f:2e:b7:40:44:aa:ff:d7:20:18:6b:af:e4:a9:15:6e:3b:be:
ba:a5:30:36:73:f3:71:d4:ae:9c:e2:44:cc:14:a3:69:d7:a7:
c8:3e:e0:74:7b:bd:64:a4:2e:e2:96:aa:e5:a0:f0:51:c8:08:
27:e4:c8:5d:b9:48:11:7f:c1:4e:93:62:fe:b4:61:35:1f:54:
2a:ab:c0:0b:55:3f:66:3a:37:8f:a4:1c:be:52:54:15:f0:e2:
81:5b:b7:78:d3:23:76:20:83:b9:30:36:66:8b:c2:7e:e7:39:
34:b8:49:ff:98:7a:14:0d:63:4b:cc:cc:e6:07:d4:97:8a:34:
83:ec:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org