Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/4cd9dff424ef56fce5854f0af6b50b7e3d72c857.roa
File: 4cd9dff424ef56fce5854f0af6b50b7e3d72c857.roa (raw, json)
Hash identifier: AI2K7OzewaaH00uIdoZL2XYomsRmv9xLBdN0tWXyZzM=
Subject key identifier: 30:4E:57:C5:22:52:60:08:E7:77:C5:89:7E:23:ED:30:43:8D:DB:C4
Certificate issuer: /CN=88170bb11130cbc833ab2ee961d2c4e2fd0d31c1
Certificate serial: 04D4AF
Authority key identifier: FB:71:57:62:EF:B0:E4:D3:31:95:ED:76:BB:CE:40:5A:F6:F1:82:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88170bb11130cbc833ab2ee961d2c4e2fd0d31c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/4cd9dff424ef56fce5854f0af6b50b7e3d72c857.roa
Signing time: Tue 20 Apr 2021 16:41:19 +0000
ROA not before: Tue 20 Apr 2021 03:00:00 +0000
ROA not after: Sat 20 Apr 2024 03:00:00 +0000
asID: 267932
IP address blocks: 45.180.120.0/22 maxlen: 23
2803:160::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316591 (0x4d4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88170bb11130cbc833ab2ee961d2c4e2fd0d31c1
Validity
Not Before: Apr 20 03:00:00 2021 GMT
Not After : Apr 20 03:00:00 2024 GMT
Subject: CN=4cd9dff424ef56fce5854f0af6b50b7e3d72c857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:be:49:36:1f:d0:58:2b:5e:60:00:ba:94:
61:8c:b7:44:b6:11:66:94:33:9b:8d:ec:a3:81:ca:
af:01:2e:8c:21:22:68:17:f3:f6:99:0b:5d:e0:dc:
88:97:bc:d8:3b:a3:7e:7d:f5:9d:bd:70:f2:c7:5a:
b9:f3:85:5d:a4:dc:f1:03:7c:8a:4d:46:82:b8:84:
0c:04:70:a8:da:72:af:9d:ca:1a:6a:cc:51:04:dd:
bc:85:b3:b7:a8:e7:ff:89:fe:28:83:aa:07:9f:5f:
a1:55:cc:96:29:3b:c2:b4:53:1e:64:a1:15:47:18:
13:ff:d2:15:0d:71:bd:d5:41:ee:e2:16:4d:b0:4f:
b1:35:c4:b2:df:74:04:b3:e8:d0:26:37:de:8f:a5:
a1:a7:53:84:ef:c7:e2:2f:3a:4a:b6:79:e7:53:a7:
81:7b:85:14:91:12:4f:31:bf:f2:e0:86:c2:fd:26:
54:66:7b:e9:85:d7:2f:40:7b:88:48:cf:a7:b5:0f:
82:3f:0d:38:43:47:35:df:78:0a:b6:76:40:69:a5:
1b:be:38:08:58:c2:79:4a:42:ff:86:93:57:61:e7:
c4:0b:95:77:f5:30:87:22:7b:6e:c3:17:e6:36:2b:
98:eb:cd:d2:16:b9:be:16:d2:4c:bb:2d:54:9f:f9:
55:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4E:57:C5:22:52:60:08:E7:77:C5:89:7E:23:ED:30:43:8D:DB:C4
X509v3 Authority Key Identifier:
keyid:FB:71:57:62:EF:B0:E4:D3:31:95:ED:76:BB:CE:40:5A:F6:F1:82:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88170bb11130cbc833ab2ee961d2c4e2fd0d31c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/4cd9dff424ef56fce5854f0af6b50b7e3d72c857.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/88170bb11130cbc833ab2ee961d2c4e2fd0d31c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.180.120.0/22
IPv6:
2803:160::/32
Signature Algorithm: sha256WithRSAEncryption
4f:bb:15:f3:43:ea:a5:78:03:ed:32:50:33:02:8f:3c:f5:33:
8e:23:fd:a0:22:c6:cd:ab:01:63:39:f6:25:5c:ab:ff:74:2e:
d7:53:44:48:1e:18:3e:04:79:68:f7:1e:de:68:32:9f:9c:2d:
bc:87:bd:31:03:ec:5e:5a:85:35:77:68:6e:ff:66:40:05:e1:
f7:a2:cc:66:0d:bd:06:d7:27:b0:8e:21:dd:d8:0d:69:7f:55:
7f:b3:ea:95:24:e2:c2:70:b0:73:20:1c:ef:23:75:cf:40:f9:
32:e1:a6:25:d4:d6:3d:98:da:63:84:47:04:20:84:39:ea:aa:
43:3a:08:98:16:8d:38:1e:e7:63:3b:5e:2c:bd:5d:34:f7:c6:
6e:35:ba:d1:6a:13:e9:0d:5b:2c:b5:e9:2d:1e:25:dc:13:fe:
ce:67:81:0b:3f:da:ce:31:4a:3d:45:24:06:05:b4:d2:e6:77:
79:bc:a0:41:17:d9:2f:0d:ea:80:c8:bc:01:80:ab:9e:ac:4f:
cb:27:a4:78:98:ad:e8:b2:41:3f:15:a9:ad:5f:b6:52:3c:d4:
2b:a2:99:96:5e:84:0e:1a:46:6b:1a:d5:b6:b5:a4:6e:e7:85:
82:17:66:5d:5e:77:89:70:d9:33:1e:01:da:72:44:c5:7e:4e:
b8:14:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:48 2024 by rpki-client on console-fra.rpki-client.org