Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/376b6d1cd40ee8f67c71d85a5c2cef0685bca3da.roa
File: 376b6d1cd40ee8f67c71d85a5c2cef0685bca3da.roa (raw, json)
Hash identifier: 8DrJ9Dw5IpmcX0+JhTHi6v1eLYwvSPCXfrLx/oCBs0E=
Subject key identifier: 19:E1:D9:64:45:05:C2:90:1D:10:EA:F7:98:1C:20:67:69:19:1A:B3
Certificate issuer: /CN=3d834735280c5b9052510730fac20a4e6213a18d
Certificate serial: 049915
Authority key identifier: 5A:F2:18:32:BF:E5:36:83:ED:B0:EB:FB:05:13:DA:06:78:ED:59:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d834735280c5b9052510730fac20a4e6213a18d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/376b6d1cd40ee8f67c71d85a5c2cef0685bca3da.roa
Signing time: Wed 24 Mar 2021 14:36:36 +0000
ROA not before: Wed 24 Mar 2021 14:36:36 +0000
ROA not after: Tue 24 Mar 2026 14:36:36 +0000
asID: 265696
IP address blocks: 45.5.164.0/22 maxlen: 22
2801:17:d000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301333 (0x49915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d834735280c5b9052510730fac20a4e6213a18d
Validity
Not Before: Mar 24 14:36:36 2021 GMT
Not After : Mar 24 14:36:36 2026 GMT
Subject: CN=376b6d1cd40ee8f67c71d85a5c2cef0685bca3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6d:cd:bc:d7:34:e4:43:f0:b3:b2:49:b5:2a:
24:53:79:ff:53:7b:16:51:88:09:23:b0:c3:b8:5c:
9f:b6:0b:75:b5:0c:f1:6b:82:eb:5b:27:53:5e:51:
50:e1:9a:7d:f2:6b:a3:41:69:e9:f4:f8:a7:cd:5c:
61:b5:a7:51:98:cf:f0:99:54:c4:68:1c:36:25:50:
59:47:e3:e8:c9:41:54:55:6f:11:ca:41:40:3c:0a:
c3:3d:c1:e0:f2:2e:37:7d:38:48:17:35:a7:39:6f:
04:fe:ff:d7:ec:04:ca:01:2c:1d:8d:55:a0:45:48:
af:fe:ea:b4:5e:68:9a:d3:57:47:07:a4:c4:37:98:
4a:ae:56:78:30:76:c6:5e:cc:13:bb:c2:58:f2:3c:
58:a5:c4:27:49:85:c4:99:61:62:69:32:32:7b:72:
1a:90:d3:d7:9e:e5:95:be:93:be:21:0d:ae:22:f5:
2f:0a:2d:ab:cb:3c:4b:aa:0e:ce:98:4c:46:0b:3e:
f9:e1:05:b7:fc:ae:28:78:14:1d:fc:a2:85:fb:ad:
75:96:e0:32:64:86:ee:3f:19:02:2b:24:fd:bd:fe:
ab:5f:c1:a5:ba:ed:33:e2:68:d2:a2:97:ab:df:ee:
97:86:d5:b8:bf:29:79:14:e8:e4:30:e0:be:b9:94:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:D9:64:45:05:C2:90:1D:10:EA:F7:98:1C:20:67:69:19:1A:B3
X509v3 Authority Key Identifier:
keyid:5A:F2:18:32:BF:E5:36:83:ED:B0:EB:FB:05:13:DA:06:78:ED:59:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d834735280c5b9052510730fac20a4e6213a18d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/376b6d1cd40ee8f67c71d85a5c2cef0685bca3da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/3d834735280c5b9052510730fac20a4e6213a18d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.164.0/22
IPv6:
2801:17:d000::/48
Signature Algorithm: sha256WithRSAEncryption
48:95:a2:c8:8c:d0:eb:79:f5:e1:e9:ba:c4:eb:39:9e:9b:0e:
31:60:3b:49:5c:40:49:c5:a2:e0:54:bd:90:85:4a:4d:33:9e:
91:2f:5e:cb:5b:64:f8:28:ac:a7:a9:3c:01:9b:cd:77:35:ca:
6a:8f:dd:ee:69:ed:b0:a1:27:dc:06:d0:46:df:ce:fa:c7:ba:
b3:38:a4:47:a6:d2:13:40:55:55:df:d0:c2:5d:48:d4:c6:ac:
21:ae:f2:35:27:d0:72:a3:93:44:8f:c4:bc:c9:2d:71:1f:16:
f6:b5:00:89:1b:86:29:21:7f:16:63:0c:57:b4:df:57:bb:4c:
36:32:f1:af:d8:c5:f7:f1:16:7f:b7:84:71:d3:ab:4d:55:f4:
6a:a8:b9:21:67:e5:fa:d3:ef:a1:bf:cd:ad:fa:57:90:43:db:
44:2a:ae:c0:c5:a6:7a:4d:b2:96:f3:49:db:05:54:55:5a:76:
63:b4:af:90:e5:68:84:1e:f5:23:83:3c:1f:75:ce:27:39:4a:
b6:53:fd:82:5c:52:5d:c2:7e:b3:8a:bd:5d:d2:80:8a:66:d0:
21:49:76:95:48:08:86:b1:03:ff:61:fd:f0:f7:da:db:33:85:
ac:d0:40:28:15:52:38:e6:cb:82:40:2b:6f:bb:9a:96:1e:29:
d8:f8:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org