Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/3bc46b12b3233ad9c9a12d181180d7bc0050961d.roa
File: 3bc46b12b3233ad9c9a12d181180d7bc0050961d.roa (raw, json)
Hash identifier: YZuNokzBDS6ti51mEea9+LkSeeKDNE1d+hI+0vgXBMQ=
Subject key identifier: 76:F1:AD:30:D7:F0:2E:A3:D8:6B:55:C6:77:5A:61:66:7A:E6:91:20
Certificate issuer: /CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Certificate serial: 218D3D
Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/3bc46b12b3233ad9c9a12d181180d7bc0050961d.roa
Signing time: Mon 24 Jul 2023 14:44:36 +0000
ROA not before: Sun 23 Jul 2023 14:44:36 +0000
ROA not after: Thu 24 Jul 2025 14:44:36 +0000
asID: 265703
IP address blocks: 45.238.176.0/23 maxlen: 24
138.0.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2198845 (0x218d3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Validity
Not Before: Jul 23 14:44:36 2023 GMT
Not After : Jul 24 14:44:36 2025 GMT
Subject: CN=3bc46b12b3233ad9c9a12d181180d7bc0050961d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:97:16:52:44:d2:b8:a0:ca:aa:a1:54:34:
e2:28:d5:a3:09:a0:a9:76:be:a3:e2:2a:e0:d9:9c:
84:a0:d2:eb:e2:76:bd:15:0c:9d:43:7a:10:88:1c:
95:50:9d:a3:0b:aa:04:b6:d0:72:f6:b7:ce:d1:88:
12:08:52:a6:e2:32:f3:43:2a:a2:41:d7:b3:ff:80:
af:cd:ab:b3:d1:ff:ed:3b:ca:55:2c:e0:eb:c5:00:
3c:1e:d6:8e:56:21:71:63:86:7e:d0:9e:60:0d:1e:
c7:1b:4d:81:0e:96:23:fe:0d:4a:02:9f:e8:b1:1c:
5f:6e:d8:48:57:fe:2a:e6:14:ab:aa:3e:ed:8c:34:
df:ae:72:84:0f:8a:65:04:22:fb:bb:0b:a1:e2:36:
9c:0a:15:74:a1:17:a2:19:1e:ab:04:f3:76:4c:f7:
df:a3:d9:03:73:ce:0d:ec:f3:8e:42:16:bc:b9:31:
a9:7a:59:f9:6e:db:23:ea:98:37:42:35:d7:c8:1e:
13:63:2e:88:0a:19:4c:c9:32:d2:07:e7:6e:64:59:
07:7e:e6:db:bc:5b:b8:03:74:82:73:fb:3d:af:d4:
2b:cc:14:75:bd:d3:18:6a:8e:61:54:8c:fb:cd:7d:
95:5a:ba:f6:fa:20:a0:c1:72:f9:0d:f1:b7:06:50:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F1:AD:30:D7:F0:2E:A3:D8:6B:55:C6:77:5A:61:66:7A:E6:91:20
X509v3 Authority Key Identifier:
keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/3bc46b12b3233ad9c9a12d181180d7bc0050961d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.176.0/23
138.0.122.0/23
Signature Algorithm: sha256WithRSAEncryption
78:da:71:24:5c:36:71:12:db:04:88:0d:ea:e9:7b:83:97:b3:
66:0c:d2:ff:aa:37:ca:bb:1b:c8:d0:9e:57:47:0f:f5:91:a5:
cb:c4:82:4d:01:e8:0c:1d:42:fa:08:6d:30:3a:9a:1a:31:9c:
6f:ba:9f:49:6c:3c:e8:78:1e:01:28:ca:00:3a:45:bd:1d:06:
11:ce:0c:0c:04:d7:f7:d3:10:94:2b:ed:5c:25:64:1d:e4:be:
5f:38:f4:f9:90:33:25:8e:83:10:5f:33:9f:1f:7c:b8:b0:e0:
1e:22:fa:a9:ae:5e:77:eb:fa:f6:48:52:ee:fe:6e:32:cb:c2:
e0:8c:0f:3d:03:cc:c7:fc:c4:8f:e6:81:e9:a4:5c:d5:62:fa:
a5:68:98:cb:d9:9f:01:82:40:25:cb:0f:ee:ba:51:5f:33:9f:
c8:05:5b:08:ba:e7:69:bd:06:80:4c:4d:80:93:57:a4:1a:60:
96:4e:79:02:5a:37:0c:1f:65:87:21:da:99:08:69:9b:82:fd:
fe:4d:09:49:72:91:5e:dd:56:aa:06:d8:24:bf:41:e3:2c:a3:
63:6b:c7:e1:bd:7c:74:1f:57:65:c6:5b:f9:46:98:d8:73:0e:
e4:0e:28:ba:e9:f0:04:bb:51:4c:a1:1a:6f:2a:10:9d:f3:6c:
fe:33:00:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:29:00 2024 by rpki-client on console-fra.rpki-client.org