Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/f6c2199209321beedc1ec74dccceb1ce3437e3e2.roa
File: f6c2199209321beedc1ec74dccceb1ce3437e3e2.roa (raw, json)
Hash identifier: TCGa/1Zyw9Co2D/iJdOi+dOVzJ1LbZEa69Prs759Bcc=
Subject key identifier: 37:2A:3D:55:57:D8:41:B9:4E:40:72:F0:C7:E6:69:09:2C:FE:06:86
Certificate issuer: /CN=33b2211f7639ca97f55599bde05cf8b49ec41579
Certificate serial: 15669E
Authority key identifier: 90:BB:03:6B:AC:88:22:7A:1F:CE:5F:14:D9:54:CB:1A:9C:1B:E5:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b2211f7639ca97f55599bde05cf8b49ec41579.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/f6c2199209321beedc1ec74dccceb1ce3437e3e2.roa
Signing time: Tue 19 Mar 2024 13:44:01 +0000
ROA not before: Tue 19 Mar 2024 13:44:01 +0000
ROA not after: Thu 19 Mar 2026 13:44:01 +0000
asID: 269739
IP address blocks: 45.181.244.0/22 maxlen: 22
45.181.244.0/24 maxlen: 24
45.181.245.0/24 maxlen: 24
45.181.246.0/24 maxlen: 24
45.181.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402526 (0x15669e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b2211f7639ca97f55599bde05cf8b49ec41579
Validity
Not Before: Mar 19 13:44:01 2024 GMT
Not After : Mar 19 13:44:01 2026 GMT
Subject: CN=f6c2199209321beedc1ec74dccceb1ce3437e3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:eb:79:ce:9c:8f:cd:e6:c9:a3:0a:79:d4:b7:
da:21:71:73:1c:11:b7:ca:d0:9f:0e:fb:f3:2d:b2:
53:66:9d:50:58:2d:89:9f:d0:c0:87:92:cc:77:c9:
7e:23:ff:d8:5c:3e:93:5d:0c:aa:7c:8e:a4:7d:4a:
dc:c5:34:c9:7e:6b:d3:1e:bf:bd:ea:d5:8e:04:d4:
b0:18:98:9b:dc:eb:37:99:6d:52:c9:38:f9:8d:49:
58:86:e5:dd:53:3e:8c:14:81:cd:0c:15:2e:0c:01:
24:f7:fd:be:92:a5:a0:3d:26:e3:50:57:76:45:9f:
18:17:8c:57:2d:e0:18:9c:45:13:85:6d:c0:fe:0d:
6e:ec:d2:bd:f8:cb:54:c2:e7:9d:56:dd:83:e5:0d:
83:d3:11:27:0e:96:1b:7b:ff:f7:a6:73:18:84:c5:
e3:e4:de:7b:4a:3f:97:50:d3:9a:10:89:97:c9:fc:
5d:fc:d8:05:0e:69:a0:c6:a2:1a:55:76:98:5c:15:
4d:e9:8d:d2:d8:8a:10:d9:cf:1f:f1:b4:8c:2e:bf:
60:be:f5:a5:46:d7:b1:4f:48:e6:a0:e6:80:49:dd:
c7:e4:08:d9:e6:de:87:d9:54:a5:17:71:b4:66:b2:
62:f1:3a:42:08:eb:26:7d:5e:05:f2:25:89:df:4a:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:3D:55:57:D8:41:B9:4E:40:72:F0:C7:E6:69:09:2C:FE:06:86
X509v3 Authority Key Identifier:
keyid:90:BB:03:6B:AC:88:22:7A:1F:CE:5F:14:D9:54:CB:1A:9C:1B:E5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b2211f7639ca97f55599bde05cf8b49ec41579.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/f6c2199209321beedc1ec74dccceb1ce3437e3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/33b2211f7639ca97f55599bde05cf8b49ec41579.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.244.0/22
Signature Algorithm: sha256WithRSAEncryption
29:14:ce:64:c4:35:14:61:f4:19:8a:e7:f2:44:6e:46:1b:f7:
db:96:7e:ac:e5:d0:98:89:74:9a:b3:b5:27:91:31:7a:5b:0f:
96:ce:48:a7:4e:cd:7f:34:8b:1d:6b:43:04:5f:48:4d:d4:71:
67:a7:f4:9d:c9:8e:32:34:51:a5:58:6e:69:a3:fb:12:85:08:
51:17:b4:21:e6:0c:bf:17:be:7e:4b:9e:0a:67:0b:87:32:58:
0e:3f:5f:d7:e9:ac:e8:4a:3d:2d:ab:00:aa:f4:e0:9f:5f:fa:
3f:86:f1:40:2d:8c:50:20:5c:b5:41:bc:6b:a3:8f:bf:37:07:
ff:22:1e:51:3f:fb:b8:73:42:ef:51:5b:37:20:a1:a4:27:35:
d3:c9:ae:cc:6d:33:b9:56:a8:ab:8a:d0:b0:ab:1c:ed:48:81:
b9:dc:7a:5a:11:31:6a:23:3c:eb:bd:e3:d4:ae:d7:a0:fb:24:
70:77:76:48:d9:f7:fe:d7:38:92:76:0d:88:71:98:9a:cb:2f:
3b:4e:6d:28:82:bf:01:0f:68:52:28:30:11:74:a7:94:ba:a5:
a6:e6:c0:1f:ef:52:56:5c:da:62:76:d1:50:0d:56:5a:0c:da:
cf:d1:cf:45:6c:1a:5e:01:ae:c6:f3:84:8d:80:96:a8:cf:9f:
92:00:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org