Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2861a11-fc45-4606-bfec-fde6a957aa01/6d23f22ceac034d70632dfbdcf765fb11cc82d8c.roa
File: 6d23f22ceac034d70632dfbdcf765fb11cc82d8c.roa (raw, json)
Hash identifier: MJwAnoWpmNf/bk5CfGLgqCRWXI49XZFJShHOtSd1rPo=
Subject key identifier: 2F:70:7B:1E:83:4F:B9:F4:09:99:C6:F3:62:00:8D:E4:14:F1:4F:44
Certificate issuer: /CN=e073d0961cc52bacaf60ff9bab5a37bf764d4125
Certificate serial: 15CD6B
Authority key identifier: 0B:01:73:8E:FA:CC:3D:8B:3C:38:67:20:47:CE:6A:F7:51:6D:7C:05
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e073d0961cc52bacaf60ff9bab5a37bf764d4125.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b2861a11-fc45-4606-bfec-fde6a957aa01/6d23f22ceac034d70632dfbdcf765fb11cc82d8c.roa
Signing time: Tue 15 Feb 2022 23:38:10 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 22869
IP address blocks: 45.4.128.0/22 maxlen: 24
138.94.144.0/22 maxlen: 24
143.208.56.0/22 maxlen: 24
168.227.128.0/22 maxlen: 24
190.122.184.0/22 maxlen: 24
2803:c300::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1428843 (0x15cd6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e073d0961cc52bacaf60ff9bab5a37bf764d4125
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=6d23f22ceac034d70632dfbdcf765fb11cc82d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:db:6a:01:30:0b:1d:c7:78:4e:07:67:48:
43:ca:a6:25:00:3a:dd:19:de:79:50:31:fb:61:f4:
22:5d:ef:45:a1:09:62:fa:9b:4f:7b:a1:d5:83:05:
23:ee:a9:90:ea:9a:11:87:7d:73:7d:58:b4:40:05:
9b:8e:73:65:71:6e:aa:cf:0f:08:d2:af:52:03:44:
a8:90:c1:c9:68:6a:80:f4:d4:e8:4d:de:59:91:cd:
1e:3f:81:02:00:7b:4c:9f:77:b5:c1:b0:df:48:9f:
55:47:80:20:c9:fc:18:be:87:be:86:00:a7:1f:95:
49:f8:d6:9e:42:51:c0:ae:65:79:ff:04:78:85:14:
6b:78:ec:1a:a1:3d:83:80:90:98:62:11:b8:74:30:
b6:0b:e6:57:25:c1:2d:36:c2:8a:e3:77:b2:f0:44:
43:a8:b3:fd:96:84:f9:ce:bd:c7:88:78:3a:16:f3:
09:d2:98:48:cc:f5:47:12:be:02:e6:fa:1a:0e:a6:
df:86:35:a5:52:85:bf:e1:a2:f7:37:93:7a:c7:df:
76:79:2d:19:87:7c:dc:40:e2:3c:0c:02:e7:2d:2d:
a6:d5:4e:4a:21:22:45:20:79:7e:ff:b9:13:6a:c1:
f2:66:ad:89:03:19:68:b1:90:e1:59:ba:2e:c1:28:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:70:7B:1E:83:4F:B9:F4:09:99:C6:F3:62:00:8D:E4:14:F1:4F:44
X509v3 Authority Key Identifier:
keyid:0B:01:73:8E:FA:CC:3D:8B:3C:38:67:20:47:CE:6A:F7:51:6D:7C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e073d0961cc52bacaf60ff9bab5a37bf764d4125.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2861a11-fc45-4606-bfec-fde6a957aa01/6d23f22ceac034d70632dfbdcf765fb11cc82d8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b2861a11-fc45-4606-bfec-fde6a957aa01/e073d0961cc52bacaf60ff9bab5a37bf764d4125.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.128.0/22
138.94.144.0/22
143.208.56.0/22
168.227.128.0/22
190.122.184.0/22
IPv6:
2803:c300::/32
Signature Algorithm: sha256WithRSAEncryption
10:67:00:64:3a:12:9f:9b:3c:f7:4d:15:43:3e:4e:8b:01:f5:
94:a1:e8:64:27:90:7c:a5:2b:7b:4c:63:72:4d:d2:12:19:80:
94:d8:92:f6:1f:c5:34:db:3a:d5:09:e4:66:02:33:50:4d:d1:
46:77:7b:56:83:47:8b:a9:49:d4:cc:ec:3e:c5:bb:83:60:02:
ca:07:f8:de:bb:51:96:44:53:c5:dd:83:f2:56:cb:65:12:f8:
e5:73:0c:ef:08:7a:d0:48:2f:cb:ec:2f:41:db:20:cc:dc:9b:
2e:70:16:ed:82:88:7d:19:c5:41:db:06:e4:cc:83:e2:fa:5a:
01:95:61:9e:36:1d:5a:77:d1:4b:6f:5c:33:4b:a5:37:86:0d:
d7:e1:ff:46:94:57:37:c5:72:93:1d:37:a1:fb:1d:ba:e9:ff:
09:f4:8c:c6:8c:5a:da:7f:a4:8f:3b:c8:2b:8e:27:2e:b9:fa:
ab:5b:25:18:36:32:3e:05:81:67:cb:97:36:81:c8:e7:40:e6:
43:e9:d9:7c:67:cc:12:57:ab:1f:fe:b2:c9:e4:0e:bb:89:c8:
a0:47:94:38:ac:17:63:9d:e4:90:3a:73:51:a6:d7:fb:3b:03:
eb:5b:de:1e:26:d2:1e:5d:be:c6:16:1e:89:63:71:d8:76:d7:
75:19:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org