Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/9349223b68d4ab0fe7781bb5ba076f0286b4b209.roa
File: 9349223b68d4ab0fe7781bb5ba076f0286b4b209.roa (raw, json)
Hash identifier: UE9OGRAOYrmXbcFkSvOL268WJzH8Wb8PDzabBPEamJs=
Subject key identifier: CB:E0:FF:BE:80:29:70:D0:A0:AE:ED:04:44:2D:ED:28:E3:1C:82:B0
Certificate issuer: /CN=639b361009f26cf93180d6f26a1524716c25477c
Certificate serial: 1883B9
Authority key identifier: 3B:1E:46:00:3B:4B:E1:AD:EB:B0:82:8F:B1:59:84:78:0B:8D:B1:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/639b361009f26cf93180d6f26a1524716c25477c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/9349223b68d4ab0fe7781bb5ba076f0286b4b209.roa
Signing time: Fri 24 Mar 2023 08:30:34 +0000
ROA not before: Thu 23 Mar 2023 08:30:34 +0000
ROA not after: Sat 22 Mar 2025 08:30:34 +0000
asID: 269858
IP address blocks: 45.189.196.0/24 maxlen: 24
45.189.197.0/24 maxlen: 24
45.189.198.0/24 maxlen: 24
45.189.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1606585 (0x1883b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639b361009f26cf93180d6f26a1524716c25477c
Validity
Not Before: Mar 23 08:30:34 2023 GMT
Not After : Mar 22 08:30:34 2025 GMT
Subject: CN=9349223b68d4ab0fe7781bb5ba076f0286b4b209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:29:65:b7:c3:a6:c0:38:5c:ed:a3:fe:aa:
ba:0e:37:d4:93:e4:76:e0:54:fb:9a:24:38:43:87:
dd:f7:fb:ce:bd:15:d1:72:ac:26:e2:27:26:d5:35:
0a:70:26:50:9c:79:0c:22:99:e6:ab:71:59:bc:d7:
80:4d:fe:4f:61:0c:c1:20:2f:c0:56:33:ba:3e:42:
fc:95:35:5d:dd:d3:2a:55:18:70:f7:90:46:95:05:
6a:a3:37:9b:97:d8:17:f2:43:4a:2b:62:7a:53:cb:
4d:2c:25:ac:2c:f4:00:48:96:4c:33:86:79:c8:06:
ae:90:7a:67:3d:bf:4a:03:e7:01:29:6b:60:2a:3b:
11:e4:83:8a:34:f8:da:5e:87:b9:47:6e:1d:04:69:
bf:ab:b6:85:34:50:7a:9a:6d:cb:e2:88:75:f1:3b:
65:e0:27:a2:4c:46:63:0e:19:b7:cf:8e:55:c8:48:
1f:5f:00:45:cf:73:c5:82:94:02:a1:a0:70:b2:a6:
d4:53:a8:d9:4c:a2:71:85:a2:65:76:b0:e0:55:85:
5b:03:ad:e4:3f:85:bb:11:c1:3c:ab:52:c6:27:23:
9e:fd:13:83:67:8a:ee:fd:14:aa:50:38:62:21:90:
26:ca:25:86:15:3f:30:5f:10:ba:6c:13:8e:b4:24:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E0:FF:BE:80:29:70:D0:A0:AE:ED:04:44:2D:ED:28:E3:1C:82:B0
X509v3 Authority Key Identifier:
keyid:3B:1E:46:00:3B:4B:E1:AD:EB:B0:82:8F:B1:59:84:78:0B:8D:B1:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/639b361009f26cf93180d6f26a1524716c25477c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/9349223b68d4ab0fe7781bb5ba076f0286b4b209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/639b361009f26cf93180d6f26a1524716c25477c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.196.0/22
Signature Algorithm: sha256WithRSAEncryption
66:4d:f7:a3:2b:16:32:db:6a:cf:00:04:92:d2:61:22:0b:c6:
43:48:98:7a:4e:3f:67:9d:5e:c1:de:78:85:0b:52:25:a2:6d:
e8:43:4e:86:e7:ae:39:c0:76:23:f3:a2:d6:bc:cc:03:59:cb:
ae:57:91:4a:68:7d:b5:6b:22:a3:d1:85:8f:1f:82:31:c2:45:
a6:13:fd:0f:84:3f:08:81:d6:c2:39:7a:79:52:1f:db:21:e6:
d8:41:e0:c8:49:21:24:86:6a:81:7f:2e:3a:c4:29:66:d6:9d:
4f:e2:f7:23:c0:35:54:b2:a9:e3:8a:e7:c9:7f:b7:cd:42:5b:
cb:f5:b7:d3:0b:77:65:93:64:ff:b3:ef:ee:eb:30:51:cb:4c:
9e:f9:f9:6d:85:08:56:f4:5f:f6:1f:20:18:6d:f1:0c:b1:a8:
9d:55:bb:7a:6b:dc:cc:89:a6:cd:e0:38:b6:8f:9b:b4:01:0d:
9c:ba:c1:c5:c6:49:03:a9:1b:e0:f7:fb:fc:bc:88:b0:03:07:
55:dc:41:d2:d4:95:4f:da:13:f4:b9:f1:c9:04:64:fe:f5:67:
c6:ad:61:93:70:f0:f9:5a:85:ae:03:2e:e8:4b:7e:3a:35:57:
25:d7:c9:c3:53:1a:a5:b1:9e:df:d1:73:67:bd:55:bb:cb:66:
c3:b4:66:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org