Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/3770f4f8972c8148f710ab09dd86b9e952102393.roa
File: 3770f4f8972c8148f710ab09dd86b9e952102393.roa (raw, json)
Hash identifier: mYYPEj67GXmXB7XUkmQ8a/MHDtmTUDc/UgByykDG7Hc=
Subject key identifier: 3F:83:5F:98:36:9B:F8:6F:1A:98:C2:13:D4:9F:1E:19:80:93:CE:D0
Certificate issuer: /CN=71551dc34af40822e5acdd443b22d6450fe5317b
Certificate serial: 0D5A63
Authority key identifier: 7E:23:9D:47:99:CC:5B:47:C4:3B:81:43:B3:10:DE:BB:45:D1:9A:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71551dc34af40822e5acdd443b22d6450fe5317b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/3770f4f8972c8148f710ab09dd86b9e952102393.roa
Signing time: Wed 24 Mar 2021 14:46:20 +0000
ROA not before: Wed 24 Mar 2021 14:46:20 +0000
ROA not after: Tue 24 Mar 2026 14:46:20 +0000
asID: 266782
IP address blocks: 45.234.84.0/23 maxlen: 23
45.234.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875107 (0xd5a63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71551dc34af40822e5acdd443b22d6450fe5317b
Validity
Not Before: Mar 24 14:46:20 2021 GMT
Not After : Mar 24 14:46:20 2026 GMT
Subject: CN=3770f4f8972c8148f710ab09dd86b9e952102393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:e5:fc:cd:fc:0b:3d:37:f9:c7:f9:a3:ec:
b4:04:79:1d:65:6f:16:59:50:3a:e9:bc:f5:9f:92:
6f:df:c0:6f:6f:49:bf:9d:53:b6:bd:79:20:7b:b0:
07:80:0f:46:08:a7:4e:52:f8:9e:8c:0f:17:b1:33:
3c:aa:6b:ab:96:45:75:41:a2:7e:8d:96:80:d4:67:
4d:6b:4b:9d:f0:1b:b4:bc:24:2d:c2:d5:98:bf:e4:
b6:d6:96:a7:7d:cb:47:86:08:6a:81:6d:a4:31:cc:
48:1b:8a:e0:ca:2f:d0:76:5a:e2:d9:0b:a2:b1:2a:
46:68:73:11:6c:35:5a:b9:c3:90:7c:36:05:0e:cf:
4e:c9:c5:f3:25:89:85:85:8d:c5:5f:fc:f7:1f:ff:
89:fb:91:9d:65:be:56:d0:a4:a5:a9:2e:7f:18:2c:
e0:9e:84:f2:2b:d7:b6:fd:a3:14:37:ee:13:5a:89:
b1:98:d7:e1:10:88:8c:0d:7e:50:fc:86:c9:21:3c:
a1:20:69:cc:94:76:1a:3d:83:f9:59:54:dd:dd:9f:
aa:e1:b9:4a:80:73:56:dd:eb:cc:b0:0d:cd:dd:3b:
3a:b7:26:27:64:ee:fa:22:8d:ab:d7:be:ed:a0:d8:
3b:56:bd:cf:46:c4:9a:9f:b3:6a:f4:11:18:10:9d:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:83:5F:98:36:9B:F8:6F:1A:98:C2:13:D4:9F:1E:19:80:93:CE:D0
X509v3 Authority Key Identifier:
keyid:7E:23:9D:47:99:CC:5B:47:C4:3B:81:43:B3:10:DE:BB:45:D1:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71551dc34af40822e5acdd443b22d6450fe5317b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/3770f4f8972c8148f710ab09dd86b9e952102393.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/71551dc34af40822e5acdd443b22d6450fe5317b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.84.0-45.234.86.255
Signature Algorithm: sha256WithRSAEncryption
06:2e:90:c3:54:3f:f1:30:8a:f6:ba:33:5d:5c:5a:b0:7c:86:
14:08:c1:8a:43:36:27:07:d4:81:b1:82:5e:5e:d1:4c:cf:63:
08:7d:e6:d2:34:c1:29:e1:b6:72:d7:25:85:8c:3a:ee:5e:43:
d2:a1:f8:30:dd:64:bb:89:06:98:4f:0f:cd:24:1a:e7:91:82:
e0:a2:00:c4:b0:96:46:b3:84:6d:db:ef:11:d1:0b:42:88:8d:
42:89:bd:f2:ec:59:4b:b1:c9:bf:06:17:88:66:a1:49:6d:38:
13:ca:b1:b2:7f:da:39:10:fa:2b:b7:80:bc:94:9e:02:af:22:
dc:2c:f3:f5:ba:1d:60:c4:27:69:d0:db:86:a0:b8:81:38:9b:
2f:d5:64:c3:b1:aa:27:3c:ac:1c:f3:ae:27:11:68:c2:35:30:
0a:49:20:34:df:c6:b8:42:6a:f4:bb:48:17:9c:31:82:e8:43:
c4:12:1b:84:b4:2b:08:68:e1:6c:7b:8d:9d:28:5e:3d:4f:5e:
cd:2d:79:0d:0f:17:50:68:50:8d:4c:4f:cc:42:a7:c6:a4:34:
f9:99:42:f4:de:6c:d2:8f:a0:1a:ba:0d:6c:23:85:07:73:15:
c3:64:a9:ee:b6:cd:47:f8:c6:0d:51:c0:b7:00:9f:9d:8b:88:
d5:bc:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org