Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/3ebf323bdaafb4991dd068516691fafdeb34dd61.roa
File: 3ebf323bdaafb4991dd068516691fafdeb34dd61.roa (raw, json)
Hash identifier: hw9QWIax30nrOJwN0CARpcADZciU343FBhGjFB7SyHU=
Subject key identifier: FE:0B:2E:B1:65:D0:BA:2A:4E:81:FF:A2:E2:CD:34:52:38:84:0C:39
Certificate issuer: /CN=d8ec2e23c44f24767001626bdcf66010d00d9db8
Certificate serial: 0EFF19
Authority key identifier: 64:7D:FE:07:32:9D:CD:B9:0B:5C:BA:D5:3C:0A:35:5D:A6:9C:44:2F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ec2e23c44f24767001626bdcf66010d00d9db8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/3ebf323bdaafb4991dd068516691fafdeb34dd61.roa
Signing time: Tue 24 May 2022 10:41:54 +0000
ROA not before: Thu 05 May 2022 03:00:00 +0000
ROA not after: Sun 05 May 2024 03:00:00 +0000
asID: 265580
IP address blocks: 45.174.252.0/22 maxlen: 24
2806:335::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982809 (0xeff19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ec2e23c44f24767001626bdcf66010d00d9db8
Validity
Not Before: May 5 03:00:00 2022 GMT
Not After : May 5 03:00:00 2024 GMT
Subject: CN=3ebf323bdaafb4991dd068516691fafdeb34dd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:a2:73:e4:5b:be:a7:2e:58:76:ef:0d:49:
25:25:c1:23:ae:82:2e:9f:2e:30:cf:74:28:ee:b5:
7f:4b:dd:4f:3b:1b:93:01:64:10:6f:d6:7c:bc:c3:
3a:3e:68:ee:5b:f6:a6:f5:3d:48:d6:0a:bd:5f:c8:
80:40:f2:fb:5a:59:3c:9e:82:43:34:34:bb:a9:5f:
05:02:f2:9c:2b:01:1e:96:a2:88:9b:15:a7:57:6e:
58:69:3e:f5:c8:4f:35:9d:21:a0:d1:37:03:17:ae:
9d:9c:44:e0:72:2f:9a:0f:6e:28:7a:df:d4:50:76:
03:a1:bc:5b:5f:12:e6:17:c3:ae:6b:ce:f9:3b:e0:
c5:47:0f:64:b9:a7:b5:e8:59:6c:c9:e3:2f:7d:4c:
06:96:59:34:c4:5b:a0:aa:b3:6c:0b:00:a4:e9:20:
b7:4a:57:ae:14:01:c5:9e:1c:1e:ab:5f:9d:77:96:
3a:97:25:bd:56:93:23:2e:d9:93:da:11:6d:83:bf:
60:82:f5:5b:e5:71:27:f5:78:94:b8:1b:3e:3b:51:
ea:44:3d:bf:df:13:c0:52:e8:7e:19:9f:58:7e:be:
dc:79:e0:db:1c:be:7b:e9:4e:6a:71:de:c5:cb:70:
85:f2:d9:08:25:0b:8c:61:5c:5b:c1:56:65:a5:84:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0B:2E:B1:65:D0:BA:2A:4E:81:FF:A2:E2:CD:34:52:38:84:0C:39
X509v3 Authority Key Identifier:
keyid:64:7D:FE:07:32:9D:CD:B9:0B:5C:BA:D5:3C:0A:35:5D:A6:9C:44:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ec2e23c44f24767001626bdcf66010d00d9db8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/3ebf323bdaafb4991dd068516691fafdeb34dd61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/d8ec2e23c44f24767001626bdcf66010d00d9db8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.252.0/22
IPv6:
2806:335::/32
Signature Algorithm: sha256WithRSAEncryption
79:ce:d9:8d:44:50:30:07:83:7f:a0:36:69:69:b1:bd:80:e4:
71:d1:39:96:b6:49:8d:b7:f0:f5:6f:2c:0d:18:55:29:e2:4c:
d2:45:6e:36:c2:83:31:60:b7:1e:50:98:9a:a9:49:16:92:0f:
8c:0c:03:76:4e:2c:17:f4:01:6b:da:fc:e2:46:49:e6:93:44:
d2:75:14:79:ae:90:1f:6a:c2:59:e2:47:75:c3:56:dd:f6:aa:
54:bc:b1:35:f4:f1:9e:8b:2e:13:51:f0:e1:b5:d2:6c:fb:65:
48:13:71:a6:f6:e1:79:aa:f5:19:90:b3:e9:94:35:a4:e7:1f:
dc:dc:55:9b:63:3b:93:a6:6f:b1:23:d6:63:26:53:82:fd:4b:
8f:ef:61:65:7e:2a:47:84:55:66:b6:f6:5b:44:43:80:1c:ad:
5b:9d:d0:17:ce:a1:85:2f:02:3f:e4:ef:17:dc:e1:ec:ee:20:
cb:c5:ea:c1:b6:4e:23:21:75:2f:87:f8:aa:65:45:56:e2:3e:
e9:95:06:59:85:e8:ba:41:ea:13:41:02:81:e9:06:77:41:d0:
48:be:47:29:2e:38:04:d5:64:88:ac:1b:02:b4:d0:7a:17:8d:
a0:99:af:73:20:bb:43:0b:ed:2f:18:c2:6c:3b:57:57:7d:6a:
c1:24:b0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org