Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/3820f2f02be01a88c17ba72c85bbbd0dd762c488.roa
File: 3820f2f02be01a88c17ba72c85bbbd0dd762c488.roa (raw, json)
Hash identifier: eRFj/bvLK3yzJq8iyTfzvFt2zEz1yl9BCp+dp2IjKnI=
Subject key identifier: C4:09:88:42:C3:C5:C6:55:4D:FB:6B:3B:71:31:F1:CE:36:63:A9:CF
Certificate issuer: /CN=16cac609d27670b5b41abda1b583a7f15ce48526
Certificate serial: 19C483
Authority key identifier: 5F:FE:ED:ED:D2:B0:8C:CB:53:5E:F1:A2:2A:34:3F:36:E3:88:8B:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16cac609d27670b5b41abda1b583a7f15ce48526.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/3820f2f02be01a88c17ba72c85bbbd0dd762c488.roa
Signing time: Fri 24 Mar 2023 08:31:39 +0000
ROA not before: Thu 23 Mar 2023 08:31:39 +0000
ROA not after: Sat 22 Mar 2025 08:31:39 +0000
asID: 267680
IP address blocks: 45.163.36.0/24 maxlen: 24
45.163.37.0/24 maxlen: 24
45.163.38.0/24 maxlen: 24
45.163.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1688707 (0x19c483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cac609d27670b5b41abda1b583a7f15ce48526
Validity
Not Before: Mar 23 08:31:39 2023 GMT
Not After : Mar 22 08:31:39 2025 GMT
Subject: CN=3820f2f02be01a88c17ba72c85bbbd0dd762c488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:3f:7e:e0:b4:13:b9:99:0b:cb:fd:4e:c2:
66:01:c2:25:52:62:f7:9b:65:cc:7c:05:97:ec:a2:
06:9f:92:1c:4c:ca:1d:ec:ad:7a:4c:db:b1:a1:fc:
b4:33:e4:83:e7:57:29:85:d3:6c:ae:ac:85:ba:e8:
46:5d:35:6d:af:46:d7:71:0a:49:15:58:82:ba:b0:
02:f5:94:c0:71:25:75:65:49:64:24:14:a0:f6:df:
d7:5c:8f:6f:eb:e4:77:40:f8:bd:4a:2e:c4:49:c0:
a4:8b:45:c4:92:a4:a9:64:d9:b4:3c:c8:10:4c:46:
5f:c2:c2:38:b5:49:40:ef:1c:06:10:f4:c4:16:e8:
75:48:ed:4b:d4:f4:02:d8:94:ea:44:d0:7d:3e:de:
6c:33:b8:04:b8:4b:a9:54:2c:90:fa:b9:f0:43:60:
25:db:14:2c:86:4a:f0:ba:19:9c:04:75:7d:5d:c2:
b5:54:03:47:7e:f6:89:a6:13:bb:d4:63:30:1c:f7:
87:e5:aa:0c:a8:a7:c9:95:19:65:f9:71:ec:66:44:
ff:38:c0:40:bf:0c:40:57:a2:40:65:d4:f1:12:94:
d8:19:79:8e:d8:24:dd:14:af:35:83:9f:08:58:2a:
ea:03:b4:a5:c4:57:0f:76:cc:22:97:d2:d2:fe:93:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:09:88:42:C3:C5:C6:55:4D:FB:6B:3B:71:31:F1:CE:36:63:A9:CF
X509v3 Authority Key Identifier:
keyid:5F:FE:ED:ED:D2:B0:8C:CB:53:5E:F1:A2:2A:34:3F:36:E3:88:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16cac609d27670b5b41abda1b583a7f15ce48526.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/3820f2f02be01a88c17ba72c85bbbd0dd762c488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/16cac609d27670b5b41abda1b583a7f15ce48526.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.36.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:86:24:3c:fc:4b:63:a7:2b:95:5c:24:6c:35:ec:7b:e7:57:
ed:82:fb:5c:16:f2:b8:0d:dc:eb:b4:d4:44:f8:51:4b:92:45:
84:f7:37:50:56:76:b9:bc:8e:5e:62:da:a7:f2:2d:14:b6:06:
8e:ad:7b:c7:21:9b:a4:e2:98:51:15:f7:ea:36:0e:a1:c8:ba:
ed:5c:27:e3:88:21:c9:5c:92:76:5b:c9:22:c9:8c:22:57:75:
36:0a:3b:f7:e0:78:a7:67:fb:63:81:50:89:71:e0:d1:ee:af:
a2:4f:1d:39:e0:ba:30:66:c5:7e:34:a2:7e:13:32:76:15:63:
d2:0b:c7:12:ca:70:de:87:b0:40:0a:6c:e6:9b:fa:ed:5a:4b:
63:00:1c:18:b7:be:55:cb:28:40:29:8b:b0:d0:79:7b:6c:44:
4e:a8:76:27:47:a8:59:dc:98:d0:90:d5:97:46:00:f8:6c:f5:
98:ce:3b:b3:e7:a9:ee:51:e1:1a:12:f8:d8:77:71:0b:ad:15:
85:28:8f:db:24:87:cd:78:30:16:d4:d9:81:af:3c:ac:5d:96:
11:ca:e2:a2:76:54:a8:ec:00:ab:b1:d9:f4:7b:41:20:ef:49:
39:86:e4:69:aa:7e:67:2b:6e:53:fd:d8:cf:10:9e:62:f7:48:
ce:c8:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org