Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/4f8017e464e4acf199c8999a66b8968db6a9fd91.roa
File: 4f8017e464e4acf199c8999a66b8968db6a9fd91.roa (raw, json)
Hash identifier: fS/V8gdbeZZA+4LUbpJBhZDp9megHFrNUiYJNKdyRuA=
Subject key identifier: 26:FC:A5:DF:89:89:68:79:8A:D0:3B:ED:D6:34:59:E3:08:8C:07:4F
Certificate issuer: /CN=4f4a3f6a5dda9af6f797130aab25f404e1f2bead
Certificate serial: 29A56B
Authority key identifier: FC:51:EC:49:E9:2D:C6:1B:08:AF:9B:C8:D8:AD:42:E9:4D:B7:4C:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f4a3f6a5dda9af6f797130aab25f404e1f2bead.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/4f8017e464e4acf199c8999a66b8968db6a9fd91.roa
Signing time: Mon 01 Apr 2024 18:51:26 +0000
ROA not before: Mon 01 Apr 2024 18:51:26 +0000
ROA not after: Sun 01 Apr 2029 18:51:26 +0000
asID: 395161
IP address blocks: 170.80.108.0/22 maxlen: 24
138.186.140.0/22 maxlen: 24
45.228.67.0/24 maxlen: 24
190.103.176.0/22 maxlen: 24
2800:ba0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2729323 (0x29a56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4a3f6a5dda9af6f797130aab25f404e1f2bead
Validity
Not Before: Apr 1 18:51:26 2024 GMT
Not After : Apr 1 18:51:26 2029 GMT
Subject: CN=4f8017e464e4acf199c8999a66b8968db6a9fd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:e2:da:9c:bc:ca:b4:28:7e:ef:27:93:38:
0a:fd:1d:70:83:c3:46:a2:9e:bd:85:16:c3:b0:9f:
d3:cc:b8:03:9e:00:90:0a:4c:02:a0:26:09:dc:41:
fc:2c:e4:3f:e7:46:2c:85:85:59:41:dc:a8:d7:41:
47:c7:62:74:14:07:7e:b8:0c:fa:0d:33:54:34:83:
40:99:38:67:85:29:71:97:81:52:49:2c:bc:d4:59:
f9:fb:ee:ae:6b:10:0e:b4:63:e9:9a:f9:a4:78:25:
30:db:08:97:f1:28:da:d3:79:07:44:a2:37:5e:46:
a8:6e:36:43:c6:21:56:61:7f:a2:cd:4a:87:2f:9a:
ca:83:23:b1:5c:0e:9b:5a:4c:76:1a:13:9c:a4:b3:
a8:42:6e:11:ef:74:5a:6b:89:28:cc:77:ca:cd:fd:
97:74:86:a9:a8:4f:85:94:29:31:a6:e1:b5:43:bf:
29:d4:6c:84:72:0b:d8:92:8f:a5:a0:c1:e5:13:0b:
4c:3f:f1:53:9e:7a:80:ac:bd:bc:d0:88:26:98:f9:
6a:d8:fa:e1:7d:5a:f8:69:d0:e6:56:9e:47:f6:aa:
ec:1d:6c:b7:96:78:d3:01:72:5d:9e:7b:f3:aa:4f:
be:56:2a:f4:39:16:c9:45:66:0a:26:25:25:f8:e2:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FC:A5:DF:89:89:68:79:8A:D0:3B:ED:D6:34:59:E3:08:8C:07:4F
X509v3 Authority Key Identifier:
keyid:FC:51:EC:49:E9:2D:C6:1B:08:AF:9B:C8:D8:AD:42:E9:4D:B7:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f4a3f6a5dda9af6f797130aab25f404e1f2bead.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/4f8017e464e4acf199c8999a66b8968db6a9fd91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/4f4a3f6a5dda9af6f797130aab25f404e1f2bead.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.67.0/24
138.186.140.0/22
170.80.108.0/22
190.103.176.0/22
IPv6:
2800:ba0::/32
Signature Algorithm: sha256WithRSAEncryption
66:b2:54:e5:86:e3:75:36:00:3d:a6:ba:69:31:69:25:36:3b:
63:80:3a:5b:eb:d9:b9:09:1c:92:a9:35:f2:8d:1a:a1:4b:8f:
81:ab:0d:85:49:d3:25:dd:75:70:b7:52:1a:4f:75:dd:10:97:
33:eb:ff:e1:0f:f4:34:c2:fe:91:2f:63:ce:5f:65:d5:8b:ed:
74:12:01:c5:fd:ac:07:c4:db:a0:29:84:59:7a:68:62:0f:7e:
f3:80:98:9a:ed:80:a8:53:ca:5e:3d:5c:67:ee:ab:3a:fb:a2:
c9:f7:98:00:cc:f7:91:d6:2a:a2:e6:58:75:99:e6:68:55:a7:
86:4c:7f:47:97:1f:f7:10:0b:d3:48:d8:b4:a6:4c:9f:95:e4:
87:9c:ba:a7:e0:13:dd:45:64:e9:22:c0:63:94:f0:72:7e:fd:
0e:5b:9b:86:31:9b:9a:05:88:f8:64:68:6e:2f:08:b4:ea:52:
6f:74:7d:08:8f:af:fa:2a:a3:b9:5e:4e:d7:3e:38:f5:fe:36:
a1:ab:e4:8a:d9:e7:92:aa:a6:df:1f:10:b6:85:39:44:9a:06:
6f:05:29:a4:56:b6:92:0e:ba:1c:16:31:e3:94:b0:fe:c7:32:
bc:ee:3c:ea:33:cc:69:5f:2e:fa:c0:b6:10:29:b7:06:36:a2:
73:41:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org