Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/16bd3b083f74a1ae821e1735a0d80e038a5f6b8e.roa
File: 16bd3b083f74a1ae821e1735a0d80e038a5f6b8e.roa (raw, json)
Hash identifier: PEvCJZH0KnH4fSiV7DYDreGzOlthIOHEnIBQCa25pRA=
Subject key identifier: 6A:A7:20:C2:CB:6D:68:6D:AB:56:D7:49:9F:65:2A:B4:9E:38:6D:9D
Certificate issuer: /CN=259c4fb25c604824d214cf7cbe588eab433a5691
Certificate serial: 25AF92
Authority key identifier: 3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/16bd3b083f74a1ae821e1735a0d80e038a5f6b8e.roa
Signing time: Tue 28 Nov 2023 21:24:19 +0000
ROA not before: Tue 28 Nov 2023 21:24:18 +0000
ROA not after: Fri 28 Nov 2025 21:24:18 +0000
asID: 52468
IP address blocks: 45.225.88.0/22 maxlen: 24
2803:e620::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2469778 (0x25af92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259c4fb25c604824d214cf7cbe588eab433a5691
Validity
Not Before: Nov 28 21:24:18 2023 GMT
Not After : Nov 28 21:24:18 2025 GMT
Subject: CN=16bd3b083f74a1ae821e1735a0d80e038a5f6b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:b3:4b:7e:c4:41:a7:eb:b1:20:fd:99:2c:
74:6b:b6:d5:4c:29:4a:18:c1:d3:84:5e:bf:38:3d:
e8:f7:5f:1e:4e:b8:03:27:b1:0d:3d:f6:fd:8f:70:
70:da:41:71:e0:23:c7:76:a6:11:54:9a:f5:ba:c1:
0d:74:97:33:58:0c:0d:ac:62:81:7e:ed:09:b3:54:
05:6b:75:38:08:e5:9e:14:b0:f3:99:99:a1:ae:ee:
d6:9b:2b:59:1e:66:82:10:f8:04:8b:13:42:16:1a:
44:92:c3:de:57:aa:c2:e8:a6:6b:c5:41:ab:5b:e4:
a6:f2:17:12:c9:01:38:2b:cb:e6:ed:a5:f3:76:ca:
3d:11:66:72:f4:3a:03:d6:43:bf:29:cd:5e:df:37:
a3:c9:1e:c9:35:8c:43:18:b4:0b:1f:ae:2d:03:85:
0a:c0:fe:5f:ce:3f:ff:4d:c7:40:13:62:96:83:7c:
e7:76:01:8e:da:7e:f2:a4:f0:a5:45:dc:46:77:f5:
ad:be:2c:2e:20:93:14:ec:eb:ba:78:2d:f6:29:39:
62:d9:f2:e0:87:de:e6:79:ed:01:a1:aa:7c:d9:e6:
93:7f:38:9c:d0:b8:4a:d7:95:c1:65:9c:ef:0f:d7:
4c:66:36:00:ee:1a:89:33:05:cf:bd:0f:80:6c:87:
ea:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A7:20:C2:CB:6D:68:6D:AB:56:D7:49:9F:65:2A:B4:9E:38:6D:9D
X509v3 Authority Key Identifier:
keyid:3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/16bd3b083f74a1ae821e1735a0d80e038a5f6b8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/259c4fb25c604824d214cf7cbe588eab433a5691.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.88.0/22
IPv6:
2803:e620::/32
Signature Algorithm: sha256WithRSAEncryption
20:60:fd:c1:0a:a9:61:df:cc:5a:82:55:73:6e:89:2a:8b:cf:
95:a0:ea:7f:43:d9:a4:f8:6d:fc:9b:72:36:9e:65:de:0e:c7:
12:ef:cc:5d:c6:8b:64:c5:d2:13:ad:3c:30:bc:6c:d9:6b:f2:
0f:fb:09:ea:c6:84:55:b2:d3:d3:ec:7e:be:f5:e9:36:5b:9a:
83:8a:40:3f:25:26:16:f8:ce:54:96:37:84:a4:48:65:3a:cb:
76:ec:34:9e:3e:43:15:ac:40:f3:46:33:b3:1c:4d:9d:2a:69:
d5:fb:b7:4e:d9:13:0d:6c:6d:78:ad:be:00:fd:fb:6d:7c:b9:
77:58:5e:aa:e9:81:37:f0:80:e7:5c:f2:09:d8:7c:d8:1d:a8:
3e:7f:43:a0:27:c0:50:77:ee:1d:ac:4b:19:30:ca:8a:1e:19:
90:07:ec:c9:15:72:90:f8:12:83:3c:61:96:90:14:1b:03:fd:
0b:ba:cb:2a:c6:6c:c1:8d:9b:3e:dd:c2:aa:c1:e0:49:b1:32:
f2:a4:59:35:e5:27:22:25:bf:c7:13:9a:70:e8:7d:eb:ab:13:
bf:84:10:3f:c9:aa:04:c4:1f:15:c5:dc:7f:99:66:42:9d:f7:
34:0b:32:a9:61:26:55:d0:c8:31:af:bb:73:81:96:32:a9:66:
6a:1c:81:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJa+SMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI1
OWM0ZmIyNWM2MDQ4MjRkMjE0Y2Y3Y2JlNTg4ZWFiNDMzYTU2OTEwHhcNMjMxMTI4
MjEyNDE4WhcNMjUxMTI4MjEyNDE4WjAzMTEwLwYDVQQDEygxNmJkM2IwODNmNzRh
MWFlODIxZTE3MzVhMGQ4MGUwMzhhNWY2YjhlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAno2zS37EQafrsSD9mSx0a7bVTClKGMHThF6/OD3o918eTrgD
J7ENPfb9j3Bw2kFx4CPHdqYRVJr1usENdJczWAwNrGKBfu0Js1QFa3U4COWeFLDz
mZmhru7WmytZHmaCEPgEixNCFhpEksPeV6rC6KZrxUGrW+Sm8hcSyQE4K8vm7aXz
dso9EWZy9DoD1kO/Kc1e3zejyR7JNYxDGLQLH64tA4UKwP5fzj//TcdAE2KWg3zn
dgGO2n7ypPClRdxGd/WtviwuIJMU7Ou6eC32KTli2fLgh97mee0Boap82eaTfzic
0LhK15XBZZzvD9dMZjYA7hqJMwXPvQ+AbIfqQwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFGqnIMLLbWhtq1bXSZ9lKrSeOG2dMB8GA1UdIwQYMBaAFD8xyFQuUl5pMP7j
QvBA2I0HNG7QMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjU5YzRm
YjI1YzYwNDgyNGQyMTRjZjdjYmU1ODhlYWI0MzNhNTY5MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmZjNDJmZGYtMmQ4Yi00NmE1LThmOWItNjhkNmUz
NDAzZTRlLzE2YmQzYjA4M2Y3NGExYWU4MjFlMTczNWEwZDgwZTAzOGE1ZjZiOGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZmM0MmZkZi0yZDhiLTQ2YTUtOGY5Yi02OGQ2
ZTM0MDNlNGUvMjU5YzRmYjI1YzYwNDgyNGQyMTRjZjdjYmU1ODhlYWI0MzNhNTY5
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3hWDANBAIAAjAHAwUAKAPmIDANBgkqhkiG9w0BAQsFAAOC
AQEAIGD9wQqpYd/MWoJVc26JKovPlaDqf0PZpPht/JtyNp5l3g7HEu/MXcaLZMXS
E608MLxs2WvyD/sJ6saEVbLT0+x+vvXpNluag4pAPyUmFvjOVJY3hKRIZTrLduw0
nj5DFaxA80YzsxxNnSpp1fu3TtkTDWxteK2+AP37bXy5d1hequmBN/CA51zyCdh8
2B2oPn9DoCfAUHfuHaxLGTDKih4ZkAfsyRVykPgSgzxhlpAUGwP9C7rLKsZswY2b
Pt3CqsHgSbEy8qRZNeUnIiW/xxOacOh966sTv4QQP8mqBMQfFcXcf5lmQp33NAsy
qWEmVdDIMa+7c4GWMqlmahyBmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org