Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/2a1a88082e4cceee01d5ca44c380b83fb83d397e.roa
File: 2a1a88082e4cceee01d5ca44c380b83fb83d397e.roa (raw, json)
Hash identifier: Zpf9wNgMyIbrlM+I7QVrzVBSp3AyATI/UvHeaIOIXyE=
Subject key identifier: 20:90:64:DC:16:02:26:EF:B7:4F:34:9A:DD:12:9A:49:9E:ED:07:E2
Certificate issuer: /CN=6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f
Certificate serial: 01E8D3
Authority key identifier: 2B:D5:1B:00:F7:B1:F7:25:AC:C3:A4:8D:4C:AF:F5:01:E7:7F:9F:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/2a1a88082e4cceee01d5ca44c380b83fb83d397e.roa
Signing time: Thu 11 Apr 2024 11:28:55 +0000
ROA not before: Thu 11 Apr 2024 11:28:54 +0000
ROA not after: Sat 11 Apr 2026 11:28:54 +0000
asID: 273165
IP address blocks: 45.68.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125139 (0x1e8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f
Validity
Not Before: Apr 11 11:28:54 2024 GMT
Not After : Apr 11 11:28:54 2026 GMT
Subject: CN=2a1a88082e4cceee01d5ca44c380b83fb83d397e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:c1:1e:5a:ec:c2:f3:41:24:9f:70:5a:3d:
5d:81:25:5b:80:f1:80:11:1a:1d:89:75:71:a7:d6:
45:45:3d:f0:d9:ce:e1:62:94:a8:50:0f:d0:76:35:
ff:4e:b7:94:97:8e:d1:29:21:e1:60:87:3d:35:23:
2d:a3:02:24:7e:6b:b6:09:41:e4:ad:4c:bf:9a:25:
dd:f0:31:9d:e5:da:c0:49:a2:83:d7:73:b9:d8:53:
77:a5:b5:30:67:0e:18:a3:b1:77:29:75:1e:81:e9:
e0:3b:c9:e3:be:c7:8a:bf:06:61:fe:2f:42:b9:c6:
11:6e:89:31:6c:9c:df:ea:e7:b8:c8:ee:dc:83:cf:
af:e6:2e:98:b2:3f:b1:63:11:8f:6a:33:92:58:4f:
a3:10:cf:60:c5:c4:e8:ff:06:e4:c4:88:7a:ba:3f:
49:26:b1:c9:86:11:ac:49:0a:74:b3:7e:b1:b6:e7:
86:c6:fe:c0:00:91:85:4e:b8:e8:17:c2:b8:fe:e9:
62:81:02:4f:c3:fa:b4:e4:83:de:72:b5:d7:6e:0d:
55:02:a4:69:46:75:14:bd:2c:04:55:6b:32:69:39:
31:7b:e4:14:f4:d6:31:30:1a:95:8a:6c:00:82:60:
ac:f9:7d:e4:22:14:1f:7c:e1:34:2f:d0:c2:56:1d:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:64:DC:16:02:26:EF:B7:4F:34:9A:DD:12:9A:49:9E:ED:07:E2
X509v3 Authority Key Identifier:
keyid:2B:D5:1B:00:F7:B1:F7:25:AC:C3:A4:8D:4C:AF:F5:01:E7:7F:9F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/2a1a88082e4cceee01d5ca44c380b83fb83d397e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ba:b0:a1:77:ea:38:41:2a:f5:2a:dd:4b:69:5c:f9:d9:8e:
41:67:40:23:a9:04:ab:3d:a5:ce:47:b5:19:7a:13:e8:5b:5a:
b4:f7:b8:97:01:fa:33:82:41:09:e5:ea:30:07:f1:5a:a6:43:
f6:68:b5:6c:39:dd:59:d7:44:91:87:c6:09:aa:07:42:30:71:
a5:4b:e6:ad:82:df:a1:28:c0:10:31:93:7c:aa:34:fc:60:21:
33:79:75:bd:c6:d6:a8:9a:da:5b:40:4a:11:65:16:d3:d1:45:
33:79:70:8a:6f:99:96:0c:1a:e4:c1:db:dc:8e:9d:d8:99:b4:
99:3e:b9:f7:72:96:d2:51:55:32:82:19:73:6b:42:3c:c4:60:
df:3d:d2:4a:0a:c0:88:53:0f:44:6e:07:f1:5a:59:d5:6d:f8:
a5:11:d1:56:f5:4c:a4:4a:3c:7f:a5:02:8e:68:d6:85:5b:33:
e5:ac:5f:c5:a1:1d:58:70:fa:94:8e:1d:da:0b:69:e1:4e:51:
1c:0a:df:8b:8e:62:04:23:8b:2e:23:31:10:a6:fd:72:dd:d3:
5e:1f:59:f1:0a:0d:4b:ed:dd:1b:66:bd:f8:61:c5:22:ac:65:
00:ac:30:91:c4:85:c8:23:1e:55:6f:56:f2:74:61:e7:dc:03:
bc:13:e6:5c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAejTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYz
NTY4NTNiNWZiZmQ5OTczZTZiZjhmNjg3YjIyZTlhYjdiNGNiM2YwHhcNMjQwNDEx
MTEyODU0WhcNMjYwNDExMTEyODU0WjAzMTEwLwYDVQQDEygyYTFhODgwODJlNGNj
ZWVlMDFkNWNhNDRjMzgwYjgzZmI4M2QzOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkITBHlrswvNBJJ9wWj1dgSVbgPGAERodiXVxp9ZFRT3w2c7h
YpSoUA/QdjX/TreUl47RKSHhYIc9NSMtowIkfmu2CUHkrUy/miXd8DGd5drASaKD
13O52FN3pbUwZw4Yo7F3KXUegengO8njvseKvwZh/i9CucYRbokxbJzf6ue4yO7c
g8+v5i6Ysj+xYxGPajOSWE+jEM9gxcTo/wbkxIh6uj9JJrHJhhGsSQp0s36xtueG
xv7AAJGFTrjoF8K4/uligQJPw/q05IPecrXXbg1VAqRpRnUUvSwEVWsyaTkxe+QU
9NYxMBqVimwAgmCs+X3kIhQffOE0L9DCVh0j5QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCCQZNwWAibvt080mt0Smkme7QfiMB8GA1UdIwQYMBaAFCvVGwD3sfclrMOk
jUyv9QHnf59VMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjM1Njg1
M2I1ZmJmZDk5NzNlNmJmOGY2ODdiMjJlOWFiN2I0Y2IzZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWMxZWUzYTUtNjc5Yy00NDljLWIxOGUtM2JlYmNm
ZGEzMzRmLzJhMWE4ODA4MmU0Y2NlZWUwMWQ1Y2E0NGMzODBiODNmYjgzZDM5N2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YzFlZTNhNS02NzljLTQ0OWMtYjE4ZS0zYmVi
Y2ZkYTMzNGYvNjM1Njg1M2I1ZmJmZDk5NzNlNmJmOGY2ODdiMjJlOWFiN2I0Y2Iz
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC1ENDANBgkqhkiG9w0BAQsFAAOCAQEAXrqwoXfqOEEq9Srd
S2lc+dmOQWdAI6kEqz2lzke1GXoT6FtatPe4lwH6M4JBCeXqMAfxWqZD9mi1bDnd
WddEkYfGCaoHQjBxpUvmrYLfoSjAEDGTfKo0/GAhM3l1vcbWqJraW0BKEWUW09FF
M3lwim+Zlgwa5MHb3I6d2Jm0mT6593KW0lFVMoIZc2tCPMRg3z3SSgrAiFMPRG4H
8VpZ1W34pRHRVvVMpEo8f6UCjmjWhVsz5axfxaEdWHD6lI4d2gtp4U5RHArfi45i
BCOLLiMxEKb9ct3TXh9Z8QoNS+3dG2a9+GHFIqxlAKwwkcSFyCMeVW9W8nRh59wD
vBPmXA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org