Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0043f52c-eeee-4d62-97e6-44c83c8beb9f/409dd7f86ca76154315fb44c4f3d05d3dcc32bad.roa
File: 409dd7f86ca76154315fb44c4f3d05d3dcc32bad.roa (raw, json)
Hash identifier: eb7EBKJxniFzc1rYO5Cj6MIXRlKSIADH+Icua9iv4aE=
Subject key identifier: B8:1F:52:70:AF:7C:C9:DA:24:07:58:04:3B:7E:EB:4B:C5:E6:A8:56
Certificate issuer: /CN=52c92f5118962db5a899e9bac9cd1d931aba8f4d
Certificate serial: 1CE593
Authority key identifier: 5B:BD:B3:E1:5B:11:33:CA:60:D5:51:94:0B:65:E4:BC:C0:91:77:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c92f5118962db5a899e9bac9cd1d931aba8f4d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0043f52c-eeee-4d62-97e6-44c83c8beb9f/409dd7f86ca76154315fb44c4f3d05d3dcc32bad.roa
Signing time: Tue 24 Jan 2023 14:08:09 +0000
ROA not before: Mon 23 Jan 2023 14:07:11 +0000
ROA not after: Fri 24 Jan 2025 14:07:11 +0000
asID: 264716
IP address blocks: 45.173.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1893779 (0x1ce593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c92f5118962db5a899e9bac9cd1d931aba8f4d
Validity
Not Before: Jan 23 14:07:11 2023 GMT
Not After : Jan 24 14:07:11 2025 GMT
Subject: CN=409dd7f86ca76154315fb44c4f3d05d3dcc32bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:a7:3b:00:c1:33:92:e1:dc:21:49:00:a3:
bb:fb:33:bd:5b:a8:1a:50:68:5e:2e:a3:9f:52:29:
14:cd:5b:c9:09:81:2a:3b:b0:07:93:57:87:c0:8d:
74:f5:1f:5c:56:ce:9a:06:3d:c6:85:b6:66:1d:9e:
81:74:80:e1:ef:78:b1:b1:97:da:0f:e5:34:bd:8b:
91:2e:22:2b:d2:a0:c5:f8:b9:a6:63:1c:01:99:13:
00:99:f4:f6:d4:f9:4d:98:dc:94:c2:f1:e9:da:c2:
8d:63:1d:da:0a:65:f8:16:4c:d4:91:b6:b8:a9:5a:
85:26:8e:84:ce:14:f8:e6:72:6b:b8:a5:89:bd:01:
5f:47:01:70:fd:30:74:73:a2:8f:c1:ff:d7:79:8d:
0f:cf:03:6a:68:c8:81:0b:80:b3:ea:95:89:c5:df:
62:b7:a9:9f:9c:3a:b8:40:8a:d3:71:04:a1:ff:c3:
1a:c0:87:26:03:0d:f0:56:ea:d3:e2:09:53:4c:f0:
8f:f4:8d:c5:67:67:85:cc:4d:2c:33:f8:44:94:e5:
39:fd:75:66:23:c8:64:fb:9f:00:1d:3a:cf:86:eb:
be:ac:4c:5f:78:b6:a6:0b:74:31:dd:d6:ef:4d:42:
c0:cc:f5:4e:7f:16:ae:91:1a:66:be:d7:21:28:35:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1F:52:70:AF:7C:C9:DA:24:07:58:04:3B:7E:EB:4B:C5:E6:A8:56
X509v3 Authority Key Identifier:
keyid:5B:BD:B3:E1:5B:11:33:CA:60:D5:51:94:0B:65:E4:BC:C0:91:77:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c92f5118962db5a899e9bac9cd1d931aba8f4d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0043f52c-eeee-4d62-97e6-44c83c8beb9f/409dd7f86ca76154315fb44c4f3d05d3dcc32bad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0043f52c-eeee-4d62-97e6-44c83c8beb9f/52c92f5118962db5a899e9bac9cd1d931aba8f4d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.60.0/22
Signature Algorithm: sha256WithRSAEncryption
25:ff:2b:37:9c:5c:3e:85:a2:83:ed:04:1c:af:5a:2c:74:bb:
a3:4a:12:b8:bc:91:5c:b4:60:33:b8:e1:01:08:59:b6:c8:8a:
e7:40:8e:42:45:84:78:ad:30:e4:9b:c5:cd:f3:41:52:f8:13:
28:46:82:7c:04:33:2d:8d:4f:1c:55:f3:3a:aa:ae:cd:bd:7f:
27:4c:78:db:0f:8c:45:55:e4:bf:f7:50:79:a6:19:4f:1b:d9:
29:7a:10:31:13:d4:d6:be:27:5d:5f:ed:98:2c:41:b4:d3:b7:
6c:6d:13:4f:b4:cc:92:7d:05:fe:e3:4b:00:26:a8:41:25:bb:
5a:ba:7e:6f:0e:1c:11:6b:09:f9:11:aa:d2:17:db:5c:ba:03:
d6:9b:fc:4c:97:ea:1e:39:0d:a4:d5:aa:82:39:74:42:62:b3:
5d:92:62:f8:83:73:4c:5a:d0:6c:93:12:e4:86:a6:80:40:84:
dc:d5:ac:6c:df:1e:5f:e2:1c:01:f5:76:70:6e:2b:11:b6:ed:
44:43:d2:ac:af:5d:cd:0a:ec:db:b9:16:09:8f:70:3a:e6:70:
bf:59:83:9a:f7:16:38:ad:34:f3:fc:83:fa:09:14:61:1b:a3:
ab:16:aa:87:27:9c:5b:cf:02:2b:68:4d:bc:55:21:ce:09:7d:
0c:fe:48:43
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHOWTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUy
YzkyZjUxMTg5NjJkYjVhODk5ZTliYWM5Y2QxZDkzMWFiYThmNGQwHhcNMjMwMTIz
MTQwNzExWhcNMjUwMTI0MTQwNzExWjAzMTEwLwYDVQQDEyg0MDlkZDdmODZjYTc2
MTU0MzE1ZmI0NGM0ZjNkMDVkM2RjYzMyYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr7qnOwDBM5Lh3CFJAKO7+zO9W6gaUGheLqOfUikUzVvJCYEq
O7AHk1eHwI109R9cVs6aBj3GhbZmHZ6BdIDh73ixsZfaD+U0vYuRLiIr0qDF+Lmm
YxwBmRMAmfT21PlNmNyUwvHp2sKNYx3aCmX4FkzUkba4qVqFJo6EzhT45nJruKWJ
vQFfRwFw/TB0c6KPwf/XeY0PzwNqaMiBC4Cz6pWJxd9it6mfnDq4QIrTcQSh/8Ma
wIcmAw3wVurT4glTTPCP9I3FZ2eFzE0sM/hElOU5/XVmI8hk+58AHTrPhuu+rExf
eLamC3Qx3dbvTULAzPVOfxaukRpmvtchKDVkNwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLgfUnCvfMnaJAdYBDt+60vF5qhWMB8GA1UdIwQYMBaAFFu9s+FbETPKYNVR
lAtl5LzAkXcSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTJjOTJm
NTExODk2MmRiNWE4OTllOWJhYzljZDFkOTMxYWJhOGY0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDA0M2Y1MmMtZWVlZS00ZDYyLTk3ZTYtNDRjODNj
OGJlYjlmLzQwOWRkN2Y4NmNhNzYxNTQzMTVmYjQ0YzRmM2QwNWQzZGNjMzJiYWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMDQzZjUyYy1lZWVlLTRkNjItOTdlNi00NGM4
M2M4YmViOWYvNTJjOTJmNTExODk2MmRiNWE4OTllOWJhYzljZDFkOTMxYWJhOGY0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2tPDANBgkqhkiG9w0BAQsFAAOCAQEAJf8rN5xcPoWig+0E
HK9aLHS7o0oSuLyRXLRgM7jhAQhZtsiK50COQkWEeK0w5JvFzfNBUvgTKEaCfAQz
LY1PHFXzOqquzb1/J0x42w+MRVXkv/dQeaYZTxvZKXoQMRPU1r4nXV/tmCxBtNO3
bG0TT7TMkn0F/uNLACaoQSW7Wrp+bw4cEWsJ+RGq0hfbXLoD1pv8TJfqHjkNpNWq
gjl0QmKzXZJi+INzTFrQbJMS5IamgECE3NWsbN8eX+IcAfV2cG4rEbbtREPSrK9d
zQrs27kWCY9wOuZwv1mDmvcWOK008/yD+gkUYRujqxaqhyecW88CK2hNvFUhzgl9
DP5IQw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org