Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/71fec9b1c23594aa816be97a1742c5f81d99c021.roa
File: 71fec9b1c23594aa816be97a1742c5f81d99c021.roa (raw, json)
Hash identifier: wLnzvOfxxGA93kftswElxwqa01LdccFcC+Rh/OTUKKo=
Subject key identifier: AB:62:A4:9F:1F:57:8F:F3:03:84:86:73:5B:7C:C4:EB:7B:CA:F4:D3
Certificate issuer: /CN=68daa985947750b9a7aa4090e0e120abbd088f1b
Certificate serial: 122ABD
Authority key identifier: 79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/71fec9b1c23594aa816be97a1742c5f81d99c021.roa
Signing time: Fri 29 Sep 2023 08:30:01 +0000
ROA not before: Thu 28 Sep 2023 08:30:01 +0000
ROA not after: Sat 27 Sep 2025 08:30:01 +0000
asID: 265849
IP address blocks: 45.224.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190589 (0x122abd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68daa985947750b9a7aa4090e0e120abbd088f1b
Validity
Not Before: Sep 28 08:30:01 2023 GMT
Not After : Sep 27 08:30:01 2025 GMT
Subject: CN=71fec9b1c23594aa816be97a1742c5f81d99c021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:54:b6:31:7a:c0:c7:2a:59:9f:fc:a0:32:
f6:13:8d:3b:e7:04:9d:93:4e:c2:66:34:f2:a7:06:
a1:e6:9b:e2:8c:b8:30:b5:e8:02:e0:4c:0d:7b:9f:
6c:b2:29:e1:2c:fc:9a:3a:a9:72:12:f2:c2:46:11:
cc:dc:81:26:bd:c4:d0:da:bf:11:e0:af:eb:08:16:
8f:58:00:ee:49:f5:cf:4c:77:07:68:92:8b:b9:d8:
49:71:46:cf:59:10:36:e2:32:57:ed:5a:96:51:cf:
86:4f:24:84:80:7f:65:ba:8d:18:c7:e6:40:94:c6:
c8:95:e9:24:c3:13:13:dd:e1:b2:92:25:25:91:77:
fa:b4:14:93:b4:85:e9:0d:06:ba:fc:49:da:5f:65:
8a:b6:f6:87:41:ad:f6:21:59:ae:ab:37:a5:d2:df:
ca:85:a9:9e:fc:85:6c:8e:7f:9a:9c:b5:e7:c5:f8:
85:bb:56:10:6e:15:6b:42:21:80:c0:e5:e0:a8:62:
13:f1:77:e7:1c:91:69:ab:64:e9:b6:b1:e4:ad:c3:
ac:49:a0:a8:ac:02:5d:9f:48:ba:6b:88:6e:da:b3:
48:9e:dd:e1:f4:1b:8b:b8:bd:71:a5:8f:49:7a:dc:
29:7d:ac:9d:c7:b4:c6:30:84:62:ec:8d:6c:26:37:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:62:A4:9F:1F:57:8F:F3:03:84:86:73:5B:7C:C4:EB:7B:CA:F4:D3
X509v3 Authority Key Identifier:
keyid:79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/71fec9b1c23594aa816be97a1742c5f81d99c021.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.228.0/22
Signature Algorithm: sha256WithRSAEncryption
97:eb:e4:ad:9e:f4:1c:37:fb:f1:36:11:23:87:8b:c5:cc:cf:
22:b6:6c:b0:bf:b7:12:5e:5c:30:bb:11:e5:d5:5f:f0:ca:3e:
54:17:b8:f8:c8:bb:7e:ee:64:bd:21:a3:ea:d7:79:bc:ac:7e:
9c:d6:1e:db:f2:70:c2:32:61:27:61:eb:25:55:73:1c:4a:70:
c6:df:74:b3:34:75:ec:55:40:50:56:49:4b:3d:cf:a4:77:c3:
d6:10:01:ad:1e:df:e4:e3:da:d4:28:55:fe:50:57:09:86:ac:
e4:27:0c:f7:41:f4:d9:8b:ac:f7:b1:2e:93:7f:fc:69:e9:42:
0f:21:79:e5:2a:4a:b4:93:3a:21:c1:77:77:19:ae:cc:c7:0e:
a4:cc:07:79:d5:f7:4f:56:61:2a:d5:89:d7:6f:1d:ca:e3:3c:
ce:8b:a3:bf:26:ac:8c:59:fc:ae:63:bd:75:fd:b6:e1:5c:2e:
f3:50:08:72:9b:a1:62:23:fa:01:ba:df:51:c0:c3:cb:9b:bb:
a1:a9:84:bc:97:c3:cf:64:d5:e4:4a:d1:9f:44:eb:08:33:1c:
c7:e4:98:1b:ec:5b:45:a8:44:e8:7d:ed:8a:0d:d8:58:5f:44:
af:f4:f8:aa:9a:9b:b7:59:93:6c:41:e3:5c:7e:60:81:6d:49:
cc:e3:8c:96
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEiq9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY4
ZGFhOTg1OTQ3NzUwYjlhN2FhNDA5MGUwZTEyMGFiYmQwODhmMWIwHhcNMjMwOTI4
MDgzMDAxWhcNMjUwOTI3MDgzMDAxWjAzMTEwLwYDVQQDEyg3MWZlYzliMWMyMzU5
NGFhODE2YmU5N2ExNzQyYzVmODFkOTljMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqMhUtjF6wMcqWZ/8oDL2E4075wSdk07CZjTypwah5pvijLgw
tegC4EwNe59ssinhLPyaOqlyEvLCRhHM3IEmvcTQ2r8R4K/rCBaPWADuSfXPTHcH
aJKLudhJcUbPWRA24jJX7VqWUc+GTySEgH9luo0Yx+ZAlMbIlekkwxMT3eGykiUl
kXf6tBSTtIXpDQa6/EnaX2WKtvaHQa32IVmuqzel0t/Khame/IVsjn+anLXnxfiF
u1YQbhVrQiGAwOXgqGIT8XfnHJFpq2TptrHkrcOsSaCorAJdn0i6a4hu2rNInt3h
9BuLuL1xpY9Jetwpfaydx7TGMIRi7I1sJjeO0wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKtipJ8fV4/zA4SGc1t8xOt7yvTTMB8GA1UdIwQYMBaAFHkaJ9QtRhr5Owrw
FBU6neTSCDIfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjhkYWE5
ODU5NDc3NTBiOWE3YWE0MDkwZTBlMTIwYWJiZDA4OGYxYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDA5NGNkZWItNDUxZi00ZmM1LTk0MzktYzExMjFm
ZjM3YmFlLzcxZmVjOWIxYzIzNTk0YWE4MTZiZTk3YTE3NDJjNWY4MWQ5OWMwMjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMDk0Y2RlYi00NTFmLTRmYzUtOTQzOS1jMTEy
MWZmMzdiYWUvNjhkYWE5ODU5NDc3NTBiOWE3YWE0MDkwZTBlMTIwYWJiZDA4OGYx
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3g5DANBgkqhkiG9w0BAQsFAAOCAQEAl+vkrZ70HDf78TYR
I4eLxczPIrZssL+3El5cMLsR5dVf8Mo+VBe4+Mi7fu5kvSGj6td5vKx+nNYe2/Jw
wjJhJ2HrJVVzHEpwxt90szR17FVAUFZJSz3PpHfD1hABrR7f5OPa1ChV/lBXCYas
5CcM90H02Yus97Euk3/8aelCDyF55SpKtJM6IcF3dxmuzMcOpMwHedX3T1ZhKtWJ
128dyuM8zoujvyasjFn8rmO9df224Vwu81AIcpuhYiP6AbrfUcDDy5u7oamEvJfD
z2TV5ErRn0TrCDMcx+SYG+xbRahE6H3tig3YWF9Er/T4qpqbt1mTbEHjXH5ggW1J
zOOMlg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org