Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/1a2da50bd93625add8a8491220b64eba9aec0845.roa
File: 1a2da50bd93625add8a8491220b64eba9aec0845.roa (raw, json)
Hash identifier: R6pRP0MA9KEyVNcTf55P+Pc+eSqAfWcM23Q9gm5QocE=
Subject key identifier: 85:9F:E3:21:7A:19:55:F0:50:2C:2B:25:6D:FB:A4:48:3A:71:99:1B
Certificate issuer: /CN=f6fe25a266009db467ead60d5ec947af0402cb02
Certificate serial: 122E0D
Authority key identifier: B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/1a2da50bd93625add8a8491220b64eba9aec0845.roa
Signing time: Fri 24 Mar 2023 08:32:27 +0000
ROA not before: Thu 23 Mar 2023 08:32:27 +0000
ROA not after: Sat 22 Mar 2025 08:32:27 +0000
asID: 271885
IP address blocks: 45.68.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1191437 (0x122e0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fe25a266009db467ead60d5ec947af0402cb02
Validity
Not Before: Mar 23 08:32:27 2023 GMT
Not After : Mar 22 08:32:27 2025 GMT
Subject: CN=1a2da50bd93625add8a8491220b64eba9aec0845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:13:83:8a:a5:05:6b:d5:29:28:c8:19:9e:
b6:1b:ba:70:68:ef:56:3a:5a:5d:d4:a2:e0:91:1f:
2c:a0:42:09:3a:f7:40:61:66:7b:56:d8:84:1d:e4:
25:6f:fd:d3:73:c5:29:20:32:76:49:01:0c:78:c6:
d0:ef:1b:04:42:23:21:78:05:6a:e3:a9:53:40:1c:
6d:53:79:a4:8e:fc:17:43:72:dc:5b:28:49:8a:64:
8b:cc:b1:0e:dc:f8:59:17:40:32:80:bc:fa:14:96:
c8:54:89:06:86:09:b1:b7:94:c6:f3:14:65:ec:f6:
44:2a:df:ce:27:73:68:35:95:e0:b2:42:3e:4f:8d:
a6:f4:f8:b9:eb:f9:92:61:29:ff:12:14:e4:9b:16:
1d:3b:55:8b:74:68:cb:0b:25:f7:19:1b:f7:c8:e6:
09:cd:7d:3a:c9:4f:24:52:9e:17:7e:e0:e4:54:a5:
94:e9:f2:97:1f:75:64:0c:42:a4:79:5f:05:85:a0:
dd:4c:e4:49:b2:ff:5e:d1:48:1e:bd:4b:a3:c0:1b:
68:59:e0:40:dd:b3:81:1d:58:00:a1:fc:36:0f:dd:
f9:11:5e:37:ba:22:f8:50:6a:95:07:a0:05:06:cd:
c3:77:af:11:5a:f4:2e:b5:bf:5f:9e:17:a6:11:0a:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:E3:21:7A:19:55:F0:50:2C:2B:25:6D:FB:A4:48:3A:71:99:1B
X509v3 Authority Key Identifier:
keyid:B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/1a2da50bd93625add8a8491220b64eba9aec0845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/f6fe25a266009db467ead60d5ec947af0402cb02.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:b8:62:3b:e2:4b:14:d5:0f:1e:e1:e9:9d:5e:0d:38:e5:45:
96:dc:c1:b3:5f:09:a3:9b:0d:2d:5e:1f:f4:b8:32:94:ff:f9:
ce:40:0d:26:33:b8:3d:39:8b:98:c2:d7:3e:d1:2d:91:19:11:
01:f5:e0:44:0f:bb:b8:7e:32:7e:b8:76:cd:af:78:26:91:a7:
75:b3:ac:56:2f:d9:33:b8:57:59:bf:80:fa:aa:bb:46:77:0c:
60:ab:cb:be:6e:7b:3a:8c:ca:5e:2d:dd:ec:0a:5d:55:77:16:
59:6b:ac:d2:96:87:8a:4b:56:83:0c:69:25:ef:b1:f6:ec:81:
06:88:40:e5:1d:9a:3a:60:96:b5:1a:49:3a:ba:c3:15:0f:37:
30:f7:9f:64:07:06:08:a1:d1:6d:64:0c:ee:e1:54:64:3f:47:
3f:c6:82:5c:45:dc:73:0f:50:86:10:7f:83:bf:da:34:b8:f6:
17:92:71:ab:4a:66:dc:3a:55:b4:80:26:56:34:a6:a0:aa:7d:
64:1d:ce:dc:8b:66:ad:d4:04:98:1b:f3:33:d1:56:26:9d:64:
16:95:31:0f:39:d5:66:a5:bb:37:e4:ec:17:59:98:80:a3:0a:
42:b0:ac:7a:c0:dd:d5:68:53:74:58:47:7c:ba:20:8f:03:68:
cc:2b:ce:d7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEi4NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY2
ZmUyNWEyNjYwMDlkYjQ2N2VhZDYwZDVlYzk0N2FmMDQwMmNiMDIwHhcNMjMwMzIz
MDgzMjI3WhcNMjUwMzIyMDgzMjI3WjAzMTEwLwYDVQQDEygxYTJkYTUwYmQ5MzYy
NWFkZDhhODQ5MTIyMGI2NGViYTlhZWMwODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp0QTg4qlBWvVKSjIGZ62G7pwaO9WOlpd1KLgkR8soEIJOvdA
YWZ7VtiEHeQlb/3Tc8UpIDJ2SQEMeMbQ7xsEQiMheAVq46lTQBxtU3mkjvwXQ3Lc
WyhJimSLzLEO3PhZF0AygLz6FJbIVIkGhgmxt5TG8xRl7PZEKt/OJ3NoNZXgskI+
T42m9Pi56/mSYSn/EhTkmxYdO1WLdGjLCyX3GRv3yOYJzX06yU8kUp4XfuDkVKWU
6fKXH3VkDEKkeV8FhaDdTORJsv9e0UgevUujwBtoWeBA3bOBHVgAofw2D935EV43
uiL4UGqVB6AFBs3Dd68RWvQutb9fnhemEQryZwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIWf4yF6GVXwUCwrJW37pEg6cZkbMB8GA1UdIwQYMBaAFLTn/X42I4IjwwwD
kfMr578xD+gsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjZmZTI1
YTI2NjAwOWRiNDY3ZWFkNjBkNWVjOTQ3YWYwNDAyY2IwMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDEzOGNmMDktNTFlYy00M2Q5LWFkYzgtNGFiYTBk
YTM5ODA4LzFhMmRhNTBiZDkzNjI1YWRkOGE4NDkxMjIwYjY0ZWJhOWFlYzA4NDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMTM4Y2YwOS01MWVjLTQzZDktYWRjOC00YWJh
MGRhMzk4MDgvZjZmZTI1YTI2NjAwOWRiNDY3ZWFkNjBkNWVjOTQ3YWYwNDAyY2Iw
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi1EBDANBgkqhkiG9w0BAQsFAAOCAQEAqbhiO+JLFNUPHuHp
nV4NOOVFltzBs18Jo5sNLV4f9LgylP/5zkANJjO4PTmLmMLXPtEtkRkRAfXgRA+7
uH4yfrh2za94JpGndbOsVi/ZM7hXWb+A+qq7RncMYKvLvm57OozKXi3d7ApdVXcW
WWus0paHiktWgwxpJe+x9uyBBohA5R2aOmCWtRpJOrrDFQ83MPefZAcGCKHRbWQM
7uFUZD9HP8aCXEXccw9QhhB/g7/aNLj2F5Jxq0pm3DpVtIAmVjSmoKp9ZB3O3Itm
rdQEmBvzM9FWJp1kFpUxDznVZqW7N+TsF1mYgKMKQrCsesDd1WhTdFhHfLogjwNo
zCvO1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org