Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ea7b16c2402cabcdb30cad17cb29e6da4c4802da.roa
File: ea7b16c2402cabcdb30cad17cb29e6da4c4802da.roa (raw, json)
Hash identifier: HHWok6FF/SMzuSTjI2AU1Qhq2xvBBPPDyewVQ3yaZNU=
Subject key identifier: 23:EA:13:F7:DA:0F:7F:23:51:0F:CC:90:1E:AC:40:18:9F:2C:F4:1B
Certificate issuer: /CN=ba308093e64c97bdb011354807c2065ac693e761
Certificate serial: 25E37A
Authority key identifier: 1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ea7b16c2402cabcdb30cad17cb29e6da4c4802da.roa
Signing time: Tue 09 Jan 2024 12:49:00 +0000
ROA not before: Tue 09 Jan 2024 12:49:00 +0000
ROA not after: Fri 09 Jan 2026 12:49:00 +0000
asID: 269804
IP address blocks: 45.167.124.0/23 maxlen: 24
45.167.126.0/24 maxlen: 24
2803:b5a0::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2483066 (0x25e37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba308093e64c97bdb011354807c2065ac693e761
Validity
Not Before: Jan 9 12:49:00 2024 GMT
Not After : Jan 9 12:49:00 2026 GMT
Subject: CN=ea7b16c2402cabcdb30cad17cb29e6da4c4802da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:eb:bd:e9:f7:2f:e7:0b:41:9e:31:60:2d:
59:27:db:f3:74:be:cc:99:a9:c3:e4:60:2e:45:1f:
b9:e3:8e:ad:82:77:6d:69:08:82:7b:91:bc:14:b3:
34:09:14:ef:c4:c1:f7:3f:59:5b:31:8a:5c:bc:fd:
c3:1e:0e:96:f5:77:b3:e4:12:f2:77:87:c0:70:20:
3f:e3:ff:6e:fe:f5:3e:26:3c:e5:1b:7b:8f:96:3b:
e7:09:68:5b:06:ec:ec:ea:79:66:37:7c:c7:84:81:
e8:2d:79:e8:ed:0d:f3:11:44:02:c8:86:4b:80:c1:
7a:bf:27:23:0c:b6:59:11:57:14:6a:a8:a8:06:fc:
e5:16:6d:b4:73:b7:9c:07:c5:37:08:a3:81:60:03:
c6:c9:3c:94:6d:28:5b:55:bf:6c:ea:a9:b7:09:72:
6a:a1:77:7f:b5:18:c7:4b:e1:e8:74:24:d5:f5:70:
37:ea:d5:fa:33:d1:45:1b:5f:b7:52:44:0b:bd:e9:
84:1a:fe:53:c5:be:c9:47:de:a7:c3:8c:65:4f:d9:
63:da:a5:06:a4:6d:d3:90:e3:e1:cd:c3:b6:b7:b4:
63:fb:02:7d:b1:04:43:e3:4a:06:4d:0f:a7:f4:c1:
9f:1f:17:ae:a4:3e:a1:2b:0e:c1:0a:06:79:20:6c:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:13:F7:DA:0F:7F:23:51:0F:CC:90:1E:AC:40:18:9F:2C:F4:1B
X509v3 Authority Key Identifier:
keyid:1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ea7b16c2402cabcdb30cad17cb29e6da4c4802da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ba308093e64c97bdb011354807c2065ac693e761.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.124.0-45.167.126.255
IPv6:
2803:b5a0::/32
Signature Algorithm: sha256WithRSAEncryption
59:71:8c:03:8c:78:f0:47:47:bb:c3:6e:4a:5a:d9:9d:25:ff:
cd:dc:d1:86:4e:c9:48:dc:b7:03:40:8a:f9:6d:a9:a6:3b:00:
c6:c1:9d:bb:63:f1:22:03:d0:20:1a:cd:76:bb:34:e2:4f:d5:
b8:82:24:8a:ce:67:ef:f3:42:67:5b:9e:1a:66:9b:7d:9c:49:
5a:27:5f:01:56:13:0b:c6:7d:28:1a:de:1e:c4:cb:71:c7:6c:
aa:cb:bb:d6:6d:2a:d3:58:03:fe:b8:6b:81:ee:49:3f:31:4d:
8c:81:4c:fb:4c:84:c9:6b:f2:b0:9c:e9:a2:8f:b7:c7:a1:ec:
60:61:2f:b3:87:91:9f:38:24:86:6c:a6:a7:04:83:cc:9c:bf:
d4:f1:59:d5:7c:63:41:a3:5a:3b:c2:7b:69:15:81:be:94:d4:
c0:a1:9f:16:eb:92:ab:16:60:e4:2e:86:57:19:c6:3c:09:d8:
2a:9f:7d:5f:82:4b:0e:ca:c2:44:f7:60:f0:31:d4:ea:34:46:
ad:88:c5:18:05:94:2a:76:43:a0:0f:55:30:11:53:28:15:a7:
8f:08:0c:4c:fb:dc:94:17:14:98:9a:7e:b6:93:ea:34:44:a0:
a1:fc:42:c3:6c:9f:89:01:dd:4b:1b:46:75:59:e6:d1:98:46:
36:8b:e4:a0
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDJeN6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJh
MzA4MDkzZTY0Yzk3YmRiMDExMzU0ODA3YzIwNjVhYzY5M2U3NjEwHhcNMjQwMTA5
MTI0OTAwWhcNMjYwMTA5MTI0OTAwWjAzMTEwLwYDVQQDEyhlYTdiMTZjMjQwMmNh
YmNkYjMwY2FkMTdjYjI5ZTZkYTRjNDgwMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzyrrven3L+cLQZ4xYC1ZJ9vzdL7MmanD5GAuRR+5446tgndt
aQiCe5G8FLM0CRTvxMH3P1lbMYpcvP3DHg6W9Xez5BLyd4fAcCA/4/9u/vU+Jjzl
G3uPljvnCWhbBuzs6nlmN3zHhIHoLXno7Q3zEUQCyIZLgMF6vycjDLZZEVcUaqio
BvzlFm20c7ecB8U3CKOBYAPGyTyUbShbVb9s6qm3CXJqoXd/tRjHS+HodCTV9XA3
6tX6M9FFG1+3UkQLvemEGv5Txb7JR96nw4xlT9lj2qUGpG3TkOPhzcO2t7Rj+wJ9
sQRD40oGTQ+n9MGfHxeupD6hKw7BCgZ5IGzb2wIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFCPqE/faD38jUQ/MkB6sQBifLPQbMB8GA1UdIwQYMBaAFB+kiMfgFA0WQD5P
GGdKPsJw+fIQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmEzMDgw
OTNlNjRjOTdiZGIwMTEzNTQ4MDdjMjA2NWFjNjkzZTc2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDQ4NDEwMTItYjNjYi00NTdhLTk5OTYtYTY3ZGVm
YjU0OWQ1L2VhN2IxNmMyNDAyY2FiY2RiMzBjYWQxN2NiMjllNmRhNGM0ODAyZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNDg0MTAxMi1iM2NiLTQ1N2EtOTk5Ni1hNjdk
ZWZiNTQ5ZDUvYmEzMDgwOTNlNjRjOTdiZGIwMTEzNTQ4MDdjMjA2NWFjNjkzZTc2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwFAQCAAEwDjAMAwQCLad8AwQALad+MA0EAgACMAcDBQAoA7WgMA0GCSqGSIb3
DQEBCwUAA4IBAQBZcYwDjHjwR0e7w25KWtmdJf/N3NGGTslI3LcDQIr5bammOwDG
wZ27Y/EiA9AgGs12uzTiT9W4giSKzmfv80JnW54aZpt9nElaJ18BVhMLxn0oGt4e
xMtxx2yqy7vWbSrTWAP+uGuB7kk/MU2MgUz7TITJa/KwnOmij7fHoexgYS+zh5Gf
OCSGbKanBIPMnL/U8VnVfGNBo1o7wntpFYG+lNTAoZ8W65KrFmDkLoZXGcY8Cdgq
n31fgksOysJE92DwMdTqNEatiMUYBZQqdkOgD1UwEVMoFaePCAxM+9yUFxSYmn62
k+o0RKCh/ELDbJ+JAd1LG0Z1WebRmEY2i+Sg
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org