Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/41e704d4ac48dbf8aa2e07803ddff30a8a4f0fed.roa
File: 41e704d4ac48dbf8aa2e07803ddff30a8a4f0fed.roa (raw, json)
Hash identifier: zDawiHTGM+D/kgV6xDx6y4eydWA5+f852PRb9VBJVRo=
Subject key identifier: 75:BC:CA:37:01:17:BE:C9:98:89:94:A5:F6:E4:C2:89:FC:F5:95:30
Certificate issuer: /CN=b13d071b46d68829a9388770c45592a3ff309e4d
Certificate serial: 132965
Authority key identifier: 53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/41e704d4ac48dbf8aa2e07803ddff30a8a4f0fed.roa
Signing time: Tue 05 Apr 2022 14:52:30 +0000
ROA not before: Tue 05 Apr 2022 03:00:00 +0000
ROA not after: Thu 05 Apr 2029 03:00:00 +0000
asID: 269910
IP address blocks: 45.191.84.0/22 maxlen: 24
2803:ece0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1255781 (0x132965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13d071b46d68829a9388770c45592a3ff309e4d
Validity
Not Before: Apr 5 03:00:00 2022 GMT
Not After : Apr 5 03:00:00 2029 GMT
Subject: CN=41e704d4ac48dbf8aa2e07803ddff30a8a4f0fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:a9:d0:1f:49:f3:0a:e2:ac:e0:ba:7d:9e:
9d:17:66:94:e5:4b:fa:b5:36:3b:5c:e2:cc:b1:d0:
0a:3b:52:bf:a9:fc:36:92:cf:e8:e9:c4:14:4e:43:
ed:fd:a3:54:fd:b2:36:fb:47:82:0b:2b:ac:b2:84:
76:4c:57:b9:97:28:6c:67:36:31:13:08:d9:0c:22:
03:7a:1d:28:37:1d:9b:98:d5:d8:11:53:70:48:89:
ac:80:cb:9c:4e:6d:5b:c0:28:97:cb:72:d3:a0:28:
d9:91:c0:69:0a:ca:ea:1d:4a:1a:0a:64:0c:0f:d3:
57:f2:f7:c1:41:ff:e6:aa:46:df:c3:b0:53:ee:d4:
cc:68:9e:36:d9:46:c6:02:ad:dd:53:f0:e3:a9:93:
8c:26:b8:e7:b9:cb:02:72:8c:2b:3c:31:01:fc:a5:
39:cd:d4:0e:40:a3:81:81:da:ea:de:69:9b:be:49:
30:73:15:8f:8e:79:37:10:94:90:ba:7f:af:c3:e9:
0e:96:84:61:f3:cc:fa:00:11:16:76:0f:8c:ae:b2:
4b:df:e0:56:d5:15:d4:2e:cc:5c:59:5d:64:cf:2b:
70:87:5d:33:89:47:8a:2c:14:95:64:fa:bb:8a:1d:
b7:d2:bd:49:0e:87:97:e7:3c:1f:00:52:79:fa:cc:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BC:CA:37:01:17:BE:C9:98:89:94:A5:F6:E4:C2:89:FC:F5:95:30
X509v3 Authority Key Identifier:
keyid:53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/41e704d4ac48dbf8aa2e07803ddff30a8a4f0fed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/b13d071b46d68829a9388770c45592a3ff309e4d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.84.0/22
IPv6:
2803:ece0::/32
Signature Algorithm: sha256WithRSAEncryption
80:45:14:88:90:ca:07:e9:c2:f6:ba:56:3a:53:8a:82:ba:64:
5f:2e:16:69:fe:4d:4e:4f:76:e4:b4:cb:42:0b:56:ea:20:4e:
a0:ab:55:42:5c:73:b2:82:76:fb:c6:38:c1:1c:51:95:74:ec:
d8:d4:3e:8b:be:c0:c6:4c:83:9a:22:8e:e2:a4:ea:ad:7a:88:
f4:b4:26:8a:85:68:ed:b5:f8:a5:47:7f:ac:37:05:92:b6:34:
af:ec:e2:1b:1e:5c:a6:89:04:ba:7e:c3:ae:34:9b:55:68:e6:
b5:5f:91:0d:fe:99:0d:33:ba:90:00:11:ad:25:3a:23:7c:b0:
d7:74:be:58:cb:ea:65:9e:7a:a8:2d:9f:9a:ab:3a:5f:de:49:
f2:65:4b:6f:f5:77:25:e5:2b:28:67:d0:3c:30:3a:46:71:88:
94:74:50:ab:63:40:c7:90:b6:76:87:2c:10:82:f2:4b:d3:0a:
e6:7d:d8:ab:37:35:28:e8:8a:d9:ae:03:33:d1:c1:90:60:1b:
e7:47:c5:be:b2:8f:a9:8c:65:6b:17:3d:83:63:c2:e4:19:da:
3c:cb:50:f1:e4:93:ba:d6:9c:b9:60:a5:f6:95:c7:b6:ad:91:
ac:6d:73:98:0b:a4:55:0d:8c:c2:f4:7c:8d:bf:58:07:70:5a:
a6:d1:e0:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEyllMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx
M2QwNzFiNDZkNjg4MjlhOTM4ODc3MGM0NTU5MmEzZmYzMDllNGQwHhcNMjIwNDA1
MDMwMDAwWhcNMjkwNDA1MDMwMDAwWjAzMTEwLwYDVQQDEyg0MWU3MDRkNGFjNDhk
YmY4YWEyZTA3ODAzZGRmZjMwYThhNGYwZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxCyp0B9J8wrirOC6fZ6dF2aU5Uv6tTY7XOLMsdAKO1K/qfw2
ks/o6cQUTkPt/aNU/bI2+0eCCyussoR2TFe5lyhsZzYxEwjZDCIDeh0oNx2bmNXY
EVNwSImsgMucTm1bwCiXy3LToCjZkcBpCsrqHUoaCmQMD9NX8vfBQf/mqkbfw7BT
7tTMaJ422UbGAq3dU/DjqZOMJrjnucsCcowrPDEB/KU5zdQOQKOBgdrq3mmbvkkw
cxWPjnk3EJSQun+vw+kOloRh88z6ABEWdg+MrrJL3+BW1RXULsxcWV1kzytwh10z
iUeKLBSVZPq7ih230r1JDoeX5zwfAFJ5+sw8HwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHW8yjcBF77JmImUpfbkwon89ZUwMB8GA1UdIwQYMBaAFFMGfRswbItLnJQH
+mkG2HSPpt+GMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjEzZDA3
MWI0NmQ2ODgyOWE5Mzg4NzcwYzQ1NTkyYTNmZjMwOWU0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDRkMGIxZTMtYjNmYi00MjYzLTgyNDgtYTA3ZTY3
ZTlmNzkzLzQxZTcwNGQ0YWM0OGRiZjhhYTJlMDc4MDNkZGZmMzBhOGE0ZjBmZWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNGQwYjFlMy1iM2ZiLTQyNjMtODI0OC1hMDdl
NjdlOWY3OTMvYjEzZDA3MWI0NmQ2ODgyOWE5Mzg4NzcwYzQ1NTkyYTNmZjMwOWU0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2/VDANBAIAAjAHAwUAKAPs4DANBgkqhkiG9w0BAQsFAAOC
AQEAgEUUiJDKB+nC9rpWOlOKgrpkXy4Waf5NTk925LTLQgtW6iBOoKtVQlxzsoJ2
+8Y4wRxRlXTs2NQ+i77AxkyDmiKO4qTqrXqI9LQmioVo7bX4pUd/rDcFkrY0r+zi
Gx5cpokEun7DrjSbVWjmtV+RDf6ZDTO6kAARrSU6I3yw13S+WMvqZZ56qC2fmqs6
X95J8mVLb/V3JeUrKGfQPDA6RnGIlHRQq2NAx5C2docsEILyS9MK5n3Yqzc1KOiK
2a4DM9HBkGAb50fFvrKPqYxlaxc9g2PC5BnaPMtQ8eSTutacuWCl9pXHtq2RrG1z
mAukVQ2MwvR8jb9YB3BaptHgEA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org